Business Impact Analysis (BIA)
Business Impact Analysis: an assessment of which processes are critical and how quickly they must be restored after a disruption.
The BIA is the foundation of business continuity. For each process you ask: what does an hour of downtime cost, at what point does it become a crisis, and what does this process depend on? The answers produce priorities and the RTO and RPO parameters.
Without a BIA you end up writing continuity plans for everything equally, while your budget and time are only sufficient for the handful of genuinely critical items. That is why the BIA comes before the plans, not after.
The BIA also serves as the reference point for DORA: the RTO required by a process (from the BIA) must align with the RTO committed to in the vendor contract. A gap between the two is the classic risk that needs to be caught.
In practice: see the relevant RealSec module.
The maximum time within which a process or system must be restored to operation after a disruption.
The maximum amount of data that can be lost after a disruption, expressed as a time interval (e.g., the last hour of data).
Standard for a Business Continuity Management System (BCMS). How to keep critical processes running when something goes wrong.
Compliance that connects.
Terms are the map. RealSec ties them to processes, systems and vendors in one engine.