drj logo
drj logo

Welcome to DRJ

Already registered user? Please login here

Create new account
(it's completely free). Subscribe

x

The Importance of the BIA Pre-Work

Business Continuity ManagementResilience Strategy & Program Maturity

Once upon a time, there was a business continuity consulting firm that held BIA interviews with their clients without getting them to provide basic information about their business units ahead of time.

As the owner and CEO of that firm, I can tell you, doing it that way was a big mistake.

The interviews went on for hours since we had to gather every little scrap of information while we were all sitting there.

Worse, the quality of the data obtained was not very good since people tended to leave out a lot of critical information.

Eventually, we hit on the idea of providing our clients with forms requesting certain information beforehand. We referred to this as the BIA pre-work, and after we started incorporating it into our process, our collaborations and the quality of the final results both improved.

The Benefits of Obtaining Their Information Ahead of Time

After we started gathering information ahead of time, the following good things happened:

  • Our interviews got shorter by around 45 minutes.
  • The effort required to accomplish the goals of the interview was much reduced.
  • The interview experience became less irritating for the participants.
  • The quality of the information we received went way up, improving the quality of our BIAs and everything based on them.

Are you going to be conducting BIAs at your organization anytime soon?

If so, I encourage you to incorporate a phase of pre-work into your process, if you were not planning to do so. If our experience is any guide, you will be glad you did.

How We Structure The BIA Pre-Work Process

In this article, I’ll explain how we structure the BIA pre-work process in working with our clients. There are many ways of doing it, but this approach has worked well for us.

We always try to ensure the pre-work takes no longer than 30 minutes to complete.

Using BIA Software

When we do BIAs, we utilize BIA software. This tool has a robust pre-work functionality. It enables us to prepare the forms for the client and then send the department subject matter experts a link to their customized form. The client clicks on the link, and the tool walks them through the information we would like them to provide. Similar functionality is available in other tools, and the basic result can be achieved through forms prepared in Word, Excel, or similar programs.

Including a Cover Note

Prior to sending the link to the pre-work, we send a note explaining what we are doing. These emails typically go out over the name of a department head or other high-ranking person sponsoring our project.

In the note, we tell the people when we would like them to provide the information, typically giving them at least two weeks to finish and submit it.

The Types of Information We Request

In doing BIA pre-work, we ask for two types of information: general information about the business unit and technical information about the unit’s critical business processes. The requests are typically directed to a department-level business unit, such as the call center, finance department, or claims department.

The general information we ask for includes the following:

  • What the business unit or department does.
  • How many employees it has.
  • Where it’s located.
  • What its hours of operations are.

Then we start to get more technical. We ask the business unit to tell us what their most critical business processes are and to provide us key information for each process.

Typically, we ask them to tell us their five to seven most important processes. We try to get them to focus on the most important processes rather than cataloging every single one.

For each process, we then ask them to provide the following:

  • Its name (e.g., the accounts payable process).
  • A description of what the process does (e.g., “it’s designed to pay our vendors within 30 days”).
  • A list of the systems or applications needed to support the process.
  • All specialized equipment needed to support the process (i.e., unique equipment that would take a long time to replace).
  • Any internal dependencies (other departments at the organization whose participation is required for the process to work).
  • Any external dependencies (outside entities such as banks, law firms, or computer consultants needed to support the process).

Setting the Stage for the BIA Interview

Once the client has gathered and provided us with the information, we have assembled in one convenient place the data on the identity of the department, what they do, what their most critical processes are, and what equipment, other departments, and third parties they depend on to complete their important processes.

This sets the stage for a focused, efficient BIA interview.

Validating the Data

Once we receive the business unit’s information, the first thing we do is validate it. Often in looking over the client’s responses, we see things that are obviously incorrect. For example, instead of listing their unit’s critical business processes, the source might have listed the critical situations they might potentially face.

If we see something that’s obviously incorrect, we notify the respondent and ask them to review and correct their information.

After that, we’re ready for the interview, where the first order of business is usually to confirm the information the business unit provided. We then use that information as a springboard to do a deep dive into each of their critical business processes, asking them about its regulatory and legal requirements and the impact on the organization if the process couldn’t be performed.

Lessons From Experience

Experience has taught us many things over the years when it comes to asking our clients to fill out BIA pre-work. Here are two of the main ones:

  • Some people forget to do the pre-work, or just decline to. Don’t be thrown off your stride if this happens to you. You have to not take it personally and work with what you get.
  • It doesn’t pay to assume too much about people’s level of understanding of the process. Sometimes people who have worked in a department for decades are at a loss when you ask them what its critical business processes are. Simplify and take things slow.

Better Results, Happier Colleagues

That’s the BIA pre-work process in a nutshell. If, in doing your BIAs, you incorporate a pre-work phase similar to that described above, rather than trying to collect all the information in the interview, you will most likely find your interviews will be shorter and more productive, your colleagues will be happier, and the information you get will be of higher quality.

Takeaways

  • In doing BIAs, it is best to obtain information from the departments ahead of time to produce better information and shorten the time needed for BIA interviews.
  • Pre-work should take no longer than 30 minutes to complete.
  • Pre-work questionnaires seek two types of information: general information about the business unit and technical information about the unit’s critical business processes.
  • After you receive the completed questionnaire, you should validate the data.
  • Don’t take it personally if some people don’t complete the pre-work.

ABOUT THE AUTHOR

Michael Herrera

Michael Herrera is the CEO of MHA Consulting, a leading business continuity planning and information technology consulting firm. Herrera is the founder of BCMMetrics, which specializes in business continuity software designed to aid organizations in developing and executing business continuity programs.

Latest News
DRJ HOT ITEMS
Webinar Spotlight
Fetching Upcoming Webinars...
Journal Categories

AI: Automation & Innovation

Business Continuity Management

Crisis Management & Emergency Response

Cyber Resilience & IT Disaster Recovery

Leadership: Culture & Workforce Resilience

Operational Resilience

Risk Management & Quantification

Sector-Specific & Critical Infrastructure Resilience

Supply Chain & Third-Party Resilience

Governance: Compliance & Regulatory Readiness

Incident Management & Response Coordination

Resilience Strategy & Program Maturity

Data Protection: Backup & Recovery

Exercises: Testing & Scenario Planning

Emerging Threats: Geopolitical & Climate Risk

Contact Us

Newsletter

The Journal, right in your inbox.