A method for assessing the time criticality of business processes. The BIA determines the impact of outages and defines recovery objectives (RTO/RPO).
The BIA is the professional foundation of business continuity management (BCM). In contrast to a risk assessment, which looks at threats, the BIA focuses purely on the consequences of an interruption, regardless of its cause.
For every critical process, the BIA defines two central parameters:
RTO (Recovery Time Objective): the maximum tolerable time span until a process has to run again.
RPO (Recovery Point Objective): the maximum tolerable data loss, expressed in time.
Under regulations such as DORA and NIS2, a well-founded BIA is mandatory to demonstrate the resilience of critical functions.
In Kopexa you run the BIA at the process level. Only in the next step do you link these processes to the supporting assets. The advantage: the criticality of the process (for example "payment processing") is automatically inherited by the involved IT systems and vendors. That way you immediately see which assets need particularly high availability because of their process relevance.