Course: IAA202

Name: ___________________________

Class: ___________________________

Lab 3: PERFORM A BUSINESS IMPACT ANALYSIS

FOR AN IT INFRASTRUCTURE

Overview

When conducting a Business Impact Analysis (BIA), the objective is to evaluate and
harmonize the affected IT systems, applications, and resources with their designated
Recovery Time Objectives (RTOs). The determination of mission-critical business
functions' prioritization will dictate which IT systems, applications, and resources are
affected. The RTO will determine the specific business continuity and recovery
measures required to sustain IT operations within the established time constraints.

Scenario: An e-commerce company which sales products via online web server with a
back-end database

I. Perform a BIA assessment and fill in the following chart: (5 pts)

Recovery Time Domain /

Business Function Business Impact Factor
Objectives Resource
or Process (Critical / Major / Minor)
(hours) Impacts
VoIP servers
Internal and external
voice communications
Critical 8 LAN
with customers in real
time
WAN
Firewall on the Internet
side of the DMZ
Internet connectivity
for e- mail and store
and forward customer
service
e-Commerce site for
online customer
purchases or
scheduling 24x7x365
Real-time customer
service via website, e-
mail, or telephone
requires CRM
(customer relationship
management)
The database server
hosts both product and
customer information

II. Craft a BIA executive summary, follow this structure and format: (5pts)

1. Goals and purpose of the BIA – based on the scenario

2. Summary of Findings - business functions and assessment

3. Prioritizations - critical, major, and minor classifications

4. Domains / Resources impacted - to support the defined recovery time

objectives