Business Impact Analysis
An IS auditor should have a thorough understanding of the objectives of a BIA. A BIA is a process to determine and evaluate the impact of disruption on business processes and prepare accordingly to deal with such events.
A BIA determines the critical processes whose disruption could have a considerable impact on the business. It also determines which processes are to be recovered as a priority to ensure an organization’s survival.
The following are some best practices for conducting a successful BIA:
- In order to conduct a successful BIA, it is necessary for the team conducting the BIA to obtain an understanding of the organization, its key business processes, and its dependency on IT and other resources. This can be determined from the outcome of a risk assessment.
- The involvement of senior management, the IT department, and end users is critical for a successful BIA.
- As far as possible, the BIA team should also consider past transaction...
