Guest user Created: Jun 03, 2021 Last commented: Jun 03, 2021

Business impact analyses questionnaire assistance

We have started with the listing of our assets and need some assistance as I think that we might be on the wrong path here. We have listed most of our hardware / systems that we use and have started with the business impact analyses questionnaires. My question is: Do we list all hardware or systems that we use as activities within the business impact analyses questionnaires or is this questionnaire purely used to document the actual process covered by the individual assets. Please see attached list of assets and we have created a questionnaire for each of these assets. Is this correct?

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Jun 03, 2021

The Business Impact Analysis questionnaire is used to document the impact over time of disruptive events over a business process, not over assets. For this questionnaire, you only identify the assets you need to recover the analyzed process.

For example, you can apply the BIA questionnaire in your payroll process, and after identifying the time you need to recover this process, and the minimum acceptable service level, you can identify which assets you need to recover this process.

Included in the toolkit you bought you have access to a video tutorial that can help you fill in the Business Impact Analysis questionnaire. Please note that BIA is required only for ISO 22301, but not needed for ISO 27001.

This article will provide you a further explanation about performing a BIA:
- How to implement business impact analysis (BIA) according to ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-implement-business-impact-analysis-bia-according-to-iso-22301/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jun 03, 2021

Expert Advice Community