Company

Technical Security Consulting

Managing Risk

Research & Development

Forensics

Security Management

Media Centre

PCI DSS

• Home
• Overview
• Risk Mgmt. for Compliance
• Business Impact Assesment
• Risk Assessment
• Security Policies
• Technology & Risk
• Managing Internal Controls
• Risk Management Standards
• Data Audits & Compliance
• Sec. Awareness Progs.
• Incident Management
• Business Continuity Plans
• Disaster Recovery
• Recovery Testing

Business Impact Assesment

If your organisation is about to start a new project of any kind, then a Business Impact Assessment should be part of that planning. A Business Impact Assessment (BIA) is a short-form information risk assessment that is typically used to determine whether there are serious information risks associated with a business area or project. A BIA is often used at the start of a project to allow an initial understanding of the information risks that the project will generate so that advanced preparations may be made. It may also be used in existing projects as a quick information "risk health check".

This tool is a great way to consider the high level risks associated with particular business areas. The way it is constructed, looking from the top of the organisation down, allows us to identify the areas where there is the greatest risk so that limited resources may be focused where they are needed the most. IRM has developed its own BIA process which has been particularly successful in identifying the most critical information risks for clients, allowing them to concentrate scarce resources where they are most required.