The Research And Implementation Of Business Impact Analysis Of IT System Based On Ontology

Business impact analysis (BIA) is the priority of protecting business continuityimplementation in the domain of information security. In the business and IT environment ofchanging constantly and the increasing complexity, accidental break may cause seriousdamage, leading to the financial loss, data loss and other issues. To cope these risks, we needa comprehensive understanding of business processes and enterprise capabilities for handlingthese interrupts. To keep the business running and minimize the operation of the company orunit of the losses caused by a business flow, enterprises or units must make recovery plan(DRP)whose primary task is: identifying which of critical business functions need to berestored first; and identifying which of equipments, data and management persons to beneeded to recovery those critical businesses.Current business impact analysis methods and models is still in the exploratory stage.This paper proposes a ontology-based business impact analysis, through ontology modelingtools Protégé, I establish business, Information resources(device,software,data), threatsontologies, based on these ontologies, I will build business impact analysis by integratingthem and build their reasoning rules to form semantics topological relations and threat spreadmechanism between logical units of the business, assets, vulnerabilities,achieving theautomation of business impact analysis.Main innovation of this paper is to lead ontology into a business impact analysis of ITsystem, which not only makes semantic markup for business processes, but also using theJena inference engine reasoning gets the cause and effect of process of a certain IT equipmentbreakup, resources needed to restore the device to make business processes more automated,and directly feed back to the backup equipment and technical personnel.