Assignment: Business Impact analysis and DR planning

In addition to risk analysis organizations must conduct a business impact analysis in order to determine the criticality of business functions. This analysis aids the IT staff and management in determining what resources to put into protecting these business functions, as well as in what order functions should be restored in the event of a disaster.

Consider an organization such as the Bridge Street Center discussed in the case study in - Case Study Analysis: Risk Analysis in a Hospital Setting. IT services deliver important functions for both staff and patients, but in the event of a disaster (natural or otherwise) the small IT staff must be prepared to resource services in the way that serves the organization the best.

Requirements:

• List five IT/computer systems that would be used by the Bridge Street Center that would be supported by the IT department in order to conduct regular business, support employees, care for patients, etc. These would be systems that would be in danger of "going down" and would need to be restored in the event of a power outage or disaster. Describe each system, its purpose, and who uses it.

• For each of the five systems you chose, give the parameters for each of the following should there be a system outage:

1. Recovery Point Objective (RPO)
2. Recovery Time Objective (RTO)
3. Business recovery prerequisites
4. Technical recovery prerequisites

Note: The four terms above are described in your textbook reading. You also may want to do some additional research on the internet. If you do, be sure to cite your references.

Your paper should include the following criteria:

• 2 pages in length, double-spaced.
• Free of spelling, grammar, and punctuation errors.

Notes

In the BIA, each critical function is fully described in its own section, including a description of recovery goals and requirements for each function. Recovery goals and requirements are expressed as follows:

Recovery point objective (RPO)-Measured in time, the RPO is the maximum amount of data loss that is acceptable. Depending on the nature of the function, staff members may be able to recreate or reenter data. RPO provides direction on how to back up data, policies on recovery, and whether loss prevention or loss correction is a better option.

Recovery time objective (RTO)-The RTO expresses the maximum allowable time to recover the function. Many less formal recovery plans overlook RTO. Time may be a critical factor, and specifying the requirements for recovery time helps determine the best recovery options.

Business recovery requirements-These requirements identify any other business functions that must already be in place for the specified recovery function to occur. Business recovery requirements help in determining the recovery sequence.

Technical recovery requirements-Technical recovery requirements define the technical prerequisites that are needed to support each critical business function. In most cases, technical recovery requirements dictate which IT infrastructure components must be in place.

Attachment:- Case-Study.rar