logo

NJP

Execute a Better BIA with Business Continuity Management

Import · May 06, 2020 · video

hi today we're going to talk about executing a better business impact analysis and service now's business continuity management solution notice that I'm logged in as Scott Hall and you can see Scott has visibility over the entire organization because he's the leader of the business continuity office or the business continuity management team so he can see the status of all bi aides across the entire organization as well as any disaster recovery business continuity or crisis management plans that have been created as well Scott wants to see the B is that he is specifically accountable for he can drill right in on that my bi ace tab and click right into any bi aids directly from that tab so we'll go under the client services BIA and you can see here the bi a survey details gives you information about the name of the BIA who has accountability as the approver who is the owner of the BIA who are the contributors that have the ability to edit may be questions to the BIA that you see here what is the BIA targeting and this is very important and I think a big differentiator for service now because the BIA functionality can target business processes as well as applications that are housed in the CMDB or if you don't have that functionality or not utilizing that functionality that are specific to elements that you build out within the business continuity solution the status this one is currently in an approved State the cadence that's how often you are refreshing your BIA s and then the due date for the next time that the BIA does need to be refreshed the score and the recovery time objective are automatically being generated off of the answers to the questions that you see here in the BIA a BIA contain various questions you have complete control over which questions you want to add for each and every one of your bis and you can tailor that specifically to the BIA you can also weight each one of the questions as far as how it rolls up and automatically calculates that criticality and that score and the recovery time objective so let's start with the dependency tab here this is a very essential functionality here within service announced business continuity solution and I think it's a good differentiator as well so you notice that we're basically building relationships in this case we've got a business process client services that's being targeted by the BIA and we're establishing relationships between that process and the various assets that enable that business process as well as any related business processes to that process that client services process you can easily add or remove parent processes so that would be anything that appears above like invoice management and si P financial accounting and then you can also add or remove child dependencies as well and that's anything that appears here below now you can also take advantage of the functionality that you're building out in your CMDB within ServiceNow and again this is a huge differentiator if you've already built relationships between business processes or business services and various applications for example in the CMDB those relationships will appear with solid lines between the different nodes okay if the relationship building is done specifically in the business impact analysis functionality within ServiceNow that business continuity management then those relationships will appear as dotted lines like the ones you see here so all the relationships that we built here have been built within the business continuity solution furthermore if you've established recovery time objectives for any of these assets through a BIA and you've established in this case a recovery time objective for this business process that we're targeting in this particular BIA if there are gaps between recovery time objectives recovery time objective is essentially how quickly you need to recover a business process and/or an application at an alternate site if you have a disaster or a crisis or a business continuity event you have gaps between recovery time objectives those gaps will show up in red good example would be lets say client services has a 15-minute recovery time objective yet it relies on application X to enable that process so you can't do the process without the application an application X has maybe a four hour recovery time objective you then have a gap because the application that client services relies on has a lower recovery time objective so basically what you see would see there is that gap would show up in red alright next tab will talk about is the attachments quite often you'll see attachments added to a BIA any that would be any pertinent data any considerations that need to be taken to account when fully filling out the BIA next any general comments comments can be passed between contributors and owners or approvers of the BIA and then you get into the real meat of the BIA itself and that is the questions that are being asked this is just an example of five different questions that we have available again you can change you can create your own questions you can take the questions that we provide and tailor them and change them you can weight each one of these questions separately again to roll back up to that recovery time objective in this case we're asking five simple questions and they're around impact always assuming a worst case scenario as we mentioned earlier so if you cannot perform this particular client services function or process what is the impact to clients and you're looking at impact over time definitely a standard within business continuity to look at impact over time because as an outage or out of service condition goes on and continues further in time and lasts longer that impact will ramp up over time and that's why we ask about the impact over these different time increments next brand image and reputation this is around you know what is the impact to your reputation and your brand image if you can't perform an essential service that potentially customer facing next legal and regulatory impacts again we're trying to understand maybe if you're going to incur fines if a particular functionality is down and whether there are any legal ramifications financial impact this generally has most of the waiting here this is where we're trying to understand over time any monetary loss any material impact as a result of a worst case scenario and in this case a loss of the client services functionality in your organization and then last but not least what is the impact to your operations internally for example if you have a particular situation where employees can't do their job at a particular location for an extended amount of time or you have applications that are down for an extended amount of time what is the impact internally to your overall operation all right and all that would roll back up to my dashboard once that's the be IAS move from the in progress state and then are submitted to the approver for approval the approver has the ability to look at the BIA and determine whether or not it is satisfactory and meets all the general criteria and whether the answers make sense and if not they can push that back to the people that have the ability to make changes to the BIA or they can approve the BIA in which case the BIA would be would move to an approved State here you can see if any heavy ayane's had been returned they would show up in red so in closing we've covered three major benefits of business impact analysis the first to make better risk informed decisions with visibility into the risk of worst-case scenarios second to recover critical systems and business processes more quickly and last minimize the cost of a major disruption for more information on business continuity management check out the solution page at ServiceNow dot-com thank you and have a nice day

View original source

https://www.youtube.com/watch?v=HPIQc__CpaE