Assess impact categories and dependencies

Add an item from all the records. The relationship source is BCM. All items from the respective table, irrespective of its relationship in the CMDB are displayed. When you select Add, the filter for selecting the dependencies is displayed as shown in the example:

To update the selected dependency item, you can add details and select Update.

• Depends on
• Required Recovery Timeframe
• Required Data Backup
• Description of Use
• Additional details - Comment A sample assessment is shown in the example.
  Image omitted: update-dependencies.png
  Update the dependencies.</li>

Note: The Add and Add first level CMDB dependencies actions are available only while the business impact analysis is in an editable state, such as Draft or Returned. After the business impact analysis is submitted and moves to the Pending approval state, these actions are no longer available, so you cannot add dependency items to the assessment in that state.

Add dependencies for which the relationships are identified in CMDB.

Note: Both the Add and Add first level CMDB dependencies UI actions mark the dependency source as Manual because inserting the dependency is a manual action. The CMDB source is used only when dependencies are automatically inserted by the application through the Update dependencies action. The Add first level CMDB dependencies UI action streamlines the manual addition of dependencies by pre-filtering the list to show only CMDB relationships, rather than displaying all CI items within an element definition.

A sample assessment is shown in the example.

1. Select multiple dependencies.
   Image omitted: edit-all-dependencies-at-once.png
   Multiple dependencies.</li>
2. Select Edit. The Edit items Dependency panel is displayed.
   Image omitted: select-multiple-dependencies-and-edit-rto.png
   Edit items dependencies window.</li>
3. Update the RTO for multiple dependencies in the Required recovery Timeframe field.
   Image omitted: update-rto-for-multiple-dependencies.png
   Update the RTO for multiple dependencies.</li>

RTO is updated for multiple dependencies and the dependency assessment is marked as Complete.

If you edit the RTO for one dependency, the dependency assessment moves to the Pending state.

When you have updated the RTO value for all entries in the Required Recovery Timeframe field, then that particular category of dependency is marked as Complete by the application.

Note:

If the administrator has set the Required Recovery Timeframe field in the dependency assessment as mandatory, the BIA user can update the required recovery timeframe for the dependency assessment. If the administrator has set the Required Recovery Timeframe field in the dependency assessment as optional, the BIA user can complete the dependency assessment without updating the Required Recovery Timeframe field.

Data from the Required Recovery Timeframe and Required Data Backup columns is now pulled into the BCP record.

This is the final step. You must complete all the pending assessments before selecting Complete. Selecting Complete marks all the assessments in the business impact analysis as Complete.

Note: After selecting Complete, if you see the message that the dependency groups are in the Not started state, you must complete the procedures explained in this table for single and multiple dependencies. Selecting Confirm in the message window marks all dependency groups as Complete without actually completing them.

You can prioritize your business continuity and recovery plans based on the criticality of the assets that your business process uses.

**Note:** Add all required dependency items before you submit the business impact analysis for approval. After submission, the assessment is locked and you cannot add dependencies until the business impact analysis is returned to an editable state.

The completed assessments are shown in the example. The state of each assessment is marked as Complete and it is highlighted in Green. You can open the completed assessments and view their details for reference at any time.

1. Select Submit for review.

   Note: Before submitting the business impact analysis for a review, verify that all assessments are complete and the name of the BCM lead is updated in the BCM Lead field on the Details tab.

   The business impact analysis is submitted for a review to the BIA owner or BCM lead. The business impact analysis is updated to the In Review state.

2. Review the assessments in the business impact analysis if you are the BIA owner or BCM lead.

1. Select Submit for approval.

   The business impact analysis is updated to the Pending approval state.

   Note: If an approval record is already created for a BIA, the Approve or Reject buttons are not displayed in the BIA form.

2. Select Save.

3. Select the Generate PDF button to generate the BIA in a PDF format.

   A message appears that the PDF has been generated.

Select the link in the message to download the PDF.

-   If you have view-only access to the BIA, the option to generate a PDF helps you to download the document to your local hard drive.
-   You can download the BIA before its **Approval** state.
-   By default, the PDF is generated and attached after the BIA is approved.

1. To move a BIA from Approved to Draft state, select the Edit button.

2. To create a copy of the BIA, select the Copy button.

   If you have the permission to read and create a BIA, then you can also copy the BIA.

   1. Enter the name of the new BIA in the Copy impact analysis pop-up.

      The copy action creates an exact replica of the BIA with the name that you enter in the Copy impact analysis pop-up. It also copies all its dependencies and dependency groups on to the new BIA.

   2. Select Confirm.

      • The new BIA that is copied from the original BIA has all the RTO, RPO impact, dependency assessment structural details similar to the original BIA.
      • However, the impact category details for each of these assessments are editable for you to assess the dependency details exclusively for the copied BIA.
      • When a BIA that has the RTO or RPO impacted assessments completed is copied, the new copied BIA won't have the new assessment in the Pending state. If the impact categories of the RTO and RPO impact assessments in the original BIA are in the Complete state, then the impact categories in the copied BIA are in the Complete state.
      • Therefore, you must assess and enter the disruption duration, response, and required recovery timeframe relevant to the copied BIA.
      • You can assess the details in the Results section. The RTO and RPO values are recalculated after you complete the assessments.
      • Activities and Work notes are not copied to the new BIA. Enter this information relevant to the new BIA.
      • Any attachments attached to the original BIA in any format are copied to the new BIA. However, the PDF generated for the original BIA using the Generate PDF button will not be copied over to the new BIA as the assessment data pertain to the original BIA. Since you have the flexibility to modify the assessment details in the copied BIA and generate a PDF, copying the PDF generated for the original BIA has no relevance. Note: You can delete a BIA (and its related tables) that is in the Draft state. BCM planner and program manager can delete a BIA that is in the In Review and Returned states, whereas a BCM admin can delete a BIA irrespective of its state.

Parent Topic:Structured workflows for BIAs