Business and IT Impact Analysis Questionnaire
Business Imact Risk Assessment Key to Success of CIO and IT
ISO 27000 Series, Sarbanes Oxley, and HIPAA Compliant
The role of IT in many organizations has evolved from supporting the business to enabling the business - a shift that requires IT to transition from being mostly tactical and cost focused to being an enabler of the overall strategy and value focused. IT organizations that have successfully made this change have done so by among other things transitioning their culture from a reactive operationally focused caretaker of assets to a proactive strategically focused enabler of business value. This culture of performance and value ensures that IT’s human capital is aligned with the strategic goals and motivated to execute. Cultural change is typically a messy and lengthy process, but it must and can be done.
This Business and IT Impact Analysis Questionnaire has been designed by one of Industry's most experienced application assessment consultants. This Questionnaire has been used in over 500 assessment, DRP and business impact projects in the past four years. Included is a Risk Ranking definition. The Word version of the questionnaire is automated with check boxes that can be updated in Word.
The Questionnaire (Form) is a 23 pages in length and contains the following:
- Facilities / Business Function / Application
- Sarbanes-Oxley Compliance
- ISO 27000 series (formerly) 17799 Compliance
- HIPAA Compliance
- System of Internal Controls
- User Environment
- Processing Environment
- Historical Information
- Operating Environment
- Criticality of Application
- Database / File Name
- Documentation
- Security
- Application Support and Maintenance
- Resource Usage
- Hardware Requirements by Department
- Backups
Business & IT Impact Risk Assessment News
- After the fact taxes can impact Data Center Recovery Strategy
- Disaster Recovery Plan Articles
- With Offices Closed, Boston Firms Implement Disaster Plans
- Disaster Plans need to take Social Media into account
- Single vs. multiple recovery sites
- Core backup and recovery concerns
- Disaster Recovery Strategy Readings
- Pandemic Planning
- Disaster Planning for a Pandemic
- What businesses are best suited to storing information on the cloud?
- Maximum Tolerable Period of Disruption Defined
- Lessons learned from recent disasters
- Fewer Tornados in 2012
- Traditional Network Operation Centers doomed to failure
- Weather causes major disruptions for power grid
- Weather disasters are expensive
- Disaster Recovery Audit
- Cloud backup is a great solution for small companies
- Disaster Recovery Basics
- Cloud is a critical component of business continuity plans
- Why recovery plans fail
- 5 Tips for New Resellers of Business Continuity Solutions
- Which states had the fewest major weather disasters
- The Difference Between Disaster Recovery Planning and Business Continuity Planning Defined
- Small business interruptions often become full scale disasters


