Business & IT Impact

Security ManualBusiness and IT Impact Analysis
Questionnaire

ISO, Sarbanes Oxley, COBIT,
PCI-DSS and HIPAA Compliant

Order BIA Questionnaire  Change History  Download Selected Pages

This Business and IT Impact Analysis Questionnaire has been designed by one of Industry's most experienced application assessment consultants. This Questionnaire has been used in over 500 assessment, DRP and business impact projects in the past four years. Included is a Risk Ranking definition. The Word version of the questionnaire is automated with check boxes that can be updated in Word.

Version History

Version 4.0

  • Updated for COBIT compliance
  • Updated for PCI-DSS compliance
  • Updated for US state level compliance (New York, Massachusetts, and California)\
  • Update for ISO security requirements

Version 3.3

  • Updated to be ISO 27000 Series compliant

  • Correct minor errata

  • Updated formatting

Version 3.3

  • Updated to meet ISO 17799 compliance standard

  • Application / File Servers form was added

  • Operating Environment was moved forward in the forms

  • Critically of Application was moved forward in the forms

Order BIA Questionnaire  Change History  Download Selected Pages

The Questionnaire (Form) is a 23 pages in length and contains the following:

  • Facilities / Business Function / Application

  • Sarbanes-Oxley Compliance

  • ISO 27000 series (formerly ISO 17799)Compliant

  • HIPAA Compliance

  • System of Internal Controls

  • User Environment

  • Processing Environment

  • Historical Information

  • Operating Environment

  • Criticality of Application

  • Database / File Name

  • Documentation

  • Security

  • Application Support and Maintenance

  • Resource Usage

  • Hardware Requirements by Department

  • Backups

Order BIA Questionnaire  Change History  Download Selected Pages