From the course: Implementing the NIST Risk Management Framework
Unlock the full course today
Join today to access over 22,700 courses taught by industry experts or purchase this course individually.
Completing a business impact analysis (BIA)
From the course: Implementing the NIST Risk Management Framework
Completing a business impact analysis (BIA)
- [Instructor] An item that works with an asset inventory is a Business Impact Analysis or BIA. It's a form of a risk assessment to understand a business's critical assets and helps determine the priority for protection and recovery. The BIA should identify the operational and financial impacts resulting from the disruption of business functions and processes. Impacts to consider include lost sales and income, any delayed sales or income, increased expenses such as overtime labor, outsourcing, expediting costs, et cetera, regulatory fines, contractual penalties or loss of contractual bonuses, customer dissatisfaction or defection, and a delay of new business plans. In conducting a BIA, I suggest using a BIA questionnaire to survey those within the business who have detailed knowledge of how the business works. Ask them to identify the potential impacts if the business function or process that they are responsible for is…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.