Business impact analysis for business continuity: Evidence from Romanian enterprises on critical functions

Abstract Organizations are increasingly subject to hazardous events and threats, which can be critical for their business operations and performance. Any natural, accidental, or deliberate incidents that happen to the organization can cause major disruptions to it. The present paper aims to examine the prerequisites for a sound business impact analysis necessary to build the organization’s business continuity management capability and ensure business resilience. It is meant to discover those critical functions and resources which are vital to business operations in a sample of small and medium-sized enterprises from a certain geographic area in Romania, in order to maintain their core operations and ensure business continuation. The research results rely on the data collected through face-to-face interviews from 119 Romanian companies. The research findings of the multiple linear regression employed indicate that, in undertaking business impact analysis for business continuity, it is vital for enterprises to identify the skills and level of expertise required from staff to carry out organization’s critical activities. Also it is critical for companies to identify alternative premises and systems and means of voice and data communication, as well as the priority suppliers/partners whom they depend on, necessary to undertake their critical activities. The study contributes to the literature by providing empirical evidence on the prerequisites of the organization’s business impact analysis that are critical to build a strong business continuity management capability. It also offers new insights to companies meant to generate a better understanding of current practices of undertaking a business impact analysis for business continuation in their organizations.