SSCP: Systems Security Certified Practitioner

A Business Impact Assessment identifies critical functions and determines the operational effects of disruption so recovery priorities and requirements can be established. Calculating risk for each business function is a risk-assessment activity, because risk evaluation considers likelihood and threats in addition to business impact. NIST defines a BIA as analysis of operational functions and the effect a disruption could have on them.