The next problem with the traditional BIA process is that even if the loss estimates are assumed to be perfectly accurate and are implicitly accepted by management, the very next question is always: “OK, if these are the losses we can expect, what is the likelihood that they will occur?”
As soon as probability enters the picture, the battle has been lost. There has never been a risk analysis that has statistically justified disaster recovery planning although there have been many that have been used as an excuse for avoiding or delaying planning efforts.
But even if the odds of a disaster striking were 1 in 1,000,000, the laws of probability ensure that that one chance might occur tomorrow as easily as a million years from now.
Again, a different way of pragmatically justifying recovery planning must be found!
It’s time to dump the traditional BIA!