Department: Completed by:
Critical Activity
Seasonal Variations
Name of product or What are the main Working
Ref Identify peak/critical
service activities required to deliver patterns
time of year/month
the product or service
1 Sales Internet Conection
2 IT
3
4
5
6
7
8
9
10
Once you have completed the Business Impact Analysis, please update the 'Date last reviewed' & 'Completed
Date last reviewed: xx/xx/xx
Service Level
Departments you Departments who are
Agreements IT applications used Suppliers Used
are dependent on dependent on you
Time schedules
'Date last reviewed' & 'Completed by', then email to the Business Continuity Manager: [insert email address and ext. number]
Key Telephone
numbers
e.g. Customer
contact point
ss and ext. number]
BUSINESS IMPACT DEFINITIONS
STAFF WELFARE FINANCE
No injuries or threat to staff welfare No financial loss
No Impact No Impact
Minor Minor
Moderate Moderate
Major Major
Critical Critical
BRAND & REPUTATION CUSTOMER SERVICE
No damage to brand & reputation No disruption to customer service
No Impact No Impact
Minor Minor
Moderate Moderate
Major Major
4 / 20
Critical Critical
5 / 20
Name of Product or Service Internet Conection
Time
STAFF WELFARE
4 hrs 1 day 2 days 1 week 1 month
No Impact X X X X X
I
M Minor
P
A
Moderate
C Major
T
Critical
Time
BRAND & REPUTATION
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Time
CUSTOMER SERVICE
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Time
FINANCE
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Time
LEGAL
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Maximum Acceptable
Outage
Unacceptable level of impact
Justification No Impact
Minor
Staff Welfare Moderate
Major
Critical
No Impact
Minor
Brand & Reputation Moderate
Justification Major
Critical
No Impact
Minor
Customer Service Moderate
Major
Critical
No Impact
Justification Minor
Finance Moderate
Major
Critical
No Impact
Minor
Legal Moderate
Major
Justification Critical
The Maximum Acceptable Outage is determined by the shortest time
of an unacceptable level of impact to either:
• Staff Welfare
• Brand & Reputation
• Operational / Customer Service
• Finance
• Legal
Justification Key Products or Services with a Maximum Acceptable Outage of 2
days or less will need to undergo an operational risk assessment to
reduce the impact and likelihood of disruption.
Recovery Time
Objective
vel of impact
determined by the shortest time
either:
imum Acceptable Outage of 2
operational risk assessment to
disruption.
Time
[Name of supplier]
4 HRS 1 day 2 days 1 week 1 month
No Impact X X
I
M Minor X
P Moderate X
A
C Major X
T
Critical
Time
[Name of supplier]
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Time
[Name of supplier]
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Time
[Name of supplier]
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Time
[Name of supplier]
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Justification
Any supplier with an unacceptable level of impact within 1 week
will need to be reviewed to determine their level of resilience.
For new potential suppliers, this will involve doing due diligience t
assess their level of business continuity before signing a contract.
the supplier has appropriate business continuity arrangements,
then you will need to include a business continuity schedule in the
Justification Service Level Agreement that reflects the findings of your due
diligence. Your company may also decide to dual contract the
resource to reduce risk.
For existing suppliers, you may want to review the Service Level
Agreement in place so you are aware of operational risk and can
amend the contract in the next review (where appropriate).
Justification
Justification
Justification
level of impact within 1 week
mine their level of resilience.
involve doing due diligience to
ity before signing a contract. If
ess continuity arrangements,
ness continuity schedule in the
ects the findings of your due
decide to dual contract the
duce risk.
nt to review the Service Level
re of operational risk and can
eview (where appropriate).
Purpose
What is the application used for?
Workaround exists
SAP Yes / No
With any existing workarounds in place, what is the
impact over time if this application was unavailable
4 hrs 1 DAY 2 DAYS 1 WEEK 1 MONTH
No Impact
I
M Minor
P Moderate X
A
C Major X
T
Critical X X X
Purpose
What is the application used for?
Workaround exists
Yes / No
Athena
With any existing workarounds in place, what is the
impact over time if this application was unavailable
4 hrs 1 day 2 days 1 WEEK 1 MONTH
No Impact
I
M Minor X
P
A Moderate X X
C Major X
T
Critical X
Purpose
What is the application used for?
Workaround exists
[Name of IT application] Yes / No
With any existing workarounds in place, what is the
impact over time if this application was unavailable
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Purpose
What is the application used for?
Workaround exists
Yes / No
[Name of IT application]
With any existing workarounds in place, what is the
impact over time if this application was unavailable
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
Purpose
What is the application used for?
Workaround exists
[Name of IT application] Yes / No
With any existing workarounds in place, what is the
impact over time if this application was unavailable
4 hrs 1 day 2 days 1 week 1 month
No Impact
I
M Minor
P
A Moderate
C Major
T
Critical
The findings of the IT Applications impact assessment will be
to create a register of key applications that support the delive
business key products and services. The register will be used
prioritise disaster recovery planning.
Justification
Justification
Justification
Justification
Justification
mpact assessment will be used
ns that support the delivery of
. The register will be used to
overy planning.
Insert the minimum number of resources you would require over time in order to contin
Time Building Staff Mac PC IT applications
4 hours
1 day
2 days
1 week
1 month
Examples of other resources you may wish to include: work mobile, printer, scann
r time in order to continue your products and/or services within their recovery time objective
Laptop VPN Desk phone Suppliers Insert resource
work mobile, printer, scanner, hardcopy documents, specialist equipment.
