Continuity guide

Business impact analysis (BIA): the foundation of recovery priorities

A BIA identifies priority activities, how impacts grow over time, the resources those activities depend on and the time-based needs that shape continuity strategies.

BIAISO/TS 22317

Editorial review: August 11, 2026 · Adrian M. Westbridge

Scope

A BIA should cover the products, services, activities and organizational units relevant to the continuity program.

Impacts

Financial, contractual, operational, customer, legal, safety, reputation and other impacts can be considered without reducing them all to one score.

Dependencies

People, facilities, applications, data, suppliers, equipment and information should be linked to the activity that needs them.

Outputs

Useful outputs include prioritized activities, time-based recovery needs, resource requirements and assumptions that can be validated later.

Business continuity is organization-specific. Recovery priorities, legal duties, safety requirements, contracts, insurance terms and technical recovery methods should be validated by the responsible people in the organization.