ELI5: What are Critical Business Functions?
These are the things a company absolutely cannot live without — like how you need water and food but could skip dessert. If these key activities stop, the company loses money, gets in legal trouble, or can’t help its customers at all.
Definition
Critical business functions (CBFs) are the processes and operations that are essential to an organization’s mission, survival, or regulatory compliance — those whose disruption would cause significant financial loss, reputational harm, safety risks, or legal liability. Identifying CBFs is the primary goal of the Business Impact Analysis (BIA), as CBFs determine recovery priorities, RTO/RPO targets, and resource allocation for continuity planning.
Key Details
- CBFs are identified through interviews with department heads, process mapping, and analysis of revenue, legal, and safety dependencies
- Each CBF is assigned an MTD (maximum tolerable downtime) beyond which the organization faces irreversible harm
- Supporting systems and resources (IT systems, personnel, vendors) are mapped to each CBF to understand dependencies
- CBFs form the basis for order of restoration during disaster recovery
- Exam tip: in BIA questions, the output is a prioritized list of CBFs with associated RTO, RPO, and MTD values
Connections
- Parent: business-impact-analysis — CBF identification is the core deliverable of the BIA
- See also: bia-as-the-foundation
- See also: dependencies