[ITL] [3] [BIA] Training-led BCM Implementation: Executing the Business Impact Analysis

Overview

You are about to attend the second (session or 1/2 day) of the one-day BCM-310 workshop. The course code is BCM-310.  This course consists of the following:

• the "Risk Analysis and Review" or RAR phase is attended as Module 1 Session 1 or the first 1/2 day onsite and is conducted in the morning.
• the "Business Impact Analysis"  or BIA phase is attended as Module 1 Session 2 or, usually, on the same day in the afternoon. 

Again, it may be helpful if you have not read the first two articles regarding how this project started; you may want to read "[1A] Starting the Project" and "[1B] Developing BCM Structure and Framework." Click the icon on the right side.
If you are attending as a business unit BCM coordinator, be mindful that your project team has spent two modules or a 2-day BCM-410 course to set up the requirement for you to complete your unit submission with minimum effort.

This article is the fourth part of the "Training Led BCM Implementation Project" series.  This is the reading for participants embarking on a BCM implementation using a combination of training guided by experienced BCM professionals to develop, implement and finalize its BCM program for an organisation.

Business impact analysis, or BIA, is analysing the effects of interruptions on business functions and the organisation as a whole. And based on the severity of these effects, the BCM Planner could infer the relative recovery priorities of these business functions.

The process of conducting the "Business Impact Analysis" or "BIA" in the Training-led BCM Implementation is as follows:

 1.  Supplementary Readings

1. Participants will receive emails containing bite-size information on business impact analysis.
2. The purpose of doing so is to introduce them to the fundamental BIA concepts ahead of the workshop.
3. This helps participants optimize their time at the workshop.
   

   What participants should do:

2.  Facilitated Workshop

A workshop is conducted to guide business unit BCM coordinators (click left icon) to collect data on:

1. Critical business functions (CBFs),
2. Potential impacts of a prolonged disruption of CBFs
3. The time periods within which the CBFs must be recovered to minimize losses
4. The key dependencies to perform CBFs
5. Resources necessary to perform CBFs

Templates are used to facilitate the BIA data collection process. 

What participants should do "Before" the workshop:

As the BIA is an essential cornerstone of the business continuity planning process, participants are encouraged to read the supplementary email materials before the workshop.

Participants should:

1. Read through the supplementary pre-readings
2. Complete the e-learning module "Business Impact Analysis"
3. Download the BIA templates into their laptops
4. Start to complete the BIA template with the help of the guidance note
5. Write down any questions they may have or any answer that you could not complete for this template

It is important to note that because the workshop is a 1-time group event, it is vital that participants lock this event in their calendars. No repeat workshop will be conducted for absent participants.

What participants should do "After" the workshop:

After the workshop, participants will have two working days to complete and submit the BIA  templates via the eCampus portal to the BCM workshop facilitator.  Once BCM Institute's facilitator conducts the first review, you, as a participant, can make the necessary changes and submit them to your organisation's BCM Coordinator and Version 2.0, who will consolidate the templates.  

1. Submit the BIA templates via the eCampus submission portal on time
2. Once the workshop facilitator reviews your submission, proceed to review your templates based on the comment provided
3. Submit your revised completed template to your Organisation BCM Coordinator via eCampus as Version 2.0.

Value-Adding Service

Access to the eLearning module is subject to BCM Institute's agreement with the in-house organization: 

The e-learning module will be "Business Impact Analysis".  This will be the third session of the six sessions for the "Training-led BCM Implementation" 3-day online course. Click the icon to learn more about the eLearning module's content.

3. Consultation with Project Team Leader [Online]

The Organisation BCM Coordinator will process the templates from all departments and write a report for submission to the organisation's management.

Optional: A complimentary 1-hour consultation session has been arranged for the Organisation BCM Coordinator to review the report with the workshop facilitator. This session is subjected to the initial conditions and class size as agreed upon at the start of the project.

4.  RAR & BIA Presentation

At this juncture, it is appropriate to update senior management on the project's progress. 

The Organisation BCM coordinator (OBC) (click the left icon) will present the consolidated interim findings of the RAR and BIA to management or the BCM Steering Committee. Once the results are endorsed, the reports are finalized and submitted.

What senior management should do:

1. Review the key risks for the organization (RAR)
2. Review the list of critical business functions and their recovery time objectives (BIA)
3. Endorse the findings.

Henceforth, during the subsequent two phases, the developed Business Continuity Strategy (BCS) and Plan Development (PD) phases will be based on these endorsed findings.  

We will enter into the BCS phase of the project only after management endorses the RAR and BIA findings.
 

4.  Public BCM-310-320-330 Course

One of the challenges to maintaining the competency of this program is the training of newly appointed business unit BCM coordinators when they are replacing the incumbent.  The newly appointed officer can undergo the same activity, and he is allowed to bring his/her current templates to the public course offered by BCM Institute. Just make the advanced arrangement with the BCM Institute's program admin team.

If you are attending a public BCM-310-320-330 competency-based course, this course is similar to the afternoon session for the BCM-310 (Course code), and it is titled "Assessing Risk and Business Impact Requirements"

5.  Next Step

Once this session is completed, you are ready to attend the 2nd one-day WSQ course, "Developing Business Continuity Strategies and Plans." The course code is BCM-320. Read more about the expectation for the next 1/2-day workshop, "Evaluating the Business Continuity Strategy".

Training-led BCM Implementation Roadmap

Click icon for detailed elaboration of how each phase is conducted
BCM Planning Methodology
Phase 2	Phase 3	Phase 4	Phase 5	Phase 6
Risk Analysis and Review	Business Impact Analysis	Business Continuty Strategy	BC Plan Development	Testing and Exercising
RAR	BIA	BCS	PD	TE
Assessing Risk and Business Impact Requirements		Developing Business Continuity Strategies and Plans		Testing and Exercising Business Continuity Plans
BCM-310		BCM-320		BCM-330