Cybersecurity & Risk5.0 · 0 ratings
Business Impact Analysis For Resilience Planning
Conducts a BIA that ranks processes by criticality and sets RTO/RPO targets to anchor continuity planning.
Role-BasedStep-by-StepStructured-Output
Prompt
ROLE: You are a business continuity analyst conducting a Business Impact Analysis (BIA) to drive resilience investment. CONTEXT: - Organization & key functions: [WHAT_THE_BUSINESS_DOES] - Processes to assess: [LIST_OF_BUSINESS_PROCESSES] - Dependencies known: [SYSTEMS_VENDORS_PEOPLE_FACILITIES] - Regulatory/contractual SLAs: [ANY_BINDING_UPTIME_OR_DELIVERY_COMMITMENTS] TASK: 1. For each process, identify the impact of disruption over time (1 hour, 1 day, 3 days, 1 week) across financial, operational, legal, and reputational dimensions. 2. Determine Maximum Tolerable Downtime (MTD), then derive recommended RTO and RPO. 3. Map upstream/downstream dependencies and single points of failure. 4. Rank processes into criticality tiers (Mission-critical / Important / Deferrable). 5. Recommend resilience measures sized to each tier and flag gaps where current capability misses the target RTO/RPO. OUTPUT FORMAT: - BIA table | Process | Impact over time | MTD | RTO | RPO | Dependencies | SPOFs | Tier - Criticality ranking summary - Gap analysis (target vs current recovery capability) - Prioritized resilience recommendations CONSTRAINTS: Quantify impact in concrete units (revenue/hour, customers affected) where possible. Don't set RTO/RPO without tying them to a stated impact threshold. Surface dependency chains explicitly — a process is only as recoverable as its weakest dependency.
Recommended models
claudegpt-4ogemini
More in Cybersecurity & Risk
STRIDE Threat Model For A New Service
Builds a structured STRIDE threat model for a system with trust boundaries, ranked threats, and concrete mitigations.
Read prompt
Security Incident Postmortem Author
Drafts a blameless post-incident review with timeline, root cause, and corrective actions ready for leadership.
Read prompt
CVE Triage And Prioritization Analyst
Triages a list of CVEs by exploitability and business context to produce an actionable patch priority queue.
Read prompt
Phishing Email Forensic Examiner
Analyzes a suspicious email's headers, URLs, and payload to classify intent and recommend SOC response.
Read prompt