Business Impact Analysis (BIA)

Performed annually and after any significant business or system change.

Element	Description
Critical Functions	Identified and prioritized
Recovery Time Objective (RTO)	Max time a function can be down without severe impact
Recovery Point Objective (RPO)	Max acceptable data loss measured in time
Dependencies	Systems, people, data, third parties
Impact Ratings	Financial, reputational, legal, and operational

Tool: BIA Template with Criticality Scoring Matrix Owner: Business Continuity Officer