Service offering

Business impact analysis

A ranked list of what must come back first after a disruption, agreed by the people who run each process.

Modern data centre building in the desert at dawn

We run the analysis that tells you which processes matter most and how quickly they must come back: structured workshops with process owners, recovery time and recovery point objectives, and a map of the systems, suppliers and people each process depends on. The results set priorities for recovery planning and investment.

The analysis feeds standards such as NCEMA 7000 in the UAE and SAMA's business continuity management framework in Saudi Arabia, both of which make impact analysis the basis for recovery objectives.

What the engagement covers

  • Impact workshops

    Structured sessions with process owners to rate financial, operational, legal and reputational impact over time.

  • Recovery objectives

    Recovery time and recovery point objectives for each process, agreed and signed off by its owner.

  • Dependency mapping

    The systems, suppliers, sites and people each critical process relies on.

  • Business-owned priorities

    Recovery priorities agreed by process owners, not set by IT alone.

  • Tested, not assumed

    Plans exercised regularly, with results and fixes recorded.

When a business impact analysis is due

It is due when recovery plans exist but nobody can say why one system comes back before another.

  • Recovery objectives were set by IT without business owners.
  • The last analysis predates major system or organisational changes.
  • An auditor or regulator has asked for the basis of your recovery priorities.

Talk to us about business impact analysis

Tell us what you need to achieve and by when. We will propose a scope, a team and an itemised quotation.

Start the conversation