Define scope, resilience strategy, policy, and program. Set up oversight, RACI, annual attestation, operating frameworks, and target operating model.

How our platform helps:

• Define Stakeholders: Assign all stakeholders as platform users with RACI (Responsible, Accountable, Consulted, Informed) roles.
• Enable Collaboration: Use workflows for seamless collaboration and decision-making on risk assessments, treatment plans, and more.
• Annual Reviews: Schedule annual review and attestation cycles for operating frameworks for better governance.
• Automated Scoring: Implement automated scoring models for operational risk and resilience events, ensuring timely insights to stakeholders when thresholds are breached.

Identify Important Business Services that could cause harm to customers, markets and the supply chain.

How our platform helps:

• Identify and Manage IBS: Tailor predefined templates to suit your unique organization’s needs to define Important Business Services (IBS) with all required details to monitor resilience.
• Periodic Reviews: Setup collaborative workflows for stakeholders to review their IBS criteria to ensure it stays relevant, guided by industry benchmarks and Board approval.
• End-to-End Mapping: Link IBS to impact tolerance, critical resource monitoring, and disruption testing of underpinning processes.
• Real-Time Dashboards: Gather intuitive insights for Board and ecosystem decision-making for risk and resilience management.

Draw end-to-end process mapping of Important Business Services, encompassing personnel, facilities, procedures, technology, information, and critical third-party dependencies.

How our platform helps:

• End-to-End Process Mapping: Use inbuilt drawing tool to create detailed process flows underpinning the IBS. You also have the choice of importing existing Visio process maps and continue with your analysis.
• Vulnerability Analysis: Each resource linked to an IBS can be analysed based on four vulnerability questions.
  • Is the resource a single point of failure?
  • Is the resource a concentration risk?
  • Is the resource substitutable?
  • Is the resource complex?
• Integration with Scenario Library: Link new vulnerabilities to a scenario library, aiding in the required periodic stress testing activities.

Set impact tolerances for each Important Business Service, based on potential harm to customer, market, supply chain and firm.

How our platform helps:

• Set Impact Tolerances: Define impact tolerances (IToLs) for each IBS, based on potential harm to customers, market, suppliers, or the firm.
• Specify Thresholds: Establish recovery thresholds for disruptions, with justifications for acceptable levels of harm.
• Notifications: Set up breach notifications to alert stakeholders for timely action.
• Reporting: Link incidents to IToLs and IBS to calculate recovery time and assess tolerance compliance.

Implement risk and control measures for vulnerabilities in critical resources supporting each Important Business Service.

How our platform helps:

• Risk Identification: Map critical resources to identify vulnerabilities and risks.
• RCSA: Perform Risk Control Self-Assessment with inherent and residual risk scoring.
• Risk Response: Apply four treatments: Treat, Tolerate, Transfer, or Terminate.
• Control Management: Use mitigating controls, periodic testing, and automated risk score updates.
• Timely Action: Notify stakeholders to implement mitigations, initiate actions, or develop remediation plans.
• Dynamic Strategy: Incorporate new vulnerabilities into scenario testing for continuous improvement.

Set up a system to assess, monitor, and plan exit strategies for critical suppliers and service partners based on their operational impact to your critical services and Important Business Service.

How our platform helps:

• Outsourced Resource Mapping: Identify third-party resources for each Important Business Service.
• Vendor Assessment: Evaluate vendors during onboarding to determine if they qualify as Critical Service Providers (CSPs).
• Risk Evaluation: Assess service materiality, concentration, systemic risks, and adherence to SLAs, KPIs, and KRIs.
• Resilience Monitoring: Track resilience test results for critical services to identify and mitigate risks proactively.
• Exit Strategies: Define strategies for both stressed and non-stressed exits to ensure seamless transitions.

Develop strategies for emergency response, incident management, crisis management, business continuity, and disaster recovery during disruptions.

How our platform helps:

• Pre-populated Plans: Access prebuilt plans for corporate communications, emergency response, incident management, and crisis management.
• Structured Approach: Ensure effective management of disruptions and business continuity.
• Business Continuity & IT DR: Develop business continuity and IT disaster recovery plans based on business impact analysis and operational resilience impact tolerances.

Conduct stress testing of critical resources using simulated severe disruptions to reduce risk, enhance capabilities, and refine response plans.

How our platform helps:

• Scenario Library: Build a centralized repository for testing critical resources and assessing resilience.
• Scheduled Testing: Conduct regular tests to evaluate action plan effectiveness in disruption recovery.
• Insights & Updates: Identify new actions and vulnerabilities, incorporating them into the system for proactive risk management.
• Ongoing Monitoring: Continuously monitor and mitigate risks identified during testing.
• Continuous Improvement: Foster a culture of operational resilience through regular testing, ensuring sustained business continuity.

Foster a culture of continual improvement for operational resilience through the Plan-Do-Check-Act cycle.

How our platform helps:

• RACI Matrices & Workflows: Create a collaborative system organization wide, that fosters resilient operations and continuous improvement, with timely insights across all your IBS.
• Action & Remediation Plans: Enable users to initiate, monitor, and evaluate improvement actions.
• Centralized IBS: Get an interconnected view of all key controls related to your IBS for quick actions and remediation.
• Target Operating Model: Achieve strategic goals by optimizing processes and fostering resilience, efficiency, and adaptability.

Ensure Board-level assurance on compliance with Operational Resilience Regulations.

How our platform helps:

• Real-Time Self-Assessment: Link controls to IBS for instant self-assessment reports anytime.
• Comprehensive Dashboards: View resilience progress with historical data, current status, and projections.
• Automated Reporting: Generate tailored reports for board and regulatory compliance.
• Demonstrate Resilience: Highlight improvements and communicate progress effectively to stakeholders.