RUEN
Home/Materials/Critical process register
Risk assessment and BIA

Critical business process register: how to build it

Before you protect a business, you need to understand what is critical in it. A critical process register is a simple table, and all continuity work starts with it. It takes one day to build.

Updated: 28 June 2026 · Author: Evgeny Telenkov · ≈ 5 min read

What it is and why you need it

A critical process register is a list of a company's processes with an assessment of how important each one is. It is the input for the business impact analysis (BIA) and the business continuity plan (BCP). You cannot protect everything equally, so first you identify what the business cannot work without.

Criticality criteria

  • How quickly a stopped process hits revenue and clients.
  • Whether a disruption brings fines or breaches obligations.
  • How long the process can be “down” without irreversible damage.
  • Whether there is a workaround (a manual way to run it).

A simple template

ProcessWhat stops itImpact after 1 dayCriticality
Order intakeCRM/1C failureLost sales, client churnHigh
Shipping/logisticsLoss of route dataMissed deliveries, penaltiesHigh
Accounting/invoicingAccounting system unavailableDelayed paymentsMedium

Take 10–15 processes, score each one against the criteria and mark the 3–5 most critical. Start your protection with them.

Critical process register: Excel template

An extended version of the template from the previous section: 16 columns, including four types of dependencies, single points of failure, plan status and the date of the last test, plus a sheet with the criticality scale.

Download the template. A “Process register” sheet with a filled-in example and a “Criticality scale” sheet with plan requirements for each level. Format: xlsx.

The completed register becomes the first section of an operational continuity and recovery (ONiVD) plan (in Russian) or a business continuity plan. No registration, no forms. If you need the template adapted to your organisation, or want to run a review with it, contact us: how we do it and how long it takes.

Frequently asked questions

How many processes should the register include?

Usually 10–15 key processes are enough. Of these, 3–5 are critical: the business cannot work without them for even a day. Protection is focused on them.

How is the register different from a BIA?

The register is a list of processes and their criticality. A BIA goes further: it estimates the cost of downtime and sets recovery targets (RTO/RPO).

Check your recovery numbers

The assessment shows where the recovery times the business needs do not match what the technology can deliver. After that, either your specialist calculates these numbers, or we do.

Evgeny Telenkov
Director, Business Continuity Practice · PhD in Economics · Academic Director and Chief Examiner
Best Risk Manager of Russia 2020 (RusRisk). Built business continuity at Nornickel from scratch. Author of more than 30 continuity plans. Worked in the risk functions of Beeline, Rosneft and EY. Chief Risk Officer of a USD 20 billion petrochemical megaproject. Deputy Chair of Rosstandart Technical Committee 010 “Risk Management”, co-author of six GOST R standards. Author of the ERGP and SAFE programmes.
Section 03 · Impact analysis and recovery Business impact analysis (BIA) → · All materials in this section