Business Impact Analysis

a business continuity plan starting with a risk analysis, business impact analysis, and alignment of critical

Qantas is Australia’s largest domestic and international airline. Although Qantas is primarily a passenger airline, air freight is also an integral part of its core business. Other Qantas operations include catering, tourism and E-commerce devoted to transport and travel. In order to have an effective business and operations process, a company, like Qantas must be aware of the influences that can affect it. By being aware of the influences it enables the business to make decision and choices that can get the most out of each influence, by doing this it can assist the business in its endeavours for success.

Our company’s Continuity Management Program (CMP) dictates that the business adheres to an annual testing program. The program does utilize the guidelines from the Homeland Security Exercise and Evaluation Program (HSEEP). The Continuity Management team has written and scripted into our process to incorporate our Tabletop Exercise’s (TTX’s). Our annual process is to test each of our business units for resiliency. TTX’s allows for us to open up discussions and dialogues focusing on many different areas in the event we need to declare. Also, the exercises aid in discovering any gaps and working through each tier of the recovery process. Our business lines have Recovery Time Objectives (RTO’s) starting at 1 hour up to 72 hours. During the TTX’s we cover the business impact analysis (BIA’s ) and each of the RTO’s.

The overall objective of the BIA is to identify the impact of outages. More specifically, the goal is to identify the critical functions that can affect the organization. After these you can identify the critical resources that support these functions. Each resource has a MAO and impact if it fails. The ultimate goal is to identify the recovery requirements.

How does risk management and risk assessment relate to a business impact analysis for an IT infrastructure? They relate because it is

The goal is to minimize the impact of any disruption by containing it within a predictable and predetermined period of time. To do this, I recommend that this plan be developed and implemented with as many preventative controls, contingency resources, and procedures designed to allow the organization to quicky bounce back from any long-term business

Rapid recovery from tremulous disruption can be achieved when the elements of resilience are present and utilise and the organisation can manage to bounce back to a stable operational state similar to the state before the initial change.

4. What is the definition of Recovery Time Objective (RTO)? Why is this important to define in an IT Security Policy Definition as part of the Business Impact Analysis (BIA) or Business Continuity Plan (BCP)? Is the targeted duration of time and a service level within which a business process must be restored after a disaster (or disruption) in order to avoid unacceptable consequences associated with a break in business continuity. The reason for identifying security policy definitions is to make it clear to the organization what these areas are and how you plan to fix them.

Paid time off (PTO) is the system employer use to accumulate all kind of leaves as sick days, vacation days, and personal days that allows the employees to use upon need. this policy works mostly in the USA as such no legal obligation for a minimum number of paid vacation days. the PTO works best in the culture and accountable employee’s environment existing. US company’s regulator the amount off the pay day off that will be allocated to each employee. a general way, PTO system cover, everything from planned vacation to sick leaves .and are becoming more common in human resources management. unlike traditional more plans leave, PTO doesn’t distinguish employee’s absences from personal days or vacation days or sick days. Studies show that majority of the companies start using PTO system prior to the year 2000.

Every business and organization can experience a serious incident which can prevent it from continuing normal operations. This can happen any day at any time. The potential causes are many and varied: flood, explosion, computer malfunction, accident, grievous act... the list is endless.

Disasters have become an inevitable part of businesses and organizations as well. They not only have a major effect on business and organizational continuity; they also result to an overhaul in organizational operational mechanisms (Awasthy, 2009). It is for this reason that many organizations and business resort to preparing business continuity plans and disaster recovery plans that will facilitate better disaster management in future. Effective disaster recovery plans are important to every business and organization (Thejendra, 2008).

Disaster recovery is the process of an organisation uses to recover access the data, and also hardware that are needed to recollect the performance to be in normal position after a disaster occurs. While disaster recovery plans have to be focus in every aspect in any organisation and bringing the gap closure after destruction it can be like data, hardware, or software have been lost and the manpower that composes much of any organisation.

As a consultant brought into an organization concerned about business continuity I would recommend to first perform a Risk Assessment Analysis and/or Business Impact Analysis (BIA). Conducting a business impact analysis will allow an organization to know the system or application’s downtime tolerance. The analysis will identify all systems and applications that can experience little to no downtime. Conducting risk assessment analysis will allow the organization to identify all the risks at the beginning and during the life of the organization, and grade the risks in terms of likelihood of occurring and seriousness of impact on the organization. Either analysis is an excellent tool and will result in the beginning creations of disaster recovery and business continuity planning. If using the BIA method a good first step is identifying the business’ most crucial systems and processes to assess what effect the outages will have on the business. All systems or applications should have a back-up location offsite to ensure business continuity. The higher the impact the more money a company should spend in order to quickly gain restoration of their business.

Valuable assets, including network connectivity, stored data, processes and procedures, and client information can survive centralized disruption or destruction and can be revived quickly through the agency’s

The team prioritized investments for disaster recovery initiatives, and in conjunction with business unit leaders, designed a tiered model highlighting recovery priorities. These priorities were validated with IT infrastructure leaders to help ensure alignment. As failover