A business impact analysis (BIA) predicts the consequences of a disruption to your business, and gathers information needed to develop recovery strategies. Potential loss scenarios should be identified during a risk assessment.
Identifying and evaluating the impact of disasters on business provides the basis for investment in prevention and mitigation strategies.
Business Disruption Scenarios to Consider
- Physical damage to a building
- Damage to or breakdown of machinery, systems or equipment
- Restricted access to a site or building
- Interruption of the supply chain including failure of a supplier or disruption of transportation of goods from the supplier
- Utility outage (e.g., electrical power or water outage)
- Damage to, loss or corruption of information technology including voice and data communications, servers, computers, operating systems, applications, and data
Potential Impacts
The BIA should identify the operational and financial impacts resulting from the disruption of business. Possible effects to consider include:
- Lost sales and income
- Delayed sales or income
- Increased expenses (e.g., overtime labor, outsourcing, expediting costs, etc.)
- Regulatory fines
- Contractual penalties or loss of contractual bonuses
- Customer dissatisfaction or defection
- Delay of new business plans
Timing and Duration of Disruptive Event
The point in time when a business function or process is disrupted can have a significant bearing on the loss sustained. A store damaged in the weeks prior to the holiday shopping season may lose a substantial amount of its yearly sales. A power outage lasting a few minutes would be a minor inconvenience for most businesses, but one lasting for hours could result in significant business losses. A short duration disruption of production may be overcome by shipping finished goods from a warehouse but disruption of a product in high demand could have a significant impact.
Conducting the BIA
Use a BIA questionnaire to survey managers and others within the business. Survey those with detailed knowledge of how the business manufactures its products or provides its services. Ask them to identify the potential impacts if the business function or process that they are responsible for is interrupted. The BIA also should identify the critical business processes and resources needed for the business to continue to function at different levels.
BIA Report
The BIA report should document the potential impacts resulting from the disruption of business functions and processes. Scenarios resulting in significant business interruption should be assessed in terms of financial impact, if possible. These costs should be compared with the costs for possible recovery strategies.
The BIA report should prioritize the order of events for restoring business functions. Business processes with the greatest operational and financial impacts should be restored first.