Our institution has very little in terms of a business continuity plan. Every article I've read tells me to begin a BCP with a business impact analysis, but I'm really at a loss.

Does anyone have a template for a BIA or point me in the right direction for guidance?

Thank you!

tgpitts

send me a PM with some info:
how big of an institution
core focus
regulator
etc... and I can help you out

You might start with the FFIEC IT Examination Handbook, Business Continuity Planning Booklet. It has a section on BIA here, and an Appendix on the BIA process here. In addition, you might find the following article interesting, The ABCs of BIAs.

Hope this helps some...

Thanks,
Russ

I have one to, we are FDIC, 105 mil, Fiserv bank

Dear tgpitts,
You're right to be sensitive to the BIA. It is the foundation for planning and the core of business but it's also the most complicated component of the BCP. The BIA actually identifies how you are creating value (the core of doing business every day) and, if done well, chains any crisis back to that creation of value. It also pulls the entire BC Management program together (planning, prioritization or response, training, testing, etc) so it's well worth your time to get some training or even invest in the process and hire a pro to design it for you while training your team at the same time.

The biggest problem you're going to face in reaching out is a deficit of information that you can actually apply without intense frustration. There's a good book: BSI's A Practical Approach to Business Impact Analysis <http://shop.bsigroup.com/en/ProductDetail/?pid=000000000030235851> I'd recommend getting a mentor as well.
CHeers - Eryn

would someone mind sharing their BIA template?

Thanks,

BIA's are very bank specific based on it's operations and a whole host of other factors and are usually pretty detailed so I'm not sure how many have a template that is shareable. If you google it, page 1 has several examples to start.

Or you can try looking on CBANC if you're a member (it's free to be if not).