ISO 22317 (ISO/TS 22317:2015) - Business Impact Analysis (BIA)
Continuity, Resilience & Recovery
ISO/TS 22317:2015 provides guidance for an organization to establish, implement, and maintain a formal and documented Business Impact Analysis (BIA) process. This Technical Specification does not prescribe a uniform process for performing the analysis, but will assist an organization to design a process that is appropriate to its needs.
ISO/TS 22317:2015 is applicable to all organizations regardless of type, size, and nature, whether in the private, public, or not-for-profit sectors. The guidance can be adapted to the needs, objectives, resources, and constraints of the organization.
Key Benefits of ISO 22317 Business Impact Analysis
- Provides a new, enhanced definition that is more clear with less jargon
- Offers a value proposition for organizations struggling to gain buy-in
- Identifies the prerequisites that the organization should have in place before starting the
- Outlines a detailed process for how to effectively perform the ISO 22317
- Provides options for different information collecting methods, along with a pros and cons analysis of each method
- Describes other uses for which organizations may choose to use the ISO/TS 22317:2015
- Acquire knowledge on how to identify and establish the relationship between products, processes and activities
- Acquire the necessary skills to adjust the organization’s Business Continuity program scope
- Understand better the needs of partners and other interested parties
- Increase the ability to identify legal, regulatory and contractual requirements and their impact on Business Continuity requirements
- Comprehend the concept, methods, tools, and techniques required for maintaining a ISO/TS 22317:2015 process.
Altogether, ISO 22317 will help organizations effectively perform one of the most challenging elements of the business continuity life-cycle (the BIA) in a way that produces accurate and useful business continuity requirements, leading to focused, pragmatic strategy identification and plan development.
