The first step to identifying and evaluating the risks to your critical operations or services is to complete a Business Impact Analysis (BIA).
This will review what key products and services your organisation provides that, if disrupted, would have the largest impact on the organisation or business.
The impact is documented for different time periods, and then the maximum length of time that the organisation/business can manage the disruption without it threatening its viability, either economically or through loss of reputation.
This will determine the impact over time that a disruption to these activities would have on your organisation or business and what resources you need to maintain them to an acceptable level.
The following should be considered when undertaking a business impact analysis for your organisation:
- what departments are vital for fulfilling orders and contractual obligations
- identify which roles and individuals are vital for fulfilling your organisation or business critical commitments
- identify in advance what equipment, IT and transport staff will need to maintain operations at a predefined minimum level of service
- how long your organisation or business can function with reduced levels before the impact becomes unsustainable and full operations need to be restored
- which supplier and other third parties are essential to your maintaining your critical commitments