Business Continuity Plan - Business Impact Analysis Template

Download Free Business Continuity Plan - Business Impact Analysis Template

University Impact Analysis Form

Section 1 - Business Requirements

1. Business Process Name:
2. Business Process Manager (Name/Title):
3. Business Process Description:
4. Associated Applications:
5. How long can this Business Process continue to function without its usual IT infrastructure available?
- Assume that loss of IT support occurs during your busiest or peak period
- Example: servers are down, users can't access any on-line applications, etc…
- Please check only one

__ Less than 1 day __ Up to 1 month
__ Up to 1 week __ Up to 2 months
__ Up to 2 weeks __ Other:

Comments:

6. Using the following labels, indicate the relative impact of the loss of this Business Process for each of the time frame slots below. Assume the outage is continuous and occurs during a time of peak business activity.

Catastrophic " Out of business and/or endanger public/patient safety

Significant " Major impact on the long term financial status of the University
- Endanger public/patient safety
- Long term impact on University values/goals
- Moderate " Major impact of short-term financial status of the University
- Short term impact on University values/goals
- Minor " No impact to the financial status of the University
- No impact on University values/goals

1 hour:
12 hours:
24 hours:
48 hours:
1 week:
1 month:

Comments:

7. Indicate the peak and/or critical time of year and/or day of the week, if any, for this Business Process. (Check all that apply)
__ January __ Monday __ End of week
__ February __ Tuesday __ End of month
__ March __ Wednesday __ End of quarter
__ April __ Thursday __ End of fiscal year
__ May __ Friday __ End of calendar year
__ June __ Saturday __ Other
__ July __ Sunday
__ August
__ September
__ October
__ November
__ December

Explanation:

8. Future system changes:
Are there any major system changes scheduled in the next 12 months and if so, how will they affect business function/process? If unknown, who should we contact?

9. University decisions impacted:
What University processes/decisions are affected when this service is down?

10. Tangible impact on University:
Yes/No Priority Level (High/Medium/Low)
Reduced Productivity
Increased Expenses
Delayed Collection of Funds
Reduced Income Revenues
Lateness Penalties
Compliance Penalties
Loss of Information Assets
Loss of Private/Personal Information

Please give your best estimate of what the losses would be to the University if this system process is not functioning.
__ Less than $1,000 __ Between $100,000 and $499,999
__ Between $1,000 and $9,999 __ Between $500,000 and $999,999
__ Between $10,000 and $99,999 __ $1,000,000 or more

__ Per hour __ Per day __ Per week __ Per month

Comments:

11. Intangible impact on the University:
Yes/No Priority Level (High/Medium/Low)
Reputation Loss
Loss of Trust/Confidence
Public Safety
Regulatory/Statutory
Loss of Competitive Edge

12. Number of Users and Types of Users: (in-house, consultants, subsystems, etc.)

13. Prerequisite Services needed to be running for this system to run:

14. Major Input Requirements: (systems/processes that feed this service)

15. Major Output Essentials: (systems/processes that feed other services)

16. Feeds/Processing: (may not be applicable)
Type:
__ On-line
__ Batch
__ Other:
__ N/A
Frequency:
__ Daily
__ Weekly
__ Other:
__ N/A
Number of Transactions:
__ Per hour __ Per day __ Per week __ Per month

17. Main Contact for Technical Content:
18. Location of Application/Process:
19. Network needs: (Internet, external, etc.)
20. Additional comments

Section 3 - Business Impact Analysis Sign Off

Business Process Name:
- Business Process Description:
- Criticality Ranking Site or Multi-System Disaster Recovery Time Objective
- Department/Customer Representative Title Date
- University IT Representative Title Date
- Disaster Recovery Coordinator Date
- Date UIA was filed
- Date Restoration Guide updated

Section 4 - Business Continuity Procedures

Technical Outage - Business Continuity Capability
- Are there any documented manual procedures that could be used without access to Technical Resources or usual Information Technology Resources?
- When were the manual procedures last updated, tested or used?
- Additional supplies required? (tables, office supplies, desks, chairs, etc.)
- Additional hardware required? (PC's, modems, terminals, etc.)
- Additional personnel requirements? (office workers, runners, security personnel, etc.)
- At what percentage level would production drop, when utilizing the Technical Outage - Business Continuity plan?
- What is the maximum length of time business can continue to operate under the Technical Outage - Business Continuity plan?
- Personnel Loss - Business Continuity Capability
- Are there any documented procedures that outline personnel roles and responsibilities?
- When were the documented procedures last updated, tested, or used?
- Do you have an alternate way to use/log into the application/tools if key personnel are unavailable?
- Additional hardware required? (PC's, modems, terminals, etc.)
- Do you have the ability to work from a remote location? If so, where? (home, temporary office, etc.)
- What is the maximum length of time business can continue to operate under the Personnel Loss - Business Continuity plan?