GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact

Run Business Impact Analysis

No account needed. Answer a few questions, pay securely, and receive your deliverable right away.

Your company

Your company

The company named in the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Deliverable

Deliverable

Its title, its author and its structure are yours: they steer what is written.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the deliverable; never filled in by the AI.

Scope of the analysis

Scope of the analysis

What is analysed, and who answers for it.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What it sells, to whom, from where.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The activities, sites and products covered, and what is left out.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Function of the person who keeps it up to date.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Top management: this analysis sets priorities across departments.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

When an interruption would hurt most: month end, season, campaign.

Impact criteria

Impact criteria

What each level of impact means here, so that departments score alike.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

LevelWhat it means

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “High; EUR 25,000 to 100,000 lost, customers placing orders elsewhere”

Activities and their impact

Activities and their impact

One line per activity, with the person who runs it. Rate the impact if it stopped for that long.

ActivityOwnerMain impactAt 4 hoursAt 1 dayAt 3 daysAt 1 weekLongest tolerable stop (hours)RTO (hours)RPO (hours)Loss per day

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Order taking; Sales manager; Financial; Medium; High; Severe; Severe; 12; 6; 1; 85000”

What each activity needs

What each activity needs

Separate several entries in a cell with a comma: shared dependencies are found from them.

ActivitySystemsDataSuppliersKey peopleSiteWorkaround

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Order taking; ERP, Web portal; Customer orders; ERP provider; 4 order clerks; Head office; Phone and paper orders”

SystemRecovery time achieved (hours)Last tested (date)

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “ERP; 18; 2026-05-14”

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Anything the service should take into account.

What the AI provider receives

Your answers, to write this deliverable.

Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

€1.00

What a free account adds

Running a service never requires an account. An account adds:

  • Your company details filled in for you on every form
  • Every result saved, reusable as a source by any service
  • Results editable in the browser and in the layout editor, with their saved versions
Create a free account