Business impact analysis
BIA
In French : Analyse d'impact sur l'activité
The process of analysing the consequences of disruption on activities over time, in order to prioritise them and derive quantified recovery requirements.
Source : ISO 22301:2019, 8.2.2 / ISO/TS 22317:2021
Related terms
Maximum tolerable period of disruption
The time beyond which the consequences of disruption become unacceptable to the organisation. It is a ceiling, not a target.
Recovery time objective
The period of time within which an activity, product or service must be resumed after disruption, and the associated resources restored.
Recovery point objective
The volume of data, expressed in time, that the organisation accepts losing during a disruption. A four-hour RPO means the last four hours of input may be lost.
Minimum business continuity objective
The minimum level of service acceptable to achieve the organisation's objectives during a disruption. It answers: what must we absolutely keep doing?
Prioritized activity
An activity to which urgency is given in order to avoid unacceptable impacts during a disruption. Prioritisation results from the BIA, not from a declaration by the business line concerned.