Factonomy Resilience. Enterprise Business Continuity

Transcription

1 Factonomy Resilience Enterprise Business Continuity

2 BIA Wizard and Questionnaire: A highly configurable tool that will fit any methodology. BIA Surveys and Templates The Business Impact Analysis module in Factonomy Resilience is designed to reduce the time and effort required to collect business impact analysis data within your organization. End users experience a simple to use interface with immediate feedback on data quality whilst your Business Continuity Management team can immediately report on the data captured. Easily configurable BIA can be tailored to provide a different experience for diverse roles and business groups Business Continuity Administrators are provided with granular controls to manipulate how all BIA fields and other data will appear End users experience seamless transfer of the information collected into their final PDF plan BIA Workflow drives user activity via . Whether it is the prompt sign-off for completed plans or reacting to changes identified in application inventory or personnel, the fully configurable workflows will interact with users through s containing links back to the relevant pages where action can be taken. Build quick summary checklists Distributed via to Owners in different teams Changes in golden source data push users to update the BIA. Time causes expiration of data and drives users to update and re-validate Signed-off can run in serial or parallel Data can be accepted (or rejected) at different business levels The BIA Wizard Wizard interfaces, governed by workflow, collect information from coordinators close to the business function. Access to specialized web interfaces removes the need to use spread sheets in the gathering and collation of information and saves time across the organization. Wizards are proven to increase user adoption by making it simpler for users to navigate than traditional application interfaces, and effort required to collect and validate data. Once the process of regular data capture and updating has been established, administrators will find it possible to vary the scope of data being requested and so increase the depth of the business process inventory and the risk metrics relating to it. BIA Calculations reflect your own methodology The BIA module is uniquely flexible and will enable your methodology to be aligned to leading standards (including ISO22301) whilst flexing to the exact requirements of your organization. The BIA module enables control over the methodology for collecting metrics that will drive the BIA. Our unique declarative XML structure and intuitive user interface enables you to add or remove fields and adjust computation rules as your requirements change. Dependencies Factonomy Resilience has an advanced data model that sets it apart from other solutions on the market today. Relationships can established against multiple categories of assets whether directly sourced within the Resilience database or indirectly through integration with other enterprise data sources. The data model can flex to capture ALL relevant inputs Rich controls (sliders, drag & drop etc.) aid data-entry RTO and RIR calculations can use any and all connected data to compute results. Matrix and grid interfaces are compatible with many different metric types including MTPD & MAD Trigger workflows, business rules and active alerts encourage and enforce data quality choices. Aiding Stakeholders and Executive Management One of the key objectives of the BIA is to aid stakeholders when ranking the importance of different business units and functions and then direct appropriate levels of resource and the provision of failover and resilience services that support operations. A notable by-product of this process can be the discovery of expenditure on systems and processes that are unconnected with critical business activity and the cost savings available in decommissioning such systems. Delivering dashboards to Application Managers, Senior Executives and the BCM team is easily achieved with Factonomy Resilience charts and dashboards, whilst use of the scenario modelling module enables the execution of complex what if? calculations. Factonomy allows entire BIA s to vary by organizational hierarchy if desired. Questions can be automatically controlled at regional, divisional, right down to function (or process) level. Assess upstream and downstream for organizational processes and business units, External organizations External Supply Chain partners and suppliers Key primary and secondary locations ICT application Component (hardware), server and application dependencies Critical staff and key stakeholder dependencies Wizards & Questionnaire

3 Streamlined management of best-practice service continuity and disaster recovery. Service Continuity (also known as I.T. Disaster Recovery), involves the management and testing of the procedures required to ensure immediate or rapid recovery of critical technology infrastructure in the event of an unplanned outage caused by natural or human-induced events. A disaster recovery plan includes the collection of comprehensive interlocked actions to be taken during a failover or recovery event along with enumeration of all materials and resources required to achieve the desired outcome. Each action plan must be regularly tested both in isolation and in scenarios that imagine large scale events requiring coordinated efforts across many different impacted services. Advanced Reports A comprehensive management information console provides immediate reference points for service recovery managers and ITSM stakeholders. Access all BCM metrics and data in DR plans The run-book management solution shares connections to other enterprise data sources including the mapping of processes and their owners to applications or the configuration data that can model system connections and dependencies. Benefits Provide a sense of security. Minimize the risk of delays. Control the quality of run books Guarantee the reliability of standby systems. Provide a standard for testing the plan. Minimize decision-making during a disaster. Aligned to your organization Organizational appetites and approaches for service continuity can be varied. In some organizations, recovery activities can be centred around services that encapsulate many different elements that may be perceived by the business as a single entity whilst others may take a more IT focused approach centred around recovery of individual applications. Factonomy Resilience provides the tools necessary to build and maintain the data-capture, enterprise integration, workflow, testing regimes and document templates compatible with any approach and used in some of the worlds largest organizations. Build and maintain: Run-Book Management Factonomy run-book aids administrators when controlling a large number of run-books and the activities they represent. Run-books are stored as relational data in the Resilience database but can easily be output in PDF format, making it simple to print for presentation or store in physical book form if required. Run-Book instances can be created in relation to an active incident so that engineers can record progress and make notes that may inform future revisions in light of immediate lessons learned. Complex Run-books for application recovery DR procedures Approved and maintained best-practice Write once, placeholders allow content re-use Action checklists Plan templates, PDF documentation and Excel reporting Use wizards and forms to simplify DR tasks Easy to use wizards simplify complex recovery tasks into a sequence of short steps. Detailed technical instructions can be collected and assembled from integrations with 3rd party solutions and screen capture technology. Contact information Hardware components Software components Procedural Information Vital Records Disaster Recovery

4 XSLT template management: Market leading flexibility in document production from data. Factonomy Resilience plan templates enables the production of high quality printed and PDF plans that draw from the content and data maintained by different user groups across your organization. A plan template provides full freedom to define the style, format and appearance of the output with none of the restrictions commonly seen in legacy BCM software products. Unrestricted plan templates (BC, IM and other GRC disciplines) Publishing Industry standard XLST-fo technology Absolutely no HTML Editors in the browser Full fidelity PDF (graphics, links, headers, numbering, ToC) Attachments rendered directly in appendices Publishing Standard Template Technology The plan management module is a core module of the Factonomy Resilience system providing the business with an ability to define and capture data required to understand and present its business continuity profile both internally and to regulatory authorities around the world. Simple end-user interfaces By capturing everything through simple easy to use wizard interfaces the workload on the business is radically reduced resulting in greater acceptance of the system from users and higher levels of compliance with existing business policies. Automated Plan Generation With all business continuity data recorded within the centralized database it is possible to output current business continuity plans in PDF format on demand. Templates share access to the same data and so a site plan may summarize information about many business units and functions linked to the site whilst a critical staff action plan may be condensed to the size of a wallet card. Workflow can be configured to force periodic review and sign-off events across the business with levels of escalation where data quality can be reviewed. Data drawn from across the system into the plan: Templates can include placeholders and filtered objects that use data from across the Resilience system and connected enterprise systems to link and format data and text into the final document output. Common sources include: BIA Process & dependency data End user supplied content (segments) Production and Recovery Locations Organisation (LOB, Division, Department, etc.) Location (Region, Country, Building, Floor, etc.) Connected enterprise systems (Staff, Apps, Vendors,etc.) Data Centric Plan Development Unlike systems that use Microsoft Excel and Word, the overriding advantage of a data centric system such as Factonomy Resilience is that information can be captured once and used many times. For example, data entered about critical staff required to perform a function can feed a local business continuity report whilst also feeding divisional or regional risk dashboards, equally, information captured about a specific site or location can be fed into every document that references these locations. Rolled-up Plans across Regions & Divisions High-level reviews can be conducted at regional or divisional levels or at any point in a connected hierarchy such as legal entity, location or reporting matrix. Reviews can take advantage of graphical dependency data or dashboards that portray levels of business rule and policy compliance. Planning Dimensions Traditional business continuity solutions have relied on the creation of planning documents as a key source of information. This approach is inflexible and provides only limited benefit to the organization whilst offering very little consistency in approach. With the centralized database at the heart of the Factonomy Resilience solution however, planning documents can span many dimensions of the business without the need to re-enter or double record the information. Plans & Template Management

5 Test & Exercise Management: Automated testing across BCM and DR Comprehensive tests can be conducted using different models and approaches to cover every recovery strategy that BCM and IT DR managers may require. Testing can range from single application failover to full data-center and region wide scenario tests. Background to Testing Performing regular tests of business recovery procedures, facilities, security and IT disaster recovery plans is essential to establish and maintain an organization s resilience. The scheduling, scoping, management and reporting of tests is a complex process that can be greatly simplified by using test & exercise management capabilities in the Factonomy Resilience suite. It is essential to identify gaps between expected recovery times and those achieved and to map the recovery times recorded during testing to those required by the business in line with its key metrics. Workflow to drive test scheduling Factonomy makes it easy to set business rules determining how often certain tests must be completed and then initiate workflows to marshal your resources through simple interfaces and chase s to ensure the tests are carried out, the results captured and the implications rolled up and reported. Deploy tests and exercises for: Locations Lines of business Home working Specific assets Application groups Regions and clusters Embed testing for multiple diverse scenarios Integrate BIA and recovery requirements with testing Deliver comprehensive exercises Create Post Test Reports / Post Exercise Reports Manage and audit test results Scoping tests and setting compliance Scoping tests and achieving all necessary business and technology acceptances can be a complex process often requiring multiple rounds of negotiation and compromise. The Factonomy Resilience module facilitates this process through a number of workflows, communications and data capture events making it easier for those involved to understand the extend of any necessary disruptions and to ensure adequate mitigations are in place. Critical Staff Testing Ensuring business functions continue to be performed requires that staff are able to operate fully during an invocation. Whether deployed to a dedicated recovery site, working from home or transferred to a remote office it is important to ensure that each plan element has been tested within limits set by the continuity team. Technology With enterprise integration available to application inventories, configdb databases and other technology stores, it becomes possible to map dependencies between technology and business function. Factonomy testing can extend into the disaster recovery space and help managers schedule, document, execute and analyze large scale failover and recovery tests involving geographically disperse assets. In conjunction with Factonomy run-book management, test documentation will be integrated to include run-book activities and vital records. Manage all test communication between stakeholders Simplify the setting of scope Relate tests and full-scale exercises to the RTO s of business functions Integrate with Run-Book management module Integrate with CMBD (Config-DB) and I.T. Inventories Home Working Not all tests can be conducted centrally and not all scenarios require massive exercises. Home working is an increasingly common recovery option that can be tested by individuals often as part of daily BAU operations. Testing & Scenario Exercise

6 Scenario Modeller: Prepare for interruptions Respond to incidents in real time. In the initial stages of an incident, crisis management teams are faced with the near impossible task of understanding the scope of the incident that is taking place, pulling together information on assets and processes affected by the incident and taking decisions that will affect the overall outcome of the incident and the organization s standing when it is over. organization long before any crisis occurs. The navigation and reporting tools make understanding complex interdependencies as simple as clicking the mouse whilst the drill down ability makes all of the deep level data immediately available within the same interface. Point in time models developed through BIA metrics, recovery requirements and dependencies Dynamic report that creates new and persistent models every time it is used What-if Scenario Modeler The Factonomy Resilience BCM Modelling & Incident Management module provides a simple solution that links to the centralized information store and allows permitted users immediate access to a What If interface where they can use the relationships between business processes and assets to rapidly assemble a full picture of the developing incident and begin the process of reporting and prioritizing recovery efforts in real time. Providing a framework for communications The communication capabilities within the module allow for quick access to call tree information at any level within the organizational hierarchies. When integrated with Emergency Response Systems (EMS), it is possible to immediately invoke the required communications and to include targeted action plans and status reports as the situation develops. Event escalation allows local managers to initially create an incident scope which can later be escalated to a regional or global level as the scale of impact becomes fully understood. Real Time Crisis Management As real events and business interruptions unfold the scenario modeller can generate crucial management information to help guide the recovery. After inputting all or any locations, lines of business, key products or services or IT Applications affected by a current interruption, scenario modeller will provide information on potential knock on secondary issues. As well as a key ranking of business functions affected that can always be recalibrated as the interruption progresses. Produces an end to end report with before and after Sets out what is being impacted and why Providing a full executive summary for management User defines inputs to the scenario User selects inputs for the scenario (Asset, Locations, Vendors, Process) either individually or combined Uses RTO scores to rank the impacted processes and assets requiring action Ranking processes can be re-scored if priorities change Outputs results into dynamic charts and dashboards Auditing and administration The audit trail of an event records all major activities from the initial incident creation through to resolution and provides for the review and analysis of the data after the event.. Test suspected S.P.O.F (single points of failure) Understand direct or indirect dependencies on key locations Examine upstream and downstream dependencies on key processes Evaluating Threats The features of this module can be used to model possible future scenarios and aid the organization in understanding complex and deep relationships that exist. The graphical interface answers what if? questions and is a powerful tool for exploring weakness in an Full audit trail Assign new or pre-defined activities to response team members Remain focused on regulatory requirements that may be easily overlooked Filter by hierarchies including lines of business, region and crisis org structures Scenario Modeler