Cybersecurity & Risk5.0 · 0 ratings

Business Impact Analysis For Resilience Planning

Conducts a BIA that ranks processes by criticality and sets RTO/RPO targets to anchor continuity planning.

Role-BasedStep-by-StepStructured-Output

Prompt

ROLE: You are a business continuity analyst conducting a Business Impact Analysis (BIA) to drive resilience investment.

CONTEXT:
- Organization & key functions: [WHAT_THE_BUSINESS_DOES]
- Processes to assess: [LIST_OF_BUSINESS_PROCESSES]
- Dependencies known: [SYSTEMS_VENDORS_PEOPLE_FACILITIES]
- Regulatory/contractual SLAs: [ANY_BINDING_UPTIME_OR_DELIVERY_COMMITMENTS]

TASK:
1. For each process, identify the impact of disruption over time (1 hour, 1 day, 3 days, 1 week) across financial, operational, legal, and reputational dimensions.
2. Determine Maximum Tolerable Downtime (MTD), then derive recommended RTO and RPO.
3. Map upstream/downstream dependencies and single points of failure.
4. Rank processes into criticality tiers (Mission-critical / Important / Deferrable).
5. Recommend resilience measures sized to each tier and flag gaps where current capability misses the target RTO/RPO.

OUTPUT FORMAT:
- BIA table | Process | Impact over time | MTD | RTO | RPO | Dependencies | SPOFs | Tier
- Criticality ranking summary
- Gap analysis (target vs current recovery capability)
- Prioritized resilience recommendations

CONSTRAINTS: Quantify impact in concrete units (revenue/hour, customers affected) where possible. Don't set RTO/RPO without tying them to a stated impact threshold. Surface dependency chains explicitly — a process is only as recoverable as its weakest dependency.

How to use this prompt

  1. 1

    Copy the prompt above and paste it into ChatGPT, Claude, or Gemini — or open it in the visual Studio to edit each part on a canvas and run it with your own key.

  2. 2

    Replace any bracketed placeholders with your specifics. The more concrete your context and constraints, the sharper the result — see the 5-part prompt structure.

  3. 3

    Run it, then refine. Ask the model to critique and improve its own answer with self-critique prompting.

Techniques in this prompt

Role-Based

Assigns the model an expert persona so it adopts the right vocabulary, depth, and standards for the task.

Learn this technique
Step-by-Step

Forces explicit intermediate reasoning instead of jumping to a conclusion, which improves accuracy on hard tasks.

Learn this technique
Structured Output

Pins the response to a defined structure so it drops straight into your workflow.

Learn this technique

Recommended models

claudegpt-4ogemini

Build on this prompt

Open it in the visual Studio to wire it into a full workflow with your own API key — or learn the craft behind prompts like this.

Open in Studio How to prompt AI correctly

More in Cybersecurity & Risk

STRIDE Threat Model For A New Service

Builds a structured STRIDE threat model for a system with trust boundaries, ranked threats, and concrete mitigations.

Read prompt

Security Incident Postmortem Author

Drafts a blameless post-incident review with timeline, root cause, and corrective actions ready for leadership.

Read prompt

CVE Triage And Prioritization Analyst

Triages a list of CVEs by exploitability and business context to produce an actionable patch priority queue.

Read prompt

Phishing Email Forensic Examiner

Analyzes a suspicious email's headers, URLs, and payload to classify intent and recommend SOC response.

Read prompt