This sample policy outlines procedures for conducting a business impact analysis (BIA) in order to identify the most critical business processes and support functions and to develop realistic recovery time objectives for each process.

In this sample, this study is to be conducted after a specified number of years, or whenever significant business process change occurs, whichever is sooner. The impact associated with business interruptions is to be quantified, if possible, so that business unit leaders can best understand the business case behind possible business continuity strategy options. Emphasis is to be placed on customer recovery requirements and expectations.