Business impact analysis (BIA) is the process of identifying and prioritizing the organization’s functions and processes based on their importance to the organization’s objectives, and assessing the potential impacts of a disruption to those functions and processes over time. The BIA helps to determine the recovery time objectives (RTOs), recovery point objectives (RPOs), and resource requirements for each function and process, as well as the interdependencies and dependencies among them. The BIA provides the basis for developing recovery strategies and plans. Verified References: https://www.ready.gov/business-impact-analysis https://drii.org/resources/professionalpractices/EN

Risk ownership must be clearly set out, documented and agreed with the individual owners at all levels of the operational risk management process. This is true because risk ownership is one of the key principles of business continuity management. Risk ownership means that each risk has a designated person who is responsible and accountable for its identification, assessment, treatment, monitoring, and reporting. Risk owners should have the authority and resources to manage their risks effectively and efficiently. Verified References: https://www.iso.org/publication/PUB100442.html https://www.thebci.org/training-qualifications/good-practice-guidelines.html