BIA
Business Impact Analysis Consultancy
Establishes what your organisation cannot afford to lose, and for how long.
Монгол Улс: Улаанбаатар болон уул уурхайн бүс нутгийн үйлчлүүлэгчдэд үйлчилнэ
- Losses Modelled Per Hour
- Hidden Dependencies Mapped
- Recovery Targets Justified
- Insurance Cover Right Sized
Free · 15 minutes · assured discount
Score your readiness out of 100 before you spend a rupee.
Know exactly what to ask for — instead of being sold a package.
- Practice area
- Бизнесийн тасралтгүй байдал
- Industries
- 5
- Delivery
- Onsite, remote, hybrid
Мэргэжлийн зөвлөх яагаад үнэ цэнэтэй вэ
Organisations rarely fail BIA because the standard is hard. They fail because the evidence does not match what the auditor asks for.
Experience across sectors
Having implemented BIA in very different operating environments, we can tell you quickly which of your worries are real and which are inherited from someone else's situation.
Your team already has a day job
Running BIA in house means taking your most capable people off revenue work for months. For most organisations that hidden cost is larger than the fee for doing it properly.
It has to survive after we leave
A BIA system that only works while a consultant is on site fails its first surveillance audit. We build it so your own people can run it, and train them to do so.
The certification body is independent
We prepare you for BIA, and an accredited body decides. Because we do not issue the certificate, our only interest is that you actually pass, which is what makes the preparation worth paying for.
Something about BIA this page has not answered?
BIA танд юу өгөх вэ
Certification is a commercial decision before it is a technical one. This is where the return usually shows up.
Losses Modelled Per Hour
Quantifying revenue, penalty and reputational loss over time gives finance the number behind every continuity investment request you make.
Hidden Dependencies Mapped
The analysis usually reveals one supplier, one system or one individual that the whole operation quietly depends upon.
Recovery Targets Justified
Objectives derived from impact data survive scrutiny, unlike targets chosen because the number sounded reassuring in a meeting.
Insurance Cover Right Sized
Knowing your real exposure stops you paying for cover you do not need while staying underinsured where it would actually hurt.
BIA хамаарах салбарууд
Open a sector to see every standard it is usually asked for.
Have a tender document or buyer requirement on BIA to send us?
Send us the detailsSee the documentation
Look at how it is structured before you commit
Documentation for BIA fails when it describes a company nobody recognises. Ours maps clause by clause onto how you actually operate, so the manual, the procedures and the record formats hang together and an auditor can follow the thread. Book a demo and we will show you that structure on screen, not describe it.
BIA-ын дэлгэрэнгүй
Working out which activities the business cannot do without
A business impact analysis establishes what a disruption would cost, activity by activity, and how fast that cost accumulates. It is the analytical step that has to come before any continuity or recovery planning, because until you know which activities matter most and how long each can be interrupted, every recovery investment is a guess. ISO 22301 requires one, as do most regulators supervising operational resilience. It examines the organisation's activities, not its servers.
It is commissioned by organisations certifying to ISO 22301, by firms under regulatory resilience expectations, by companies whose largest customers now ask about continuity in supplier contracts, and by boards after a disruption made the priorities obvious the hard way. Manufacturers, hospitals, banks, logistics operators, business process providers and utilities are frequent clients. Group functions such as payroll and treasury usually turn out to be far more critical than anyone had assumed.
Interviews, dependency chains and impact measured over time
We work through the organisation activity by activity with the managers who run them. For each one we establish what it produces, who depends on it inside and outside the business, and what happens if it stops, measured as financial loss, regulatory breach, contractual penalty, safety consequence and reputational damage. The impact is plotted over time, because an activity that is tolerable for four hours may be ruinous at four days, and that curve drives every decision that follows.
From the curve we derive a maximum tolerable period of disruption and a recovery time objective for each activity, then work backwards into the resources recovery would need: people with specific skills, applications and data, premises and equipment, utilities, key suppliers and outsourced services. Dependencies between activities are mapped, since restoring a process whose upstream input is still down achieves nothing. Single points of failure surface here, usually more of them than expected.
Priorities, resource requirements and a foundation for continuity planning
The output is a prioritised list of activities with recovery objectives, an impact analysis for each, the resources required to run at a minimum acceptable level, a dependency and supplier map, and a register of single points of failure with options set against each. Findings are validated with senior management, because recovery priorities are a business decision and the analysis exists to inform that decision rather than replace it. MSCi runs the analysis and the workshops directly.
With the analysis done, continuity and recovery planning becomes straightforward, since the requirements are already stated in writing. Arguments about which system gets restored first are settled before the incident instead of during it. And several findings are worth acting on immediately whatever happens to the plan: a supplier with no alternative, a process only one person can perform, a data set with no tested restore. Those are cheap to fix in advance.
BIA-ын гэрчилгээ хүртэлх зам
- 1Gap analysis
- 2Documentation
- 3Training
- 4Implementation
- 5Internal audits
- 6Closure of gaps
- 7Management review
- 8Certification audit
- 9Surveillance audits
Want to see what BIA looks like in practice before you commit?
BIA-ын талаар их асуудаг зүйлс
What does BIA involve in practice?
In practice that means documented processes matching how you really work, records showing the system running, people trained on their part of it, and an internal audit completed before anyone external arrives.
What is a realistic timeline for BIA?
Plan on somewhere between eight and sixteen weeks. Organisations with existing procedures move faster; those starting from nothing spend most of the time on documentation and getting records actually made rather than promised.
Do you issue the BIA certificate yourselves?
No, and no consultant should. The certificate comes from an independent accredited certification body after their own audit. We prepare you to pass it and we are there on the day to close findings. That separation is exactly what makes the certificate worth holding.
What does BIA consultancy cost?
There is no useful list price for BIA. Two organisations of the same size can differ by a factor of three depending on existing documentation. A short scoping call gets you an accurate written number.
Which industries need BIA?
We map BIA to 5 sectors and it sits in our бизнесийн тасралтгүй байдал practice. Organisations usually arrive because a specific buyer, regulator or tender committee has asked. Tell us who is asking and we will confirm whether this is the standard that satisfies them.
Do you have to visit our premises?
We work onsite, remote or a mix. Multi site groups often use remote sessions for documentation and reserve site visits for the gap analysis and the audit itself, which keeps travel cost out of the fee.
Need a fast steer on BIA before your next meeting?
Insights, news and know-how
Guidance from our consultants, with anything about this standard first in each column.
Blogs2
Working notes from the consultants.
- 30 Aug 2026Менежментийн тогтолцооны зөвлөх үйлчилгээ гэж юу вэ?MSCi — Management System Compliance Incorporation — нь менежментийн тогтолцооны зөвлөх үйлчилгээ үзүүлдэг компани юм.
- 30 Aug 2026100 онооны бэлэн байдлын үнэлгээ танд юу хэлж өгөх вэӨөрийн үнэлгээний оноо нь аудитын үр дүн биш. Бэлэн байдлын оноо танай байгууллагын талаар юуг бодитоор харуулж болох, юуг урьдчилан хэлж чадахгүй талаар тайлбарлая.
News
What has changed, and when it bites.
Nothing here yet. Anything published as news appears in this column.
Articles2
Longer pieces on one subject.
- 30 Aug 2026Монгол Улсад менежментийн тогтолцоо нэвтрүүлэх ньУул уурхай, түүний нийлүүлэлтийн сүлжээ, олон улсын худалдан авагчдын шаардлага зэрэг нь Монгол Улсад ISO стандарт нэвтрүүлэхэд ямар онцлог бий болгодгийг тайлбарлая.
- 30 Aug 2026Өөрийн үнэлгээнээс гэрчилгээ хүртэл15 минутын бэлэн байдлын үнэлгээнээс баталгаажуулалтын гэрчилгээ хүртэл ямар үе шатууд дамждаг, үе шат бүрд юу хийгддэг болон хэн хариуцдагийг тайлбарлая.
Knowledge base2
How things are actually done.
- 30 Aug 2026Бэлэн байдлын үнэлгээг хэрхэн бөглөх вэСтандартаа сонгохоос эхлээд үр дүнгийн тайлангаа имэйлээр хүлээн авах хүртэл MSCi-ийн бэлэн байдлын үнэлгээг хэрхэн бөглөхийг алхам алхмаар тайлбарлая. Энэ нь үнэ төлбөргүй юм.
- 30 Aug 2026Бэлэн байдлын оноог хэрхэн тооцдог вэ?Хариулт бүр хэрхэн оноо авдаг, нийт оноо яагаад яг 100 байдаг, мөн үнэлгээ бөглөж байх үед асуултын жинг яагаад харуулдаггүйг тайлбарлая.
BIA-ыг эхлүүлэхэд бэлэн үү?
Book a short session and we will tell you what is involved, how long it takes and what it costs.