This report presents a Business Impact Analysis (BIA) for MyHealth Company, focusing on the impact of potential disruptions to critical business processes. The analysis includes the identification of Mission/Business Processes, and the determination of Maximum Tolerable Downtime (MTD), Recovery Time Objective (RTO), and Recovery Point Objective (RPO) values for each process before and after the implementation of proposed controls. The report assesses the consequences of disruptions, evaluating both customer and financial impacts. Key business processes analyzed include credit card processing, online booking, and patient record maintenance. The report also includes a policy that outlines the essential elements of a BIA, such as identifying critical issues, establishing RTOs and RPOs, interviewing senior managers, validating gaps, reviewing backup plans, and presenting results to senior management. The report provides two BIA tables, one before implementing the controls and the other after, and explains how the controls have changed the values. The analysis offers recommendations for improving business continuity and cybersecurity management within the company. The report is based on the assignment brief for CMP73001, Cybersecurity Management.
![[object Object]](/_next/static/media/star-bottom.7253800d.svg)
