<?xml version="1.0" encoding="UTF-8"?>        <rss version="2.0"
             xmlns:atom="http://www.w3.org/2005/Atom"
             xmlns:dc="http://purl.org/dc/elements/1.1/"
             xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
             xmlns:admin="http://webns.net/mvcb/"
             xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
             xmlns:content="http://purl.org/rss/1.0/modules/content/">
        <channel>
            <title>
									BRMA Community - Recent Posts				            </title>
            <link>https://brma.com/community/</link>
            <description>BRMA Discussion Board</description>
            <language>en-US</language>
            <lastBuildDate>Sat, 25 Apr 2026 13:14:52 +0000</lastBuildDate>
            <generator>wpForo</generator>
            <ttl>60</ttl>
							                    <item>
                        <title>RE: BIA Repository: Impact Tolerances Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-impact-tolerances-assessment-questions/#post-47</link>
                        <pubDate>Wed, 17 Jul 2024 14:43:36 +0000</pubDate>
                        <description><![CDATA[For my company, we measure the finance, compiance/regulatory/legal, operational, and reputational impacts at 0 hours, 1 hour, 4 hours, 12 hours, 1 day, 2 days, 3 days, 4 days, then every wee...]]></description>
                        <content:encoded><![CDATA[<p>For my company, we measure the finance, compiance/regulatory/legal, operational, and reputational impacts at 0 hours, 1 hour, 4 hours, 12 hours, 1 day, 2 days, 3 days, 4 days, then every week after. We have the process owners determine the level of impact based on our criteria at these times. My question is, <em>when </em>does the impact start? </p>
<p>For some infrequent processes such as a quarterly audit, the systems could be down 90% of the time, but if they work when the audit occurs, then there is no issue. So I generally ask thw process owners to use the "worst case" scenario. So for example, if the application which handles payroll is down, it does down right before it is needed, that is when we would have them evaluate the impact. </p>
<p>When assessing impacts at intervals, how do you describe "when the impact starts"?</p>
<div id="wpfa-10817" class="wpforo-attached-file"><a class="wpforo-default-attachment" href="//brma.com/wp-content/uploads/wpforo/default_attachments/1721227416-Screenshot-2024-07-17-093024.png" target="_blank" title="Screenshot-2024-07-17-093024.png"><i class="fas fa-paperclip"></i>&nbsp;Screenshot-2024-07-17-093024.png</a></div>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Peter Coti</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-impact-tolerances-assessment-questions/#post-47</guid>
                    </item>
				                    <item>
                        <title>Time - Frequency, impact measures</title>
                        <link>https://brma.com/community/disaster-planning/time-frequency-impact-measures/#post-46</link>
                        <pubDate>Thu, 11 Jul 2024 18:55:35 +0000</pubDate>
                        <description><![CDATA[What are the average # of BIA iterations for a &quot;typical&quot; organization? Annually, Bi-Annual, Quarterly etc.
 
From my experience the most common is the Annual. Another methodology - the fir...]]></description>
                        <content:encoded><![CDATA[<p>What are the average # of BIA iterations for a "typical" organization? Annually, Bi-Annual, Quarterly etc.</p>
<p> </p>
<p>From my experience the most common is the Annual. Another methodology - the first one is a very detailed BIA vs the subsequent iterations of BIAs may be a minor version of the analysis. Any new process that is being covered by the BC strategy will go through the detailed BIA. Any other methodologies adopted?</p>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Uma Danday</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/time-frequency-impact-measures/#post-46</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: Impact Tolerances Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-impact-tolerances-assessment-questions/#post-45</link>
                        <pubDate>Thu, 11 Jul 2024 17:23:40 +0000</pubDate>
                        <description><![CDATA[Depending on the industry, for prioritizing what needs to be included in the BC strategy and planning for the initial phases of the program, a tiered approach has worked as well . Customer /...]]></description>
                        <content:encoded><![CDATA[<p>Depending on the industry, for prioritizing what needs to be included in the BC strategy and planning for the initial phases of the program, a tiered approach has worked as well . Customer / Operational impact tolerance included along with Brand, Regulatory and revenue  </p>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Uma Danday</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-impact-tolerances-assessment-questions/#post-45</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: IT Dependencies Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-it-dependencies-assessment-questions/paged/2/#post-44</link>
                        <pubDate>Thu, 11 Jul 2024 17:09:35 +0000</pubDate>
                        <description><![CDATA[Starting to look at separating RTOs for cyber incidents from the RTOs for other than cyber incidents]]></description>
                        <content:encoded><![CDATA[<p>Starting to look at separating RTOs for cyber incidents from the RTOs for other than cyber incidents</p>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Uma Danday</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-it-dependencies-assessment-questions/paged/2/#post-44</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: Department Profile Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-department-profile/#post-43</link>
                        <pubDate>Thu, 11 Jul 2024 15:34:23 +0000</pubDate>
                        <description><![CDATA[Here is an example of a Department Profile Question Sheet I use.
 
&nbsp;Department-Profile-Example.JPG]]></description>
                        <content:encoded><![CDATA[<p>Here is an example of a Department Profile Question Sheet I use.</p>
<p> </p>
<div id="wpfa-10765" class="wpforo-attached-file"><a class="wpforo-default-attachment" href="//brma.com/wp-content/uploads/wpforo/default_attachments/1720712063-Department-Profile-Example.jpg" target="_blank" title="Department-Profile-Example.JPG"><i class="fas fa-paperclip"></i>&nbsp;Department-Profile-Example.JPG</a></div>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Shane Mathew</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-department-profile/#post-43</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: Impact Tolerances Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-impact-tolerances-assessment-questions/#post-42</link>
                        <pubDate>Thu, 11 Jul 2024 15:21:01 +0000</pubDate>
                        <description><![CDATA[I use an explanation/instruction to rate a critical processes&#039; impact of loss as follows:



For each function, measure the impacts if it were to stop for up to 30 days.  Only those func...]]></description>
                        <content:encoded><![CDATA[<p>I use an explanation/instruction to rate a critical processes' impact of loss as follows:</p>
<table width="543">
<tbody>
<tr>
<td colspan="27" width="543">For each function, measure the impacts if it were to stop for up to 30 days.  Only those functions that would impact the business unit significantly within 30 days need to be included in a BC strategy. The impact will be measured against and is broken down into 3 categories.  All participants in this effort should utilize the Criteria Guide as tool to determining how to score the impact of a function stopping.  Also, and Assumptions List is also provided to help participants make a decisions.   </td>
</tr>
</tbody>
</table>
<p> Then instructions on rating each critical process as follows: </p>
<table width="524">
<tbody>
<tr>
<td colspan="26" width="524">We will use four primary criteria, all of which are weighted equally in this tool.  Scores range from 0-3 with 3 being the highest (most impactful).  <br /><br />  - Brand / Guest Experience<br />  - Revenue<br />  - Expense<br />  - Compliance / Legal (governmental or contractual obligations)</td>
</tr>
</tbody>
</table>
<p>I've attached the definitions chart for the primary criteria below.</p>
<div id="wpfa-10764" class="wpforo-attached-file"><a class="wpforo-default-attachment" href="//brma.com/wp-content/uploads/wpforo/default_attachments/1720711261-Impact-Rating-Chart-Example.jpg" target="_blank" title="Impact-Rating-Chart-Example.JPG"><i class="fas fa-paperclip"></i>&nbsp;Impact-Rating-Chart-Example.JPG</a></div>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Shane Mathew</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-impact-tolerances-assessment-questions/#post-42</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: Equipment Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-equipment-assessment-questions/#post-41</link>
                        <pubDate>Thu, 11 Jul 2024 02:02:15 +0000</pubDate>
                        <description><![CDATA[@klowpurestorage-com  Agreed. The most use for this section would be for organizations in the manufacturing section, however, Pharma or research sectors could also use this section for speci...]]></description>
                        <content:encoded><![CDATA[@klowpurestorage-com  Agreed. The most use for this section would be for organizations in the manufacturing section, however, Pharma or research sectors could also use this section for special equipment. Another use may be in Technology Impact analysis to capture the specific assets as well]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Uma Danday</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-equipment-assessment-questions/#post-41</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: Equipment Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-equipment-assessment-questions/#post-40</link>
                        <pubDate>Tue, 09 Jul 2024 18:35:31 +0000</pubDate>
                        <description><![CDATA[I&#039;d like to hear more about this topic with responses from others.]]></description>
                        <content:encoded><![CDATA[<p>I'd like to hear more about this topic with responses from others.</p>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Secretary BRMA</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-equipment-assessment-questions/#post-40</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: IT Dependencies Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-it-dependencies-assessment-questions/#post-39</link>
                        <pubDate>Tue, 09 Jul 2024 15:53:04 +0000</pubDate>
                        <description><![CDATA[Holistic Resilience Planning
An aspect of a TIA/BIA that may be overlooked is utility. Utilities such as power, water, and HVAC systems are critical components that support the operational ...]]></description>
                        <content:encoded><![CDATA[<p><span style="font-size: 10pt">Holistic Resilience Planning</span></p>
<p><span style="font-size: 10pt">An aspect of a TIA/BIA that may be overlooked is utility. Utilities such as power, water, and HVAC systems are critical components that support the operational environment of applications. If these utilities fail, they can cause significant disruptions, even if the applications themselves are not directly affected.</span><br /><span style="font-size: 10pt">While utilities might not directly define RTO (the maximum acceptable length of time that an application can be offline) and RPO (the maximum acceptable amount of data loss measured in time), their failure can impact the ability to meet these objectives. If an application has a stringent RTO or RPO, but the underlying infrastructure (powered by utilities) is unreliable, then the RTO/RPO goals may become unachievable in practice.</span></p>
<p><span style="font-size: 10pt">Including utility aspects in your assessments ensures that you are planning for resilience at a systemic level, rather than just at the application level.</span><br /><span style="font-size: 10pt"></span></p>
<ul>
<li><span style="font-size: 10pt"><strong>Identify Critical Utilities</strong>: List all the utilities that support your applications and business processes (e.g., power, water, HVAC, internet connectivity).</span><br /><span style="font-size: 10pt"><strong>Assess Dependency and Impact</strong>: Determine how each utility affects the operations of applications and business processes. Identify the critical dependencies and potential impacts of utility failures.</span></li>
<li><span style="font-size: 10pt"><strong>Mitigation Strategies</strong>: Develop and implement mitigation strategies, such as UPS systems, backup generators, redundant cooling systems, and alternative network connections.</span></li>
<li><span style="font-size: 10pt"><strong>Integrate into BIA</strong>: Include utility failure scenarios in your BIA process. Assess the impact of utility failures on RTO and RPO, and adjust your recovery plans accordingly.</span></li>
</ul>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Shelly Munoz</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-it-dependencies-assessment-questions/#post-39</guid>
                    </item>
				                    <item>
                        <title>RE: BIA Repository: Vital Documents Assessment Questions</title>
                        <link>https://brma.com/community/disaster-planning/bia-repository-vital-documents-assessment-questions/#post-38</link>
                        <pubDate>Mon, 08 Jul 2024 22:51:05 +0000</pubDate>
                        <description><![CDATA[I usually ask what type of data they maintain and where is it stored.  Usually based on conversation with the LOB we may be able to derive some conclusions.
When I ask questions about the a...]]></description>
                        <content:encoded><![CDATA[<p>I usually ask what type of data they maintain and where is it stored.  Usually based on conversation with the LOB we may be able to derive some conclusions.</p>
<p>When I ask questions about the applications they use, the records they keep we may achive this organically.</p>
<p>For many most data is self contained within an application (i.e. SaaS).</p>]]></content:encoded>
						                            <category domain="https://brma.com/community/"></category>                        <dc:creator>Content Admin01</dc:creator>
                        <guid isPermaLink="true">https://brma.com/community/disaster-planning/bia-repository-vital-documents-assessment-questions/#post-38</guid>
                    </item>
							        </channel>
        </rss>
		