Business Impact Analysis (BIA)

Preliminary System Information
|Omnitrans Dept. Omnitrans |Date BIA Completed: 9/12/2006 |
|System Name: Ellipse |BIA POC: Don Walker |
|System Function: Payroll |
|System Manager Point of Contact (POC): Don Walker |
|System Description: {Discussion of the system purpose and architecture, including system diagrams} Omnitrans payroll time |
|calculations’, direct deposit process, and check printing. |
| |
|A. Identify System POCs Role |
|Internal {Identify the individuals, positions, or offices within your organization that depend on or support the system; also |
|specify their relationship to the system} |
| | |
|Ron Judge |Systems Administrator |
|Payroll Staff |Entry and processing of payroll |
|All Omnitrans Employees |Payroll recipients |
|External {Identify the individuals, positions, or offices outside your organization that depend on or support the system; also |
|specify their relationship to the system} |
| |Receives payroll account information and processes to employee payment via check |
|Contact at Union Bank |or direct deposit. |
| | |
| | |
|B. Identify System Resources {Identify the specific hardware, software, and other resources that comprise the system; include |
|quantity and type} Completed by ITS |
|Hardware |
|Ellipse database servers, Citrix servers, workstations, check printers. |
| |
|Software |
|Ellipse payroll module, Oracle database mgt system, SafeChecks |
| |
|Other resources |
|Check or voucher stock, printer toner, communications lines for direct deposit |

|C. Identify critical roles {List the roles identified in Section A that are deemed critical} |
| |
|Systems Administrator |
|Entry and processing of payroll |
| |

|D. Link critical roles to critical resources {Identify the IT resources needed to accomplish the roles listed in Section C} |
|Critical Role |Critical Resources |
| |Ellipse hardware & software |
|Systems Administrator |Safe Checks hardware & software |
| |Ellipse hardware & software |
|Entry and processing of payroll |Safe Checks hardware & software |
| |Check or voucher stock, toner, com lines |
| | |
| | |

|E. Identify outage impacts and allowable outage times {Characterize the impact on critical roles if a critical resource is |
|unavailable; also, identify the maximum acceptable period that the resource could be unavailable before unacceptable impacts |
|resulted} |
|Resource |Outage Impact |Allowable Outage Time |
|Ellipse payroll module |Cannot run payroll |Until bi-weekly payroll is due |
|Safe Checks |Cannot print checks |Until bi-weekly payroll is due |
| | | |
| | | |

|F. Prioritize resource recovery {List the priority associated with recovering a specific resource, based on the outage impacts and |
|allowable outage times provided in Section E. Use quantitative or qualitative scale (e.g., high/medium/low, 1-5, A/B/C)} |
|Resource |Recovery Priority |
|Ellipse payroll module |High |
|Safe Checks |High |
| | |

|G. Manual fallback procedure in place {List the status of a manual failback procedure for each Resource listed in F. above and the |
|duration the procedure could remain viable) |
|Resource |Manual Fallback in|Duration |
| |place (Y/N) |Viable |
|Ellipse payroll module |Y |1 pay period |
|Safe Checks |Y |1 pay period |
| | | |

In the space below please list the name and location of the documents describing the manual fallback procedure(s):

Static checks are run for every Omnitrans employee every six months and stored in a bank vault. They are used in the event that Omnitrans cannot create a payroll run due to a state of emergency and or a disaster.

See DR-payroll-delivery-procedure.doc on the S: dirve