Risk assessment and BIA

Critical business process register: how to build it

Before protecting the business, you need to know what is critical in it. The critical process register is a simple table where all continuity begins. It can be built in one day.

Updated: June 28, 2026 · Author: Evgeny Telenkov · ≈ 5 min read
Critical business process register: how to build it

What it is and why

A critical process register is a list of the company's processes with an assessment of their importance. It is the input for the business impact analysis (BIA) and the continuity plan (BCP): you cannot protect everything equally, so first determine what the business cannot run without.

Criticality criteria

A simple template

ProcessWhat stops itImpact in 1 dayCriticality
Order intakeCRM/ERP failureLost sales, customer churnHigh
Shipping/logisticsLoss of route dataMissed deliveries, finesHigh
Accounting/paymentsAccounting system unavailableDelayed settlementsMedium

Take 10–15 processes, rate each against the criteria and mark the 3–5 most critical. Start your protection with those.

See how resilient your business really is

13 questions, 5 minutes, free — results on screen and by email.

FAQ

How many processes should the register include?

Usually 10–15 key processes are enough. From these, 3–5 critical ones — that the business cannot run a day without — are selected and protection is focused on them.

How is the register different from a BIA?

The register is a list of processes and their criticality. The BIA goes further: it estimates downtime cost and sets target recovery times (RTO/RPO).

Evgeny Telenkov
Evgeny Telenkov
Chief Risk Officer · PhD in Economics · "Best Risk Manager of Russia 2020"
20 years in risk management. Led risk management at Beeline, Nornickel, Rosneft and EY. Built business continuity plans for Nornickel, Rostec, NSD and DIA. Trained 300+ risk and BCM specialists.
More about the approach and expert →