Business impact analysis
A business impact analysis evaluates disruption consequences and dependencies to inform recovery requirements and priorities.
Method: Identify supported processes and the effects of their interruption, the resources they need, and recovery priorities. Process owners help determine acceptable downtime and data loss. [1]
Storage decisions: These requirements inform backup frequency, recovery architecture and retained recovery points. Dependants must have compatible objectives, and impact can rise sharply after a deadline rather than increasing at a constant rate. [2]
Relations
- related
- Maximum tolerable downtime, Recovery time objective, Recovery point objective, Backup, Restore test
Limitations
- Recovery objectives still need to be tested against the implemented recovery strategy. [2]
Citations
- NIST SP 800-34 Rev. 1 (2010), sections 3.2 and 3.5: impact, recovery objectives and testing
- AWS Well-Architected Framework (2024-06-27), REL13-BP01: recovery objectives and dependencies