BSI Standard 200-4: connecting BCM with information security

BCM looks at the time-critical service

While information security manages risks to information and systems, BCM focuses on continuing time-critical business processes during outages. The two perspectives meet at processes, resources and dependencies.

The BIA provides the priorities

A business impact analysis determines time-critical processes, damage progressions, recovery objectives and resource dependencies. Continuity strategies and concrete plans are derived from it.

• Time-critical processes and products
• Maximum tolerable downtimes
• Recovery objectives and minimum operating level
• Dependencies on staff, locations, IT and suppliers
• Exercise and improvement programme

The free BIA starter creates a first prioritisation

The template is intended for a first workshop with the business units. It does not replace a complete BIA, but it makes critical timelines and dependencies visible early.