{
  "$schema": "./business-impact-analysis-schema.json",
  "schemaVersion": "1.0.0",
  "analysisId": "BIA-EXAMPLE-001",
  "title": "Juniper Ridge Services aggregate business impact analysis",
  "status": "review-ready",
  "version": "1.0.0",
  "dates": {
    "createdAt": "2026-07-10",
    "evidenceReviewedAt": "2026-08-01",
    "nextReviewAt": "2026-11-01"
  },
  "analysisOwnerId": "ROLE-BIA-OWNER",
  "evidenceReviewerId": "ROLE-EVIDENCE-REVIEWER",
  "roles": [
    {
      "id": "ROLE-BIA-OWNER",
      "role": "Business impact analysis owner",
      "responsibility": "Maintains the analysis boundary, source register, and review record.",
      "directoryRef": "directory://role/business-impact-analysis-owner"
    },
    {
      "id": "ROLE-EVIDENCE-REVIEWER",
      "role": "Evidence reviewer",
      "responsibility": "Challenges classifications, dates, confidence, and unresolved gaps.",
      "directoryRef": "directory://role/evidence-reviewer"
    },
    {
      "id": "ROLE-SERVICE-OPERATIONS",
      "role": "Service operations owner",
      "responsibility": "Reviews aggregate service delivery and scheduling evidence.",
      "directoryRef": "directory://role/service-operations-owner"
    },
    {
      "id": "ROLE-FINANCE-OPERATIONS",
      "role": "Finance operations owner",
      "responsibility": "Reviews aggregate reconciliation evidence and minimum requirements.",
      "directoryRef": "directory://role/finance-operations-owner"
    }
  ],
  "scope": {
    "organization": "Fictional Juniper Ridge Services shared operations",
    "scenarioBoundary": "Loss of normal workplace and primary business applications, assessed without assigning threat likelihood or selecting a response.",
    "includedFunctionIds": [
      "FUNC-CLIENT-INTAKE",
      "FUNC-SERVICE-SCHEDULING",
      "FUNC-PAYMENT-RECONCILIATION"
    ],
    "excludedWork": [
      "Threat likelihood, risk scoring, risk treatment, and residual-risk acceptance",
      "Approval of MTD, RTO, RPO, service levels, or recovery priorities",
      "Recovery strategy, backup design, restore evidence, technical commands, and executable runbooks",
      "Business continuity arrangements, manual workaround design, crisis communications, and incident command",
      "Exercise execution, readiness certification, compliance determination, investment approval, and outcome promises"
    ],
    "assumptions": [
      {
        "id": "ASSUMPTION-CHANNEL-VOLUME",
        "statement": "Aggregate intake volumes remain within the range represented by the reviewed monthly summary.",
        "ownerId": "ROLE-SERVICE-OPERATIONS",
        "classification": "assumed",
        "confidence": "medium",
        "sourceIds": ["SOURCE-VOLUME-SUMMARY"],
        "evidenceDate": "2026-07-31",
        "reviewBy": "2026-09-30",
        "validationPlan": "Compare the next two aggregate monthly summaries before the next review."
      },
      {
        "id": "ASSUMPTION-SUPPLIER-WINDOW",
        "statement": "The fictional settlement provider continues to publish one aggregate settlement window each business day.",
        "ownerId": "ROLE-FINANCE-OPERATIONS",
        "classification": "assumed",
        "confidence": "low",
        "sourceIds": ["SOURCE-SUPPLIER-SUMMARY"],
        "evidenceDate": "2026-07-20",
        "reviewBy": "2026-08-31",
        "validationPlan": "Request an authorized aggregate service-window statement from the supplier owner."
      }
    ]
  },
  "timeBands": [
    { "id": "TB-0-4H", "label": "Up to four hours", "fromMinutes": 0, "toMinutes": 240 },
    {
      "id": "TB-4-24H",
      "label": "Four to twenty-four hours",
      "fromMinutes": 240,
      "toMinutes": 1440
    },
    { "id": "TB-1-3D", "label": "One to three days", "fromMinutes": 1440, "toMinutes": 4320 },
    { "id": "TB-3-7D", "label": "Three to seven days", "fromMinutes": 4320, "toMinutes": 10080 }
  ],
  "researchSources": [
    {
      "id": "SOURCE-VOLUME-SUMMARY",
      "title": "Aggregate monthly intake and scheduling volume summary",
      "kind": "aggregate-operational-summary",
      "classification": "observed",
      "confidence": "high",
      "sourceRef": "evidence://example/operations/monthly-volume-summary",
      "evidenceDate": "2026-07-31",
      "reviewBy": "2026-10-31",
      "containsPersonalData": false
    },
    {
      "id": "SOURCE-BACKLOG-WORKSHOP",
      "title": "Aggregate backlog impact workshop synthesis",
      "kind": "aggregate-workshop-synthesis",
      "classification": "inferred",
      "confidence": "medium",
      "sourceRef": "evidence://example/operations/backlog-workshop-synthesis",
      "evidenceDate": "2026-07-24",
      "reviewBy": "2026-09-30",
      "containsPersonalData": false
    },
    {
      "id": "SOURCE-FINANCE-SUMMARY",
      "title": "Aggregate reconciliation timing summary",
      "kind": "aggregate-operational-summary",
      "classification": "observed",
      "confidence": "high",
      "sourceRef": "evidence://example/finance/reconciliation-summary",
      "evidenceDate": "2026-07-30",
      "reviewBy": "2026-10-31",
      "containsPersonalData": false
    },
    {
      "id": "SOURCE-RESOURCE-REVIEW",
      "title": "Minimum resource requirement review",
      "kind": "aggregate-owner-review",
      "classification": "inferred",
      "confidence": "medium",
      "sourceRef": "evidence://example/operations/minimum-resource-review",
      "evidenceDate": "2026-07-25",
      "reviewBy": "2026-09-30",
      "containsPersonalData": false
    },
    {
      "id": "SOURCE-SUPPLIER-SUMMARY",
      "title": "Fictional supplier service-window summary",
      "kind": "aggregate-supplier-summary",
      "classification": "assumed",
      "confidence": "low",
      "sourceRef": "evidence://example/supplier/service-window-summary",
      "evidenceDate": "2026-07-20",
      "reviewBy": "2026-08-31",
      "containsPersonalData": false
    }
  ],
  "dependencies": [
    {
      "id": "DEP-INTAKE-ROLES",
      "name": "Trained intake coverage",
      "kind": "people-role",
      "minimumCapability": "One authorized intake role available during the published service window.",
      "functionIds": ["FUNC-CLIENT-INTAKE"],
      "ownerId": "ROLE-SERVICE-OPERATIONS",
      "sourceIds": ["SOURCE-RESOURCE-REVIEW"],
      "classification": "inferred",
      "confidence": "medium",
      "evidenceDate": "2026-07-25",
      "reviewBy": "2026-09-30"
    },
    {
      "id": "DEP-WORK-LOCATION",
      "name": "Authorized work location",
      "kind": "facility",
      "minimumCapability": "An authorized location with power, connectivity, and privacy controls for minimum operations.",
      "functionIds": [
        "FUNC-CLIENT-INTAKE",
        "FUNC-SERVICE-SCHEDULING",
        "FUNC-PAYMENT-RECONCILIATION"
      ],
      "ownerId": "ROLE-BIA-OWNER",
      "sourceIds": ["SOURCE-RESOURCE-REVIEW"],
      "classification": "inferred",
      "confidence": "medium",
      "evidenceDate": "2026-07-25",
      "reviewBy": "2026-09-30"
    },
    {
      "id": "DEP-BUSINESS-APPLICATIONS",
      "name": "Primary business applications",
      "kind": "technology",
      "minimumCapability": "Authorized access to the minimum intake, scheduling, and reconciliation records.",
      "functionIds": [
        "FUNC-CLIENT-INTAKE",
        "FUNC-SERVICE-SCHEDULING",
        "FUNC-PAYMENT-RECONCILIATION"
      ],
      "ownerId": "ROLE-BIA-OWNER",
      "sourceIds": ["SOURCE-RESOURCE-REVIEW"],
      "classification": "inferred",
      "confidence": "medium",
      "evidenceDate": "2026-07-25",
      "reviewBy": "2026-09-30"
    },
    {
      "id": "DEP-AGGREGATE-RECORDS",
      "name": "Current aggregate business records",
      "kind": "information",
      "minimumCapability": "Current authorized records sufficient to identify open intake, scheduling, and settlement work.",
      "functionIds": [
        "FUNC-CLIENT-INTAKE",
        "FUNC-SERVICE-SCHEDULING",
        "FUNC-PAYMENT-RECONCILIATION"
      ],
      "ownerId": "ROLE-BIA-OWNER",
      "sourceIds": ["SOURCE-VOLUME-SUMMARY", "SOURCE-FINANCE-SUMMARY"],
      "classification": "observed",
      "confidence": "high",
      "evidenceDate": "2026-07-31",
      "reviewBy": "2026-10-31"
    },
    {
      "id": "DEP-SETTLEMENT-PROVIDER",
      "name": "Fictional settlement provider",
      "kind": "supplier",
      "minimumCapability": "One aggregate settlement submission and result window per business day.",
      "functionIds": ["FUNC-PAYMENT-RECONCILIATION"],
      "ownerId": "ROLE-FINANCE-OPERATIONS",
      "sourceIds": ["SOURCE-SUPPLIER-SUMMARY"],
      "classification": "assumed",
      "confidence": "low",
      "evidenceDate": "2026-07-20",
      "reviewBy": "2026-08-31"
    }
  ],
  "functions": [
    {
      "id": "FUNC-CLIENT-INTAKE",
      "name": "Client intake",
      "service": "Records aggregate service requests and routes accepted work to scheduling.",
      "ownerId": "ROLE-SERVICE-OPERATIONS",
      "priorityRecommendation": 1,
      "impactAssessments": [
        {
          "timeBandId": "TB-0-4H",
          "category": "service-delivery",
          "severity": 1,
          "statement": "A small aggregate queue forms within the normal daily variation.",
          "basis": "The reviewed monthly summary shows capacity to absorb a short pause.",
          "sourceIds": ["SOURCE-VOLUME-SUMMARY"],
          "classification": "observed",
          "confidence": "high",
          "evidenceDate": "2026-07-31"
        },
        {
          "timeBandId": "TB-4-24H",
          "category": "service-delivery",
          "severity": 2,
          "statement": "The aggregate queue exceeds normal same-day variation and delays routing.",
          "basis": "Workshop synthesis connected a day of lost intake to next-window scheduling pressure.",
          "sourceIds": ["SOURCE-BACKLOG-WORKSHOP"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-24"
        },
        {
          "timeBandId": "TB-1-3D",
          "category": "customer-service",
          "severity": 4,
          "statement": "Unprocessed aggregate requests materially constrain the ability to schedule new work.",
          "basis": "Volume and workshop evidence indicate that the queue compounds across service windows.",
          "sourceIds": ["SOURCE-VOLUME-SUMMARY", "SOURCE-BACKLOG-WORKSHOP"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-31"
        },
        {
          "timeBandId": "TB-3-7D",
          "category": "service-delivery",
          "severity": 5,
          "statement": "The accumulated aggregate queue prevents timely delivery of the minimum intake service.",
          "basis": "This is a conservative extrapolation requiring validation in the next review.",
          "sourceIds": ["SOURCE-BACKLOG-WORKSHOP"],
          "classification": "assumed",
          "confidence": "low",
          "evidenceDate": "2026-07-24"
        }
      ],
      "resourceRequirements": [
        {
          "id": "RES-INTAKE-COVERAGE",
          "kind": "people-role",
          "minimumRequirement": "One authorized intake role during the service window.",
          "sourceIds": ["SOURCE-RESOURCE-REVIEW"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-25",
          "reviewBy": "2026-09-30"
        },
        {
          "id": "RES-INTAKE-ACCESS",
          "kind": "technology",
          "minimumRequirement": "Authorized access to intake records and the routing queue.",
          "sourceIds": ["SOURCE-RESOURCE-REVIEW"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-25",
          "reviewBy": "2026-09-30"
        }
      ],
      "dependencyIds": [
        "DEP-INTAKE-ROLES",
        "DEP-WORK-LOCATION",
        "DEP-BUSINESS-APPLICATIONS",
        "DEP-AGGREGATE-RECORDS"
      ],
      "recoveryRequirements": {
        "maximumTolerableDisruptionMinutes": 2880,
        "recommendedRecoveryTimeObjectiveMinutes": 1440,
        "recommendedRecoveryPointObjectiveMinutes": 240,
        "minimumOperatingLevel": "Record and route aggregate priority requests during the published service window.",
        "rationale": "The recommendation keeps restoration before the evidence-supported material-impact band while leaving approval to accountable recovery owners.",
        "sourceIds": ["SOURCE-VOLUME-SUMMARY", "SOURCE-BACKLOG-WORKSHOP"],
        "confidence": "medium",
        "status": "recommended-pending-approval",
        "approvedBy": null,
        "approvedAt": null,
        "evidenceDate": "2026-07-31",
        "reviewBy": "2026-09-30"
      }
    },
    {
      "id": "FUNC-SERVICE-SCHEDULING",
      "name": "Service scheduling",
      "service": "Allocates accepted aggregate work to available service windows.",
      "ownerId": "ROLE-SERVICE-OPERATIONS",
      "priorityRecommendation": 2,
      "impactAssessments": [
        {
          "timeBandId": "TB-0-4H",
          "category": "operations",
          "severity": 1,
          "statement": "Near-term scheduling changes wait within normal service-window tolerance.",
          "basis": "Aggregate volume evidence shows limited short-window movement.",
          "sourceIds": ["SOURCE-VOLUME-SUMMARY"],
          "classification": "observed",
          "confidence": "high",
          "evidenceDate": "2026-07-31"
        },
        {
          "timeBandId": "TB-4-24H",
          "category": "operations",
          "severity": 3,
          "statement": "The next service window cannot be allocated from the current aggregate queue.",
          "basis": "The workshop linked a full scheduling window to service-delivery delay.",
          "sourceIds": ["SOURCE-BACKLOG-WORKSHOP"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-24"
        },
        {
          "timeBandId": "TB-1-3D",
          "category": "customer-service",
          "severity": 4,
          "statement": "Multiple service windows remain unallocated and the aggregate backlog grows.",
          "basis": "The effect is inferred from reviewed queue and scheduling patterns.",
          "sourceIds": ["SOURCE-VOLUME-SUMMARY", "SOURCE-BACKLOG-WORKSHOP"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-31"
        },
        {
          "timeBandId": "TB-3-7D",
          "category": "service-delivery",
          "severity": 5,
          "statement": "The organization cannot sustain its minimum scheduling service across the assessed boundary.",
          "basis": "The long-band consequence is assumed pending a broader continuity-owner review.",
          "sourceIds": ["SOURCE-BACKLOG-WORKSHOP"],
          "classification": "assumed",
          "confidence": "low",
          "evidenceDate": "2026-07-24"
        }
      ],
      "resourceRequirements": [
        {
          "id": "RES-SCHEDULING-COVERAGE",
          "kind": "people-role",
          "minimumRequirement": "One authorized scheduling role for each active service window.",
          "sourceIds": ["SOURCE-RESOURCE-REVIEW"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-25",
          "reviewBy": "2026-09-30"
        },
        {
          "id": "RES-SCHEDULING-RECORDS",
          "kind": "information",
          "minimumRequirement": "Current aggregate accepted-work and service-window records.",
          "sourceIds": ["SOURCE-VOLUME-SUMMARY"],
          "classification": "observed",
          "confidence": "high",
          "evidenceDate": "2026-07-31",
          "reviewBy": "2026-10-31"
        }
      ],
      "dependencyIds": ["DEP-WORK-LOCATION", "DEP-BUSINESS-APPLICATIONS", "DEP-AGGREGATE-RECORDS"],
      "recoveryRequirements": {
        "maximumTolerableDisruptionMinutes": 2160,
        "recommendedRecoveryTimeObjectiveMinutes": 720,
        "recommendedRecoveryPointObjectiveMinutes": 240,
        "minimumOperatingLevel": "Allocate accepted priority work to the next available service window.",
        "rationale": "The recommendation restores minimum scheduling before the first assessed material operational consequence.",
        "sourceIds": ["SOURCE-VOLUME-SUMMARY", "SOURCE-BACKLOG-WORKSHOP"],
        "confidence": "medium",
        "status": "recommended-pending-approval",
        "approvedBy": null,
        "approvedAt": null,
        "evidenceDate": "2026-07-31",
        "reviewBy": "2026-09-30"
      }
    },
    {
      "id": "FUNC-PAYMENT-RECONCILIATION",
      "name": "Payment reconciliation",
      "service": "Reconciles aggregate settlement totals against authorized internal totals.",
      "ownerId": "ROLE-FINANCE-OPERATIONS",
      "priorityRecommendation": 3,
      "impactAssessments": [
        {
          "timeBandId": "TB-0-4H",
          "category": "financial",
          "severity": 1,
          "statement": "A short delay remains inside the same aggregate settlement window.",
          "basis": "The reviewed summary shows one expected business-day settlement window.",
          "sourceIds": ["SOURCE-FINANCE-SUMMARY"],
          "classification": "observed",
          "confidence": "high",
          "evidenceDate": "2026-07-30"
        },
        {
          "timeBandId": "TB-4-24H",
          "category": "financial",
          "severity": 2,
          "statement": "Aggregate reconciliation waits for the next available operating window.",
          "basis": "Observed timing supports a one-window delay without claiming a financial amount.",
          "sourceIds": ["SOURCE-FINANCE-SUMMARY"],
          "classification": "observed",
          "confidence": "high",
          "evidenceDate": "2026-07-30"
        },
        {
          "timeBandId": "TB-1-3D",
          "category": "financial",
          "severity": 4,
          "statement": "Unreconciled aggregate settlement windows accumulate and constrain exception review.",
          "basis": "The consequence is inferred from the aggregate timing summary.",
          "sourceIds": ["SOURCE-FINANCE-SUMMARY"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-30"
        },
        {
          "timeBandId": "TB-3-7D",
          "category": "supplier",
          "severity": 5,
          "statement": "The unverified supplier window creates a critical analysis gap alongside the accumulated backlog.",
          "basis": "Supplier availability remains an assumption and requires validation.",
          "sourceIds": ["SOURCE-SUPPLIER-SUMMARY"],
          "classification": "assumed",
          "confidence": "low",
          "evidenceDate": "2026-07-20"
        }
      ],
      "resourceRequirements": [
        {
          "id": "RES-FINANCE-COVERAGE",
          "kind": "people-role",
          "minimumRequirement": "One authorized finance operations role for aggregate exception review.",
          "sourceIds": ["SOURCE-RESOURCE-REVIEW"],
          "classification": "inferred",
          "confidence": "medium",
          "evidenceDate": "2026-07-25",
          "reviewBy": "2026-09-30"
        },
        {
          "id": "RES-SETTLEMENT-WINDOW",
          "kind": "supplier",
          "minimumRequirement": "One confirmed aggregate submission and result window per business day.",
          "sourceIds": ["SOURCE-SUPPLIER-SUMMARY"],
          "classification": "assumed",
          "confidence": "low",
          "evidenceDate": "2026-07-20",
          "reviewBy": "2026-08-31"
        }
      ],
      "dependencyIds": [
        "DEP-WORK-LOCATION",
        "DEP-BUSINESS-APPLICATIONS",
        "DEP-AGGREGATE-RECORDS",
        "DEP-SETTLEMENT-PROVIDER"
      ],
      "recoveryRequirements": {
        "maximumTolerableDisruptionMinutes": 4320,
        "recommendedRecoveryTimeObjectiveMinutes": 1440,
        "recommendedRecoveryPointObjectiveMinutes": 720,
        "minimumOperatingLevel": "Compare aggregate settlement totals and preserve unresolved exceptions for authorized review.",
        "rationale": "The recommendation limits backlog before the assessed multi-window consequence while preserving the unresolved supplier assumption.",
        "sourceIds": ["SOURCE-FINANCE-SUMMARY", "SOURCE-SUPPLIER-SUMMARY"],
        "confidence": "low",
        "status": "recommended-pending-approval",
        "approvedBy": null,
        "approvedAt": null,
        "evidenceDate": "2026-07-30",
        "reviewBy": "2026-08-31"
      }
    }
  ],
  "gaps": [
    {
      "id": "GAP-SUPPLIER-WINDOW",
      "statement": "The settlement-provider capability is represented by an aggregate assumption rather than current authorized evidence.",
      "ownerId": "ROLE-FINANCE-OPERATIONS",
      "dueAt": "2026-08-31",
      "classification": "assumed",
      "confidence": "low",
      "sourceIds": ["SOURCE-SUPPLIER-SUMMARY"],
      "validationPlan": "Obtain and review an authorized aggregate service-window statement.",
      "status": "open"
    },
    {
      "id": "GAP-LONG-BAND-IMPACT",
      "statement": "Long-band service impacts rely on workshop extrapolation rather than observed disruption evidence.",
      "ownerId": "ROLE-BIA-OWNER",
      "dueAt": "2026-09-30",
      "classification": "inferred",
      "confidence": "medium",
      "sourceIds": ["SOURCE-BACKLOG-WORKSHOP"],
      "validationPlan": "Review aggregate service-window evidence with the continuity owner without designing continuity arrangements here.",
      "status": "open"
    }
  ],
  "reviewHistory": [
    {
      "version": "1.0.0",
      "date": "2026-08-01",
      "reviewerId": "ROLE-EVIDENCE-REVIEWER",
      "summary": "Reviewed aggregate sources, time bands, impacts, resource dependencies, recommendations, and explicit analysis boundaries.",
      "approvedTargets": false
    }
  ],
  "boundaries": {
    "approvesRecoveryTargets": false,
    "ownsRiskTreatment": false,
    "ownsRecoveryStrategiesOrRunbooks": false,
    "ownsBusinessContinuity": false,
    "ownsIncidentCommand": false,
    "provesRecoveryReadiness": false,
    "ownsInvestmentDecision": false,
    "ownsLegalOrComplianceDetermination": false,
    "containsPersonalOrContactData": false,
    "provesBusinessOutcome": false
  },
  "disclaimer": "Fictional aggregate example for structure testing only. It does not approve targets, prescribe recovery actions, certify readiness or compliance, or promise any operational, financial, legal, safety, or business outcome."
}