A crucial starting point to developing an effective disaster recovery plan is by cultivating an efficient Business Impact Analysis (BIA). A BIA evaluates and identifies vulnerabilities and conveys how these known and unknown risks will impact the organization’s core business processes and functions. More importantly, it enables an organization to strategically plan alternative practices and procedures to minimize the impact of the disruption on systems, functions, and services. This week you will conduct a BIA for a real organization. The purpose of this assignment is to enable you to engage and actively think through some of the components required to develop a BIA, which guides an organization’s disaster planning efforts.

Assignment:

Very briefly, identify and provide some background on your selected company, services it offers, and key stakeholders. The company must be real and you should include in your introduction the link to its website. Identify one critical business operation, process, or function (note: this is something that the organization does). What technology, personnel, and/or other resources are required to support this identified operation, process, or function? What is the maximum allowable outage time for the operation, process, or function? Identify two inputs and outputs for the selected operation, process, or function (note: inputs are what are put into the process, operation, or function; outputs are what the process, operation, or function produces). Elaborate on each of the inputs and output and any other dependencies. Are there any Federal, state, or regulatory laws that may be violated if the operation, process, or function were inoperable? If so, what are they and briefly explain what each of the identified laws means. If not, explain why.  While the identified primary operation, process, or function is inoperable, what feasible solution could be proposed to restore its functionality temporarily? What benefit(s) would these alternative solutions have for the business? What disadvantages would these alternative solutions have on the business?

Instructions:

After reading the grading rubrics, your scenario papers must:

• Adhere to all assignment requirements outlined in the course syllabus;
• Address the questions in the order presented;
  • Questions are prepared to help guide critical thinking through the scenario’s problem and to build a case to propose viable recommendations for a solution.
• Not include the questions in the submission;
• Not contain contractual phrases, as an example “shouldn't" "couldn't" or "didn't,” or similar
• Not contain vague words such as "proper," "appropriate," "adequate," or similar to describe a process, function, or a procedure.
  • As an example, "proper incident response plan," "appropriate IT professional," "adequate security," or similar. These words are subjective because they have a different meaning to different individuals.