OM-4.3.1
(a) A business impact analysis;
(b) An operational impact analysis; and
(c) A financial impact analysis.
These analyses must be comprehensive, including all business functions and departments, not just IT or data processing.
January 2014