BIA Activities
The SeCube (Governance) module supports the organization’s business impact analysis (BIA function), the modeling of its operations, and the security classification of resources, processes, and data assets.
Operations Modeling
SeCube Inventory module allows for the cataloging of business processes, data sets, IT systems, and their interdependencies. The cataloging model can be customized as needed. Using graphical simulation functions, interdependencies can be visualized, as well as the potential damage and impacts caused by the failure of an IT system, business process, or data set.
Process Catalog
SeCube supports the development and ongoing maintenance of an organization’s process catalog. The Review feature also ensures that controlled review tasks are performed regularly. Processes can be prioritized based on potential impacts and can be flexibly listed and filtered.
Data Asset Inventory
SeCube supports the creation and ongoing maintenance of an organization’s data asset inventory. Review tasks can be assigned to multiple responsible parties. The data asset inventory items can be classified.
Business Impact Analysis (BIA)
Designated business owners can assess the business impacts of the loss of processes, systems, and data assets in terms of Availability, Confidentiality, and Integrity. The impacts of an availability breach can be measured on a time scale. The assessment criteria and types of impact (e.g., financial, operational, legal, reputational, or personnel impacts) can be tailored to the organization’s needs and templates are also available.
C-I-A Classification of Resources
We can define the classification of designated assets. We can classify our resources based on customizable C-I-A security levels. Classification can be done manually or calculated based on the results of the BIA, using configurable rules.
BIA Results
The results of the BIA survey are inherited based on the defined dependency relationships; they can be organized into lists, filtered, and provide impacts values for other GRC functions:
- Classification of resources
- Data classification
- Business impact analysis for risk assessment and for incident simulations
- BCM planning, definition of time objectives (RTO, MTPD, RPO. MBCO)
- Identification of single point of failure points with the greatest impact
