5 Tips to Help You Identify the Right Impact Categories for Your BIA

Are you a BCM practitioner in the middle of configuring your BIA questionnaire?

Are you scratching your head over the part about identifying the impact categories that are most relevant to your organization?

If so, you are not alone. This is a famously confusing aspect of the Business Impact Analysis. It is also a highly important one.

Impact categories are the aspects of your business that you will be looking at to determine the negative effects of disruptions of varying lengths.

There is no universal list of impact categories that works in all industries. Rather, every organization chooses a few such categories based on its unique situation.

What impact categories should your organization be focusing on?

The short answer is, the ones that are most important to the organization’s business or mission.

For a longer answer, continue reading, since in the rest of this post, I will share my “5 Tips to Help You Identify the Right Impact Categories for Your BIA.” I’ll also sketch out some of the common mistakes people make in choosing their categories and list some of the impact categories commonly used by the business continuity professionals for four major industries.

5 Tips to Help You Identify Your BIA Impact Categories

Tip No. 1:

Divide the categories you look at between quantitative (dollar) impacts and qualitative (non-dollar) impacts. This provides for a rounded view of the damage that would be caused by disruptions of various lengths.

Tip No. 2:

Limit your total number of categories to six: three quantitative and three qualitative. Having more than six total categories tends to make the BIA interview go on too long and confuse the participants.

Tip No. 3:

Make sure the categories are consistent across the departments of the company. This allows you to measure apples to apples when gauging the impacts of potential disruptions.

Tip No. 4:

Choose categories that respect the core mission of the business. Your impact categories should be in line with your mission, strategy, and operations. There are some categories that almost all organizations conducting a BIA will utilize such as: Loss of Revenue, Increased Operating Expenses, and Damage to Brand, Image, and Reputation. However, many categories will be derived from what is uniquely important to each organization or field.

For example, hospitals commonly include as a qualitative area Impact on Patient Care and Safety while universities typically measure the Impact to Student Experience and Safety. Manufacturing firms typically have as a qualitative category something like Impact to Supply Chain. Banks, being highly regulated, will usually have as one of their quantitative impact areas Impact on Penalties, Fines, and Sanctions. The important thing is to think carefully about the core mission of your organization, then select impact categories that reflect this mission.

Tip No. 5:

Share your list with key colleagues. Once you choose the impact categories you think are best, circulate your list to such departments and individuals as Enterprise Risk Management, the CFO, and the COO for their review. Ideally, you want everyone to align on the impact categories that are the most relevant for your organization and which best reflect its mission and strategy.

The Most Common Mistakes People Make in Identifying Impact Areas

In my experience, the three most common mistakes people make in identifying impact areas are:

  1. Having too many BIA impact categories.
  2. Mistaking quantitative impact categories for qualitative ones and vice versa
  3. Choosing the wrong categories for their company type.

The success of your BIA depends on the questions you ask. Get it right the first time with the help of our online BIAOD tool.

Examples from Four Major Industries

The table below shows examples of the impact categories commonly chosen by people working in four major industries: finance, healthcare/hospitals, insurance, and real estate. These are good choices for these types of organizations and might provide ideas for people in any industry regarding which impact categories they should utilize.

Industry Quantitative Impacts Qualitative Impacts
Finance
  • Loss of Revenue
  • Increased Operating Expenses
  • Penalties, Fines, Sanction
  • Impact to Customer Service
  • Legal/Regulatory Requirements
  • Impact on Public Goodwill, Brand, Image, and Reputation
Healthcare/Hospitals
  • Loss of Revenue
  • Increase in Operating Expenses
  • Penalties, Fines, and Sanctions
  • Impact to Patient Safety and Security
  • Impact to Brand, Image, and Reputation
  • Delay in Services
Insurance
  • Loss of Current Revenue
  • Impact to Liquidity
  • Increased or Additional Expenses
  • Fines, Penalties, and Sanctions
  • Impact on Customer Service
  • Impact to Brand, Image, and Reputation
Real Estate
  • Loss of Revenue
  • Increased Operating Expenses
  • Penalties, Fines, Sanctions
  • Internal and/or External Customer Impact
  • Legal and Regulatory Requirements
  • Delay in Billings and Payments
  • Impact to Public Goodwill, Brand, Image, and Reputation

At the end of the day, if you select the right categories, then the business units, processes, and applications that are deemed critical by your BIA will be those that support the mission of your organization, day in and day out.

In next week’s blog, we’ll take a look at how to weight the different impact categories you’ve chosen. This is a key factor in determining which business units and processes are designated as critical in the BIA and recovery plan.

Need help with your BIA?

Our online BIAOD tool will help you navigate BIA interviews with ease. You can send a link to the questionnaire to your participants in advance, allowing them to complete pre-work before the interview even begins.

After the fact, you can generate management reports that are easy to understand and even easier to share.

To see the tool in action, schedule a free demo today. Your organization will be one step closer to being ready for anything.

Michael Herrera is the Chief Executive Officer (CEO) of MHA. In his role, Michael provides global leadership to the entire set of industry practices and horizontal capabilities within MHA. Under his leadership, MHA has become a leading provider of Business Continuity and Disaster Recovery services to organizations on a global level. He is also the founder of BCMMETRICS, a leading cloud based tool designed to assess business continuity compliance and residual risk. Michael is a well-known and sought after speaker on Business Continuity issues at local and national contingency planner chapter meetings and conferences. Prior to founding MHA, he was a Regional VP for Bank of America, where he was responsible for Business Continuity across the southwest region.


Business continuity consulting for today’s leading companies.

Follow Us

© 2024 · MHA Consulting. All Rights Reserved.

Learn from the Best

Get insights from almost 30 years of BCM experience straight to your inbox.

We won’t spam or give your email away.

  • Who We Are
  • What We Do
  • BCMMETRICS™
  • Blog