Introduction
It is important we priorities our applications to help determine our response to issues which may occur, changes and problems. The most common prioritization model involves understanding impact and urgency. How IT responds, handles, and resolves any request or issue to the business depends upon what both parties think about users are impacted and urgency required to resolve.
-
Impact is generally the severity of the fault, for example, how much downtime or how many end users are affected.
-
Urgency is how quickly the fault needs to be resolved.
Urgency
High
Medium
Low
- Prevention of an event day
- Operational performance of the organization is rendered dysfunctional and unable to meet core operational requirements
- Very severe regulatory breach which threatens the continuity of RFU as the Governing Body for Rugby
- Potential prevention of a event day, work around can be implemented
- Major impact on business ability to perform against strategic objectives
- Server regulatory breach affects ability of business to delivery strategic objectives
- No impact to Event Day
- Issue not effecting users performing their daily activities
- Minor disruption to performance against strategic objectives
- Regulatory breach of a minor nature involving little external action
Impact
High
- Event day impacted
- All users impacted
- Reputational damage: extensive negative national and international
- Long term impact on application recovery
- Financial loss greater than £10m
High
High
High
Medium
- Potential Event Day disruption, work around to be implemented
- Complete lose of services to a core function or partial lose to users impacting a core strategic objective
- Medium to long term impact to application recovery
- Financial loss £1m to £10m
High
Medium
Medium
Low
- Limited or no lose to business service or less than 2 users impacted
- Financial lose up to £1m
High
Medium
Low
Application Requirements
Based on the determined priority of the application there is certain information we should maintain and record.
Priority
Information Requirements
Implications
High
Business Owner
DR Plan
MFA enabled
Business Priority Approved
Event Day Usage
Priority Category
Managed By
Supplier Details
Service Support Process
Data Classification
Supplier Assurance
Data Storage check???
Licenses renewal Date??
Recovery prioritization
Future Implications Formal Incident Prioritization
Medium
Business Owner
Business Priority Approved
Event Day Usage
Supplier Details
Low
Business Owner