Gartner Research

Use Business Impact Analysis to Enable Effective Business Continuity and Disaster Recovery Programs

Published: 16 August 2016

ID: G00309887

Analyst(s): Werner Zurcher, Belinda Wilson , Lowell Shulman


Business impact analysis aligns business continuity management and IT disaster recovery plans to business value and identifies impacts to business disruptions. This research offers BIA steps to help BCM/DR managers choose investments that improve recovery of critical business functions.

Table Of Contents

Problem Statement

Gartner Definitions

The Gartner Approach

The Guidance Framework

  • Prework: Build the Teams and Framework to Enable a Successful BIA
    • Build an Effective, Cross-Functional Core Team
    • Define Extended Teams
    • Organize Tools, Training and the BIA Implementation Plan
  • Step 1: Gather Business Impact Data and Recovery Requirements
    • Design BIA Survey
    • Sample BIA Survey
    • Perform BIA Survey
    • Hold Data-Gathering Workshops
    • Perform Targeted Interviews With Extended Team Members
  • Step 2: Consolidate the Business Impact Data
    • Assemble the BIA Data
    • Identify Component and External Dependencies
    • Build Business Process Flowcharts
  • Step 3: Analyze Business Impact Data, and Define Recovery Practices
    • Define Process and Component Criticalities
    • Define the MAO for Functions and Critical Components
    • Define Recovery Sequences
    • Define Function and Component RPOs/RTOs
    • Define RPO/RTO Tiers
    • Socialize and Validate Preliminary Findings With Business Unit Management
    • Define Work-Around/Recovery/Restoration Procedures and Resources
    • Validate Final Results
  • Step 4: Promote, Leverage and Update BIA Over Time
    • Present Results With Implementation Priorities
    • Leverage the BIA Beyond Business Continuity
    • Perform Ongoing Change Management

Risks and Pitfalls

Gartner Recommended Reading

©2021 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner’s prior written permission. It consists of the opinions of Gartner’s research organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner research may address legal and financial issues, Gartner does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its research is produced independently by its research organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity.

Already have a Gartner Account?

Become a client

Learn how to access this content as a Gartner client.