Score each process on five impact dimensions, derive a criticality tier, pair it with recovery objectives, and flag where your capability can't meet the objective the criticality demands.
Recovery objectives shouldn't be set process-by-process from gut feel. Criticality (impact) determines how fast a process must recover; this BIA makes that linkage explicit, then flags where your current capability can't meet the objective the criticality demands.
Every number is a formula over your inputs — not a workshop opinion. Change an input and the ratings move. That's what makes the output defensible.
One row per process: five impact dimensions, criticality tier, MTD / RTO / RPO, and a recovery-gap flag — all calculated.
The impact scale, criticality-tier bands, and recovery expectations your team calibrates to.
Auto criticality distribution, recovery-gap list, and processes by department.
How the BIA supports ISO 22301, NIST CSF, DORA, and FFIEC.
Every column heading defined, with a Source column.
A five-step walkthrough and worked examples.
Every rating is a transparent formula over your inputs, so it holds up when someone asks "why is this rated this way?"
Ratings trace back to the inputs that produced them — the audit story is built in, not reconstructed after the fact.
A built-in Compliance Mapping tab cross-walks the BIA to ISO 22301, NIST CSF, DORA, and FFIEC.
Related: Integrating Risk Assessments — a BIA feeds resilience, TPRM, and ERM from one assessment.
A single Microsoft Excel workbook (.xlsx). It recalculates on open — no macros, no add-ins, no subscription. Also opens in Google Sheets and LibreOffice.
No. You fill the shaded input cells; the white cells calculate. Dropdowns prevent bad entries, the Start Here tab walks you through it, and it ships with worked examples you delete before use.
Yes — internally or in client engagements. You can't resell the template itself as a template.
If you need it adapted to a specific framework, org size, or regulator, get in touch — customization and advisory are available.
Criticality, recovery objectives, and the gaps between them, in one workbook.