Yacoub Al Masri
Austin Duda
Davis Tran
1.0 Executive Summary of Findings

Reports on financial impact, combined customer/operational impact, and combined
legal and/or regulatory impact.

Includes recovery personal requirements and recovery time objectives for business
processes.

Includes manual work-around processes, work backlog processing, and recovery
complexity for business units.
2.0 Business Impact Analysis

Identify which business units, operations, and processes are required for the survival of
the business.

Identify resources required to resume business operations.

Estimate impacts at worst-case scenario, determines the estimated number of
personnel required for recovery, estimated recovery time, and provides a foundation for
implementing contingency plans.
2.1 Overview

Contains objectives, scope, approach, and department responses and findings.

Objectives include what the vision or what needs to get done.

Scope is the boundaries of accomplishing the objectives.

Approach is how the objectives will be complected while staying withing the scope.
2.2 Methodology – Three Phased Approach

Phase 1: In this project planning phase the approach is to identify business functions, critical
dependencies, and impacts of disruption. The goal is to find the approach and process for data
collection. Finding the scope, objectives, and approach all happen in this phase.

Phase 2: In the data collection phase there are two separate ways of collecting data. The first is
a questionnaire which is given to multiple people and it addresses the business processes or
functions that need to be identified. The other approach is to have personal interviews to help
determine the route to take. These interviews are more detailed and have a more specific
driven questions asked

Phase 3: In the final data analysis phase we see that it is taking everything from the data
collection phase and analyzing it. This helps determine how costly the plan may be. Each
interview is scored to prioritize processes and functions.
2.3 BIA Statement of Work Flow Chart

In this section, we include what each phase is about and what high level work items
need to be done in order to complete each phase.

The workflows would be geared towards rebooting systems and recovering damaged
hardware.
3.0 Organization

Recognize the organization and what areas and departments within the organization
need the most work.

It comes with the second phase of methodology and conducting interviews and
questionnaires.

Understanding the organization you are hired by is most important to understand what
they need.
3.1 Team Members

Identify what team members would be needed to accomplish the disaster recovery and
business continuity.

Assign the team members to the correct area of the business and estimate the costs
that come along with these team members.

It is crucial to make sure you do not under or over staff the team.
3.2 Organizational Chart

The organizational chart helps visualize what will be accomplished and by who.

It keeps everything in order and keeps team members accomplishing the jobs that they
are assigned to.

In order for the organization to accomplish the BC/DR, it is helpful to the organization to
see who exactly will be working where and how things will be accomplished.
3.3 Location

This section will list the possible locations where a disaster can occur like facilities, sever
rooms, employee offices, and accident-phone areas.

It is important to have a relocation area from the initial area of disasters this will allow a
separate location to recover work operations.

After the disaster occurs, it is important to evaluate structural damage to the company’s
location.
3.4 risk profile

Develop a profile for the company that determines the various risks with environment and other
factors that may cause a negative impact on the organization.
3.4.1 environmental risk



Determine environmental hazards.
Determine how hazards impact business infrastructure.
Determine potential cost of repairs
3.4.2 Other Dependencies


Determine how 3rd party vendors may be impacted by disasters and how that may impact the
organization
Determine any non-essential dependencies that are dependent on critical functions
3.4.3 Facility Building Ratings



Determine which buildings are up to date on safety and disaster building codes and which will
need maintenance
Determine which buildings require top priority for security needs
Determine which buildings are more likely to be affected by a disaster.
3.4.4 Risk Matrix and Table
Likelihood
Almost
Certain
Likely
Moderate
Unlikely
Rare
Consequences
Insignificant
Minor
High
High
Moderate
Extreme
Major
Extreme
Catastrophic
Extreme
Moderate
Low
Low
Low
High
High
Moderate
Moderate
Extreme
Extreme
High
High
Extreme
Extreme
Extreme
High
High
Moderate
Low
Low
3.4.5 Cost of downtime



Estimate loss of revenue during down time per hour or per day.
Calculate cost of labor that is required to return to operation.
Highlight areas that are the most costly to replace.
4.0 Summary of Critical/Essential Systems



Work with BIA team members to Identify critical systems or processes.
Identify what resources will be necessary in restoration.
Calculate and set a budget for future disasters based on essential systems or personnel.
4.1 Critical Functions/Processes

Establish critical steps require to restore and protect an organization in the event of a disruption
4.1.1 Critical Process View



Determine priority ranking of critical functions.
Create a table describing functions with priority.
Determine impact of critical function loss
4.1.2 Critical Process with Associated Required Resources
What critical did toyota take when they take when the flood had happened
What was required when toyota went down
What resources did they have to take
4.2 Other Application
What other system does toyota use when their main system is down or had been breached
How is the other application secured?
What happens when a natural disaster shuts down all applications?
5.0 ITS
What advanced technology did toyota bring to the mass market
What is vehicle to infrastructure communication?
What is vehicle to vehicle?
5.1 Architecture
What is TNGA
How does TNGA help improve cars
How do consumers benefit from TNGA
5.2 Critical Workstations
How is their workstation efficient
What happened to their workstation after the flood
How does toyota improve their quality
5.3 Back-up Information
What type of security does toyota use
How do they prevent from hackers
What happens when their data is breached