Appendix
Sample Documents
Business Impact Analysis Questionnaire
Please answer the questions with the following disaster scenario in mind:
- IT has experienced a major failure in the data center and the ability to supply computing services is completely destroyed.
- All systems, applications, data, and other support systems are not available.
- Your personnel will not be lost.
- Your primary business processes will be affected immediately and for up to at least 7 days.
- When the systems become available there will be a data loss of 24 hours.
- The disaster occurs during a peak processing period in your business unit.
Please supply the following information about your business unit:
Business Unit Name:___________________________________________
Business Unit Owner:___________________________________________
Phone Number:___________________Cell Number:__________________
Email Address:_______________
Business Unit Process Description
In the space below, please list the primary business processes that must be executed by your business unit on a regular basis.
Operational Priorities
In the event of a disaster, when must your primary processes be performed? Please mark the appropriate response:
- They must be performed as regularly scheduled.
- They can be performed following the disaster as time and resources become available.
Operational Impacts
A disaster can affect the company in many different ways. The company may certainly lose revenue opportunities if key processes cannot be performed during a disaster period. In addition, the company may also be affected operationally in other ways if these processes cannot be performed as scheduled.
Please respond to each of the following operational impact questions.
- - What types of business impacts will be experienced by the company if your primary business processes are not performed immediately following a disaster?
- - How long could your processes be idled before the company would be substantially harmed in some way? one hour, 12 hours, 1 day or longer ?
Customer Service
Identify the earliest day that customer service would be impacted in a significant negative manner because your processes could not be performed.
Examples : The following processes would have an immediate impact to Customer Service: Product Distribution, Customer Response, SLA, JIT.
Circle the earliest time or day of significant negative impact.
Cash Flow/Revenue
Identify the earliest day that cash flow or revenue would be impacted in a significant negative manner because your processes could not be performed.
Examples The following processes would have an immediate impact to Cash Flow/Revenue: Customer Sales, Accounts Receivables, or Sales Support Teams.
Circle the earliest time or day of significant negative impact.
Regulatory (If Applicable)
Identify the earliest day that the companys regulatory compliance requirements and objectives would be impacted in a significant negative manner because your processes could not be performed.
Examples The following processes would have an immediate impact on our ability to meet regulatory requirements: Regulatory Affairs (FDA Filings), Contract Operations (Customer Contracts), or Financial Filings.
Circle the earliest day or time of significant negative impact.
Increases in Liability
Identify the earliest day that the company could face a significant increase in liabilities because your processes could not be performed.
Examples The following processes would have the potential to significantly increase company liability: JIT, SLA, Penalties, Regulatory Affairs (FDA Filings or SEC Requests for Information), or other filings.
Circle the earliest hour or day of significant negative impact.
State Financial Impact ______________________________________
Vendor Relations
Identify the earliest day that vendor relations would be impacted in a significant negative manner because your processes could not be performed.
Examples The following processes would have the potential to significantly impact vendor relations: Accounts Payable (Payments and Inquiries), Purchasing (Purchase Orders), or Legal (Contracts). JIT, Dependent Partners.
Circle the earliest hour or day of significant negative impact.
State Financial Impact ______________________________________
Financial Control/Reporting
Identify the earliest day that financial control/reporting requirement would be impacted in a significant negative manner because your processes could not be performed.
Examples The following processes have the potential to impede company financial control and reporting: Financial Reporting or Sales Reporting.
Circle the earliest hour or day of significant negative impact.
State Financial Impact ______________________________________
Mission Critical IT Applications
Business units may require the timely access to and use of certain key mission critical information technology applications.
Using the table below, please identify the top mission critical applications that your business unit must have use of in order to accomplish your critical processes during a business recovery effort. The following information is required for each of the applications:
- Application NameProvide the specific name of application
- Application PriorityUsing the numbers 1-6, prioritize the order in which the applications must be made available
- Maximum OutageSpecify the maximum number of days (Hours) without use of the application that can be tolerated without significant impact.
Mission Critical Application Name | Application Priority | Maximum Outage |
---|
Vulnerability
Some processes may be more vulnerable to a prolonged disruption or outage than others. There could be several reasons:
- - The process may involve new or complex information processing technology.
- - The process may involve older technology that requires considerable maintenance and is susceptible to major breakdowns.