Business Continuity and Disaster Recovery

Business impact analysis is a critical part of the business continuity planning process. This step quantifies data and gets into the real world issue of potential losses that can negatively impact your business. It is used to understand the most important impacts and how to best protect your people, processes, data, communications, assets and the organization's goodwill and reputation.

Organizations often think in terms of disaster recovery. Business continuity and the business impact analysis is more focused on keeping the business up and running and less focused on recovery after a disaster. The business impact analysis also is not focused only on the potential disasters, but on all potentially critical discontinuities. Key elements of the Business Impact Analysis are to identify critical business functions, establish the maximum acceptable outage time for each of these functions and then to determine the impact of not performing those functions. This can be measured against regulatory, legal, financial, operations or customer service requirements.

Once the adequacy of security and controls is evaluated and critical business functions and outage times are defined, the business continuity planner needs to develop an understanding of the probability of threats factored by the severity or impact and to start to develop a cost benefit analysis of the largest impact and highest probability threats.

It's virtually impossible to create an absolute value and prioritization of threats and impacts. Generally, a relational system is used to drive out the key priorities. Often, each threat is evaluated according to its probability and assigned a 1, 5 or 10 rating. Then, each threat is evaluated according to its impact on critical business functions and on the business overall. For example, a discontinuity in a critical business function of less than one hour might receive a value of 0. A discontinuity of one to eight hours might be ranked a 1, eight to twenty four hours might be ranked a 2 and over 24 hours might be ranked a 3. Obviously, these rankings need to be developed on a company specific basis. Probability factored by impact creates the relational prioritization list.

This approach to risk evaluation and control allows management to start to quantify the risks and potential impacts on the organization in a thoughtful and analytical way. This results not only in higher quality decisions, but also provides an audit trail that demonstrates that management is paying attention to its risk management responsibilities. These responsibilities might be established by regulatory or legal bodies, demanded as a contractual commitment by customers or simply expected by shareholders as sound and prudent management. The key corporate goals are to protect people, protect assets, protect data and to protect the brand and reputation of the organization.

About The Author

Robert Mahood has significant technology and management experience in data communications, internet, storage, disaster recovery and data recovery. He is currently the president of Midwest Data Recovery. www.midwestdatarecovery.com

bmahood@midwestdatarecovery.com, 312 907 2100 or 866 786 2595

Latest News


Shopping Cart: High-availability data recovery
ITWorld Canada, Canada - 10 hours ago
2008-10-06The need for backup is stronger than ever, and so is the challenge of finding the appropriate one for your specific IT infrastructure. ...

Firms Unite over WAN Recovery Solution
IT Business Edge, KY - 9 hours ago
IBM System i and p users have a powerful new application acceleration/data recovery solution at their disposal, the fruit of a new partnership between ...

"Can't Locate Module <module name>"
American Chronicle, CA - 10 hours ago
These solutions are available in the form of Linux recovery software. Linux data recovery software is the third party applications, specifically designed to ...

Data Recovery: When Does "Gone" Really Mean "Gone"
MarketWatch - Oct 1, 2008
Amidst all of the panic and emotion an accidental deletion can bring is an essential question: When is "gone" really "gone" and when is data recovery ...
Data Recovery: When Does "Gone" Really Mean "Gone" International Business Times
USB Drives Pose Security Threat: Erase Their Sensitive Data With ... MarketWatch
all 11 news articles

Kroll Ontrack Unveils First Independent Data Recovery Solution for ...
MarketWatch - Sep 30, 2008
"According to a 2008 IDC analyst report, Oracle owns 44 percent of the database market," said Jeff Pederson, manager of data recovery operations for Kroll ...

Prepare for Medicare audits by using data mining
SmartBrief, DC - 4 hours ago
... for the Medicare Recovery Audit Contractor program by conducting a thorough self-audit, using data-mining solutions to scrutinize Medicare claims. ...

NetEx Virtual HyperIP Among the Hottest Products at VMWorld
MarketWatch - 10 hours ago
HyperIP is NetEx's award-winning business continuity and disaster recovery optimization solution for backup, recovery and data replication applications. ...

Data recovery tool launched by SoftAmbulance
SC Magazine UK, UK - Oct 3, 2008
SoftAmbulance has announced the release of a data recovery tool to restore data from damaged hard drives. Partition Doctor allows users to recover data and ...

Data center spending stays strong, AFCOM says
New York Times, United States - 8 hours ago
"It comes down to putting in very hard and fast DR [disaster recovery] systems for all the main systems we have for our hospitals, and making sure they are ...

Symantec delivers innovative data & system protection
Moneycontrol.com (press release), India - 8 hours ago
(Nasdaq: SYMC) today announced the latest release of its Backup Exec product family to provide comprehensive data and system recovery of virtual and ...
Cisco, Microsoft Unveil Windows Server Appliance Network Computing
all 3 news articles

Resources