| name | business-impact-analysis |
| description | Perform a business impact analysis that identifies critical services, dependencies, maximum tolerable disruption, recovery priorities, minimum operating levels, and downstream consequences without inventing executive risk tolerance. |
Business Impact Analysis
Use when this procedure is the primary professional method needed for the assignment.
Procedure
- Confirm the decision or outcome this work must support, its scope, owner, constraints, and definition of success.
- Establish the evidence baseline using service catalog, process owners, contracts, financial/operational evidence, dependencies, staffing, and leadership risk inputs. Do not fill material gaps with assumptions when they can change the result.
- Define business services and owners, map customers/processes/systems/people/vendors, quantify time-sensitive impacts where evidence exists, record stated tolerance, and identify concentration risk.
- Exercise realistic edge, failure, transition, or exception cases that could invalidate the result; record unresolved uncertainty explicitly.
- Validate the output against the original outcome and any neighboring professional contracts so this skill does not silently absorb another specialist's authority.
- Record the resulting artifact, measurements, decisions, provenance, and handoff information needed for another owner to reproduce or continue the work.
Quality gate
Critical-service priorities and tolerances are owner-approved and traceable to consequences rather than technical convenience.