Business Continuity Management Overview
good morning my name is Chris Hamrick and welcome to the ServiceNow business continuity management system the ServiceNow BCM system supports the entire business continuity lifecycle from n to M program support and automation to implementation and validation we'll get started by going through our analysis phase so service now is BCM allows the end-users to perform a business impact analysis which is a module which helps the user understand the impacts prioritize their recovery objectives and map their dependencies we'll start from the user dashboard and open up a business impact analysis assessing our key business processes across the organization these processes can roll up to department's business functions and even units the business impact analysis loads within a single windowpane and the end user has their table of contents on the left hand side starting with the details which identifies who has access to this BIA what are their roles and responsibilities what element are we assessing and then we have our key metrics which includes our criticality score our recovery time objective which is essentially how critical is this process and how quickly does it need to be recovered and then our maximum tolerable period of disruption the end user will be able to map out all of the key dependencies which this critical process depends upon one of the key advantages to doing ECM on the ServiceNow platform is the fact that we can leverage all of our existing enterprise data using a single data set model as well as leveraging relationships across the platform in this case you can see within our connector legend that some of our dependencies are solid lined mapped and some are dotted line mapped the solid line indicates that these relationships have come in automatically across the platform the end user can expand and enhance these dependency mapping by clicking on add remove child dependencies which gives them the ability to select and map any other as a dependency in addition to our dependency mapping n users will be able to understand that impacts and prioritize their recovery objectives by assessing impacts over time in this particular example we are assessing five different questions and within each question we're assessing the impacts over time you can see we have specific time frames and different impact ratings as the end user goes due and assesses the impacts over time the system will calculate a criticality score which will then drive the recovery time objective in addition to the BIA end users will also be able to perform site threat assessments these assessments are used to measure natural man-made technical and other risks by location for example if I go into my Raleigh North Carolina assessment you can see here I'm capturing inherent risk and residual risk for that particular location and then you can see all of the different threats which are included in this assessment as part of the assessment I'm looking at the impacts the likelihoods and whether or not we have effective controls in place reporting and dashboard of the results are available which allows the end user to visualize the impacts and the threats and then also develop response and recovery strategies around us these dashboards come out of the box and I can quickly access that through my overview page from here I can see overall inherent risk overall residual risk per location broken out by threat I can drill into any of these categories and see the actual threats related to natural for my San Diego location following the analysis the end user will go through the implementation implementation phase which covers plan development integrated strategies into those plans and also identifying people procedures and resources that are required for recovery so I'll go ahead and open up an example of my Human Resources business continuity plan from here our admins can go in and update the details specific to this plan such as type of plan the Department the owners the approvers contributors and any approval due dates and next test dates the end-user can click the view plan which will take them to their plan user interface the plan similar to the BIA includes a table of contents with each section loading within a single window pane the end-user can quickly navigate from one section to another by clicking the link here or by clicking the up and down arrow as you can see here the data will load within each plan one of the key benefits to doing business continuity planning on the platform is that a lot of this data is going to automatically be updated based on data coming from core ServiceNow platform tables for example my list of key employees I can quickly go in to edit that list and see that this data is being pre-populated based on data coming from our system user table one of the key areas within our recovery plans are our our recovery activities which are kapor captured via our recovery task list these task lists identify the specific activities that need to occur in the event we have to activate this plan and as you can see here we can assign these tasks out to key individuals tasks can also be identified as occurring in parallel and we can also have tasks with subtasks that roll up to each task list in addition to our tasks being on platform we can also relate any risks directly to an element or directly to a plan for example we could see we have a number of risk associated with our client services process and I can quickly go in to view that risk and see at what at what stage is the risk in the description that specific risk any indicators controls in any monitoring that's going on in addition to risk I can also link controls that are rate related directly to any of the elements within the scope of the plan or the plan itself and I can quickly go in to view the control to see the specific details the status any specific attestations indicators test plans and risk associated with that control once the end-user has completed the analysis phase in the plan development phase they'll now be ready to go through the recovery management module the recovery recovery management module can be used across four different four different components that make up a recovery a bit the first is the incident management which is determining which plans or which elements have been affected by an event crisis management which is the actual activation of those plans recovery which is going to an activating each plan and then restoring those plans to a normal state from the recovery event portal each user will be able to go in and identify which which element has been impacted for example you may you may have a location outage I can quickly go in identify the specific location and select that that location as experiencing an outage following that the end user could quickly see what other elements are impacted as a result one of the big key indicators using BCM on the platform is the system's ability to automate and identify impacted dependencies based on a single point of failure or a single outage from here I can quickly see that there are 35 additional elements that are impacted as a result of a data center outage from here I can see the elements that are directly impacted which are identified as level 1 and as I scroll down I can see additional level 2 level 3 level for these impacted dependencies are identified based on our dependency mapping which is performed during our analysis phase from here I could select additional elements that are that are impacted and then the last step is identifying which plans need to be activated the system will automatically look at where the outage has occurred what dependencies have been impacted and then recommend the plans that need to be activated I can quickly select all or I can pick and choose which plans need to be activated once I update the event the system will automatically automatically create an event record and bring in all the recovery activities allowing our crisis management team or our B C or D our coordinators the ability to manage all aspects of recovery of them once the event has been updated I can open up that vent and start working on the recovery process the top half of the screen I can add specific details such as related events I can select an event type which could be an exercise or an actual event I can select the test type and then start my restoration workflow as I scroll down you'll notice I can select key participants these could be these could be individuals who have recovery activities associated with their with their groups I can also set incident command roles in the event of an exercise I can capture my goals and objectives my key losses my lessons learned and then track my overall event metrics below the fold here I can now manage the recovery of plans elements and monitor my recovery tasks within my plans I can prioritize plans based on their criticality with element's I could see all of the key elements that make up the plans that I've activated and I can sort those by recovery time objectives and manage the recovery of those specific elements and then I can manage my recovery task list the tasks for each plan will come into the event and if they have an assignment group or an assigned to associated with it that will also come into the recovery event as well as I go through and close out my tasks Tass will automatically change state and kick off different notifications and workflows that have been configured if I go back and check my plans you'll notice that the start time has automatically updated based on the tasks that have been closed and I can now report up the leadership on the status of the overall recovery of a particular plan element or tasks within my within my event in addition I can also link with other areas on the platform within itsm or item such as incident management change management and project me on the truth the last area we'll focus on is reporting and dashboard this is one area where we use the native ServiceNow capabilities which allows our end-users in our program program managers the ability to create dashboards with with different reports that will allow them to visualize their response recovery strategies plan and BIA status exercise and event status overall assessments and facilities facilities management thank you for taking some time to view the key key components that make up the ServiceNow DCM module
https://www.youtube.com/watch?v=lmi6vWh0Y1k