Top five business impact assessment considerations


Top five business impact assessment considerations

What are the five most important things to consider when conducting business impact assessments?

Continue Reading This Article

Enjoy this article as well as all of our content, including E-Guides, news, tips and more.

By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.

You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

Safe Harbor

The assessment must be approached from a business perspective rather than an IT perspective:

  1. Identify the key services a company provides. These can be internal services such as payroll and inventory or external services such as production, sales and transaction processing.
  2. Identify the tools used to provide those key services. These tools, also known as dependencies, can be a process, staff, a phone system, an application, etc.
  3. Determine the maximum length of time a key service can be interrupted before the company starts incurring financial losses or is impacted in other ways. This will dictate the service's resumption or recovery objective. We can now start drawing a parallel between the recovery objective for a service and the recovery objective for the application(s) on which the service depends; this becomes the recovery time objective (RTO).
  4. The impact, financial or otherwise, must be quantified or rated in order to rank criticality and recovery priority.
  5. Use the output of the risk assessment in conjunction with the business impact assessment to determine the appropriate risk mitigation or recovery strategy.

This was previously published on

This was first published in August 2012