The BIA Is a Conversation, Not a Spreadsheet
Business Impact Analysis has become an exercise in colour-coded compliance. The version that earns its keep is something else.
Somewhere in the last decade the Business Impact Analysis became a template. A long one — RTOs, RPOs, MTPDs, MAOs, dependency matrices, criticality tiers — usually in the same workbook every analyst has been quietly reusing since 2014. You fill it in, you tier the services, you publish the heatmap, you move on. And it tells you almost nothing useful.
The reason is that the spreadsheet flattens what is fundamentally a negotiation. A real BIA is the moment a business owner has to say out loud, in front of their peers, which of their services they would let fail first. Not theoretically — actually. With consequences. That conversation is the artefact. The workbook is the receipt.
When the conversation doesn't happen, the numbers drift. Everything becomes Tier 1 because no executive wants to be the one whose function is deprioritised. Recovery time objectives compress to match ambition rather than capability. The heatmap goes red and stays red, which is the same as being grey.
The version that works is smaller and harder. Fewer services, named owners, real trade-offs, written in language a board member would use, signed in ink. It tells you which dominoes you are willing to let fall, and in what order, when you can't save them all. That is what a BIA is for. Everything else is filing.