<Provider>
<System Name>
Business Impact Analysis
<COMPANY LOGO>
Submitted to :<Provider>
<Address>
Submitted: <Date>
<Project Name> Business Impact Analysis
VERSION CONTROL
Date
User
Section
Content
Version
12/29/2010
CoP
All
Document Creation
v1.0
Page 2 of 7
<Project Name> Business Impact Analysis
TABLE OF CONTENTS
1 INTRODUCTION .................................................................................................................... 4
1.1
Purpose .................................................................................................................... 4
2 SYSTEM INFORMATION .................................................................................................... 4
2.1
Points of Contact .................................................................................................... 4
2.2
System Resources ................................................................................................. 4
2.3
Critical Contacts and Resources .......................................................................... 5
2.4
Disruption Impact .................................................................................................... 5
2.5
Resource Recovery Priority .................................................................................. 6
Page 3 of 7
<Project Name> Business Impact Analysis
1 INTRODUCTION
1.1
PURPOSE
The Business Impact Analysis (“BIA”) is a crucial piece of the contingency/disaster
recovery plan. The goal is to identify business operations and processes essential
to the survival of <Provider>. The BIA also identifies the resources required to
enable the operations of <Provider> during a disaster.
Items blocked in <red> are placeholders for practice specific information. Items
blocked in <yellow> are examples of the data a practice may include.
2 SYSTEM INFORMATION
Date: <Date>
Point of Contact (POC): <BIA Author>
Organization: <Organizational Unit>
System Name: <System Name>
System Manager: <System Owner>
System Description: <System Description>
2.1
POINTS OF CONTACT
The persons listed below are contributors and/or stakeholders for this BIA.
Internal Contacts
 Jane Doe: ABC Medical Practice Technology Manager
 <Contact Name>: <Title or Role>
External Contacts
 Eric Smith: Allscripts Account Manager
 <Contact Name>: <Title or Role>
2.2
SYSTEM RESOURCES
The system resources listed below comprise the components of the tools required
for <Provider> operations and processes.
Hardware
 Dell PowerEdge T410 Server
o Serial Number: BTA7461Z
o 4 GB RAM
o 1 TB Disk (mirrored)
o 1 LTO tape backup drive
 <System Resource Name>
o <System Resource Description>
Software
 Allscripts EHR
o License Number: AS2413D
o Max Users: 25
 <System Resource Name>
Page 4 of 7
<Project Name> Business Impact Analysis
o <System Resource Description>
Other
 <System Resource Name>
o <System Resource Description>
2.3
CRITICAL CONTACTS AND RESOURCES
This section identifies and matches contacts from Section 2.1 with system
resources from Section 2.2. The persons and resources identified below are
critical to the continuity and recovery of practice operations. As such, the persons
listed below must be available and able to respond in the event of a disaster. Be
sure to include an alternate contact in the event the primary contact in unavailable.
Critical Contacts/Roles
Jane Doe (primary)
E-mail: jdoe@practice.com
Office: 302.555.1212
Cell: 302.555.1213
John Doe (alternate)
E-mail: jdoe2@practice.com
Office: 302.555.1214
Cell: 302.555.1215
<Contact Name>
<Contact Info>
<Alternate Contact Name>
<Alternate Contact Info>
2.4
Critical Resources
 Dell PowerEdge T410 Server
 Allscripts 9.2 EHR
 QuickBooks Pro
 E-Mail
 FaxPress
 Practice Web Site
 <System Resource Name>
DISRUPTION IMPACT
The descriptions below indicate the level of impact on the practice if one or more of the
system resources identified in Section 2.2 were unavailable.
Impact
Catastrophic
High
Medium
Description

Total loss of ability to operate as a business

Endangerment of public/patient/staff health and safety

Major loss of revenue

Long term survival as a viable business seriously deprecated

Endangerment of public/patient health and safety

Long term reputational damage

Significant impact to revenue
Page 5 of 7
<Project Name> Business Impact Analysis
Low

Major impact to short term financial stability

Short term reputational damage


No financial impact
No reputational damage
Using the impact labels above (Catastrophic, High, Medium or Low), indicate the impact
to the operations of the practice if each system resource identified in Section 2.2 was
unavailable.
Resource
Outage Impact
Allscripts EHR
High
Practice Web Site
Low
<System Resource Name> <Impact>
2.5
Allowable Outage
4 hours
72 hours
<Outage Time>
RESOURCE RECOVERY PRIORITY
Identify the order of priority (1, 2, 3, etc.) for the recovery of system resources
identified above.
Priority
1
4
Resource
Allscripts 9.2 EHR
Building HVAC
<Priority> <System Resource Name>
Comments
Initiate Allscripts DR/BCP plan
Contact practice Technology Manager
Contact HVAC service contractor
<Recovery Comments>
Page 6 of 7
<Project Name> Business Impact Analysis
Appendix A: Business Impact Analysis Approval
The undersigned acknowledge they have reviewed <Provider> Business Impact
Analysis and agree with the approach it presents. Changes to this Business Impact
Analysis will be coordinated with and approved by the undersigned or their
designated representatives.
Signature:
Date:
Print Name:
Title:
Role:
Signature:
Date:
Print Name:
Title:
Role:
Signature:
Date:
Print Name:
Title:
Role:
Page 7 of 7