Business Impact Analysis

---
name: business-impact-analysis
description: Perform a business impact analysis that identifies critical services, dependencies, maximum tolerable disruption, recovery priorities, minimum operating levels, and downstream consequences without inventing executive risk tolerance.
---
# Business Impact Analysis

Use when this procedure is the primary professional method needed for the assignment.

## Procedure
1. Confirm the decision or outcome this work must support, its scope, owner, constraints, and definition of success.
2. Establish the evidence baseline using service catalog, process owners, contracts, financial/operational evidence, dependencies, staffing, and leadership risk inputs. Do not fill material gaps with assumptions when they can change the result.
3. Define business services and owners, map customers/processes/systems/people/vendors, quantify time-sensitive impacts where evidence exists, record stated tolerance, and identify concentration risk.
4. Exercise realistic edge, failure, transition, or exception cases that could invalidate the result; record unresolved uncertainty explicitly.
5. Validate the output against the original outcome and any neighboring professional contracts so this skill does not silently absorb another specialist's authority.
6. Record the resulting artifact, measurements, decisions, provenance, and handoff information needed for another owner to reproduce or continue the work.

## Quality gate
Critical-service priorities and tolerances are owner-approved and traceable to consequences rather than technical convenience.