Business Impact Analysis
What is Business Impact Analysis?
A systematic process for identifying and evaluating the potential effects of disruptions to critical business operations and processes.
Terms that appear alongside business impact analysis
Each of these is named in at least one of the same controls as business impact analysis. The number is how many controls name both.
- impact analysis 48 shared controls
- business continuity 15 shared controls
- nist 10 shared controls
- disruption 9 shared controls
- disaster recovery 9 shared controls
- risk assessment 9 shared controls
- resilience 8 shared controls
- crisis management 7 shared controls
Frameworks that govern business impact analysis
What the standards actually require on business impact analysis
Requirements naming business impact analysis across 6 standards, quoted from the control text.
Run and maintain the processes that establish what disruption would cost the organization over time and what could cause it, and refresh both whenever the organization or its operating context changes significantly.
iso-22301-2019::8.2 · Business impact analysis and risk assessment →Since the organization fulfils its purpose through the products and services it supplies to customers, it needs to grasp how disruption to those products and services and to the activities behind them would harm it and its interested parties over time, and to...
iso-22313-2020-guidance-on-business-continuity-management-systems::8.2.1 · 8.2.1 Business impact analysis and risk assessment: general →The entity is required to carry out a business impact analysis that assesses how disruption could affect its operations, its reputation and market share, its capacity to operate or its relationships with key stakeholders, and that identifies the resources and...
nfpa-1600-standard-on-continuity-emergency-and-crisis-management::5.3.1 · 5.3.1 A business impact analysis of how disruption affects operations, reputation, market share, ability to do business and stakeholder relationships →Document, communicate and provide business impact analysis rules covering risk based scenarios, critical products and services, dependencies, threats, effects of planned and unplanned outages over time, maximum tolerable outage, restoration priorities, recover...
C5-BCM-02 · Business impact analysis policies and instructions →Undertakings conduct a business impact analysis assessing exposure to severe business disruptions and their quantitative/qualitative impact using internal/external data and scenario analysis, considering criticality and interdependencies per Guideline 4, and d...
EIOPA-ICTSG-GL.20 · Business impact analysis →Management develops a business impact analysis that identifies all business functions and prioritises them by criticality, analyses the interdependencies among processes, systems, departments, personnel and services, assesses the impact of disruption through e...
ffiec-it-examination-handbook::BCM-III.A · III.A Business Impact Analysis (Business Continuity Management) →Questions people ask about business impact analysis
What is Business Impact Analysis?
Why is Business Impact Analysis important for compliance?
Which compliance frameworks address Business Impact Analysis?
Where can I learn more about Business Impact Analysis?
See how Business Impact Analysis applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.