An organization is permanently transitioning from onsite to fully remote business operations. When should the existing business impact analysis (BIA) be reviewed?

Waiting at least one year after the transition is too long, as the BIA would be based on outdated assumptions and would not accurately reflect the current risk landscape.

A significant change to the operating model, such as transitioning to fully remote operations, fundamentally alters business processes, dependencies, and potential impacts of disruptions, requiring the BIA to be reviewed and updated as soon as the new model is in place to maintain its relevance and accuracy.

Postponing the review until the next scheduled cycle would leave the organization vulnerable, as the BIA's criticality and assumptions have been immediately impacted by the operational change.

While the decision announcement is a good trigger for planning, the BIA should be updated once the new model is *in place* to assess the actual impacts and dependencies under the new operational conditions.