Score each process on five impact dimensions, derive a criticality tier, pair it with recovery objectives, and flag where your capability can't meet the objective the criticality demands.
Recovery objectives shouldn't be set process-by-process from gut feel. Criticality (impact) determines how fast a process must recover; this BIA makes that linkage explicit, then flags where your current capability can't meet the objective the criticality demands.
Every number is a formula over your inputs, not a workshop opinion. Change an input and the ratings move. That's what makes the output defensible.
One row per process: five impact dimensions, criticality tier, MTD / RTO / RPO, and a recovery-gap flag, all calculated.
The impact scale, criticality-tier bands, and recovery expectations your team calibrates to.
Auto criticality distribution, recovery-gap list, and processes by department.
How the BIA supports ISO 22301, NIST CSF, DORA, and FFIEC.
Every column heading defined, with a Source column.
A five-step walkthrough and worked examples.
Every rating is a transparent formula over your inputs, so it holds up when someone asks "why is this rated this way?"
Ratings trace back to the inputs that produced them, the audit story is built in, not reconstructed after the fact.
A built-in Compliance Mapping tab cross-walks the BIA to ISO 22301, NIST CSF, DORA, and FFIEC.
Related: Integrating Risk Assessments, a BIA feeds resilience, TPRM, and ERM from one assessment.
A single Microsoft Excel workbook (.xlsx). It recalculates on open, no macros, no add-ins, no subscription. Also opens in Google Sheets and LibreOffice.
No. You fill the shaded input cells; the white cells calculate. Dropdowns prevent bad entries, the Start Here tab walks you through it, and it ships with worked examples you delete before use.
Yes, internally or in client engagements. You can't resell the template itself as a template.
If you need it adapted to a specific framework, org size, or regulator, get in touch, customization and advisory are available.
Criticality, recovery objectives, and the gaps between them, in one workbook.