Realize the Value of Threat Assessments with Business Continuity Management
today we're going to talk about realizing the value of thread assessments and service announcements continuity management solution here in service now you can see that I'm loved in a Scott Hall Scott Hall is the manager of the business continuity management team I can also see the status of several different thread assessments that are currently taking place in the organization the green represents those that are brand new the blue represents those that are in progress and the yellow represents those assessments that are in a completed state I can even see the overall risk rating of each one of those assessments based on the answers that are provided in the assessment questions so let's go in and take a look at two specific assessments that are currently brand new and we'll go into one which is the loss of the Genesis team at the development site in Salt Lake City now we'll go into that assessment you can see we've named the assessment we've tied the assessment to a specific location within the scope of Acme corporation this is common where geographic threat assessments are done based on different locations that where a company has assets or locations office locations data centers deployed the status is currently new the assessment has not been completed yet and it is tied to the architecture domain the inherent risk and the residual risk are being driven off of the individual assessment you can see that is captured in this list view here so let's go into that record and this is just about as simple a threat assessment as you could possibly put together we've named the assessment and by the way that was the record that we were just in the combination of the impact and likelihood automatically drives that inherent risk score and you can see four times two equals eight the control the efficacy of the control also determines or is a determining factor in the residual risk score so in this case there are no controls in place to mitigate the threat of a pandemic or an epidemic that would affect the personnel at this location therefore the inherent risk and the residual risk are equal to one another because those controls are not effective if we chose partially effective effective or highly effective that of course would have a an impact on that residual risk that rolls back up through the scoring on the risk tab in this record inherent risk is 8 residual risk is 8 because the controls are ineffective and of course this rolls back to the dashboard on the threat assessment where we can see what status we're in and the overall assessment rating so in closing the three benefits of threat assessments and ServiceNow business continuity management are making better risk informed decisions with visibility into the likelihood and severity of a worst case scenario we today we reviewed a pandemic scenario number two improving business continuity planning and number three minimizing the cost of an overall disruption for more information on business continuity management check out the solution page at ServiceNow com thank you and have a nice day
https://www.youtube.com/watch?v=ng3KVJMAZwc