What is the missing second step in the graphic that follows?

A.
Identify continuity coordinator

B.
Business impact analysis

C.
Identify BCP committee

D.
Dependency identification

Explanation:
B: A business impact analysis (BIA) is considered a functional analysis, in which a team collects data through interviews and documentary sources; documents business functions,
activities, and transactions; develops a hierarchy of business functions; and finally applies a classification scheme to indicate each individual function’s criticality level. It is one of the
most important first steps in the planning development of a business continuity plan (BCP). Qualitative and quantitative data needs to be gathered, analyzed, interpreted, and
presented to management. Identifying critical functions and systems allow the organization to prioritize them based on necessity.
A is incorrect because the business continuity coordinator needs to be put into position before this whole process starts. He will be the leader for the BCP team and will oversee the
development, implementation, and testing of the continuity and disaster recovery plans. The coordinator should be identified in the project initiation and oversee all the steps shown in
the graphic. It is best if this person has good social skills and is somewhat of a politician because he will need to coordinate a lot of different departments and busy individuals who
have their own agendas. This person needs to have direct access to management and have the credibility and authority to carry out leadership tasks.
C is incorrect because a BCP committee needs to be put together after the coordinator is identified to help carry out all the steps in the graphic. Management and the coordinator
should work together to appoint specific, qualified people to be on this committee. The team must be composed of people who are familiar with the different departments within the
company, because each department is unique in its functionality and has distinctive risks and threats. The best plan is when all issues and threats are brought to the table and
discussed. This cannot be done effectively with a few people who are familiar with only a couple of departments. Representatives from each department must be involved with not only
the planning stages but also the testing and implementation stages.
D is incorrect because dependencies between company critical functions and resources are carried out during the BIA. This is only one of the components in the overall BIA
process. Identifying these types of dependencies is critical because it is important to look at a company as a complex animal instead of a static two-dimensional entity. It comprises
many types of equipment, people, tasks, departments, communications mechanisms, and interfaces to the outer world. The biggest challenge of true continuity planning is
understanding all of these intricacies and their interrelationships. A team may develop plans to back up and restore data, implement redundant data processing equipment, educate
employees on how to carry out automated tasks manually, and obtain redundant power supplies. But if all of these components don’t know how to work together in a different
environment to get the products out the door, it might all be a waste of time