Skip to main content

Posts

Showing posts with the label Risk Management

Assessing and Evaluating the Change

All changes need to be assessed and evaluated.  Changes that are considered significant should be subject to a normal change evaluation in which we have well defined criteria for making this determination.  In this blog we will focus on the assessment side of the equation. A logical place to begin assessing the impact of changes on services and configuration assets would be the use of the "Seven Rs of Change Management".  Without these questions being answered a proper impact assessment could not be completed.  When leading an impact and resource assessment several items should be considered.  At the top of the chart we need to determine if there will be an impact to the customer's business operations.  Next we might want to know what the effect will be on infrastructure, individual customer services and their performance, reliability, security, continuity and ability to handle various levels of demand.  Additionally we will need to understand what the current change sc

The Purpose and Value of Business Impact Analysis

When discussing Service Design I am often asked the purpose and value of a Business Impact Assessment (BIA).   The purpose of a BIA is to quantify the impact to the business that the loss of a service would have.   It is a valuable source of input when trying to ascertain the business needs, impacts and risks that the organization may face in the delivery of services.   The Business Impact Assessment is an essential element of the overall business continuity process.   It identifies the most important services to the organization and therefore will help to define the overall strategy for risk reduction and disaster recovery.   At a more granular level these assessments enable the mapping of critical service applications and technology components to critical business processes.   It is an invaluable input for Continuity Strategy, Availability Design, and Capacity Management.   The BIA’s strategic purpose is to show which parts of the business will be most affected by a major incident