+Business impact analysis policies and instructions

Business impact analysis policies and instructions

Policies and instructions to determine the impact of any malfunction to the cloud service or enterprise are documented, communicated and made available in accordance with SP-01. The following aspects are considered as minimum:
• Possible scenarios based on a risk analysis;
• Identification of critical products and services
• Identify dependencies, including processes (including resources required), applications, business partners and third parties;
• Capture threats to critical products and services;
• Identification of effects resulting from planned and unplanned malfunctions and changes over time;
• Determination of the maximum acceptable duration of malfunctions;
• Identification of restoration priorities;
• Determination of time targets for the resumption of critical products and services within the maximum acceptable time period (RTO);
• Determination of time targets for the maximum reasonable period during which data can be lost and not recovered (RPO); and
• Estimation of the resources needed for resumption.
Additonal Criteria-
Supplementary Information - About the CriteriaScenarios to be considered according to the basic criterion are, for example, the loss of personnel, buildings, infrastructure and service providers.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje