Expert Advice Community

Guest

Business Impact Analysis

  Quote
Guest
Guest user Created:   Dec 18, 2018 Last commented:   Dec 18, 2018

Business Impact Analysis

I work for a large global company and I’m currently performing the Business Impact Analysis for the UK which includes 15 different departments. So for each Business Impact Analysis questionnaire I completed them for the department as a whole rather than by each different activity so there’s a Business Impact Analysis for Finance, another for HR etc. So when I complete the Activity Recovery Strategy it will be per department.
0 0

Assign topic to the user

ISO 27001/ISO 22301 BUSINESS CONTINUITY PLAN

Define the steps for recovering your business from disruption.

ISO 27001/ISO 22301 BUSINESS CONTINUITY PLAN

Define the steps for recovering your business from disruption.

Expert
Rhand Leal Dec 18, 2018

Is this correct? Is this how they can be completed and meet the requirements for ISO 23001.

Answer:

ISO 22301 does not prescribe how Business Impact Analysis must be performed, only that you have to perform this task, so your approach to define recovering activities for a department as a whole rather than by each different activity will also meet the requirements for ISO 23001.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Dec 18, 2018

Dec 18, 2018