Business Continuity Management Continuity Plan
[Music] hey everyone it's justin thank you for watching in this video we're going to continue talking about business continuity management and specifically in this video business continuity plans now in a previous video video we talked about business impact analysis where we look at hey if something were to go wrong what would the impact be on the planning side what we need to do is establish a plan so that if and when something does go wrong whether that's something to the business to its piece of software application of building a data center what are we actually going to do what's the plan for us to respond to an event and manage that so we actually look like we know what the heck we're doing so we do that we start with a continuity plan and service now and this is what it looks like high level and i'm going to probably keep this really high level because we could probably spend an hour talking about all this number one right up front you can see i have some high level overview details about a continuity plan what's in scope and of the things in scope what's the least recovery time objective you see there are 72 hours is the least rto for all the things so at a minimum we'll start recovering in this business continuity plan within 72 hours how many recovery teams are assigned to this plan okay so right now we don't have any recovery teams how much documentation is associated with this you'll see in the documentation that it's big on checklists which are usually part of some dr business continuity plan printed in a binder in the old days in the new days we got them in service now and the last piece here is recovery tasks so who do we need to do something and how can we assign that to them so they do it and get it done in order for us to recover as quickly as possible now over here we've got some dependencies by lost scenarios at the very bottom here so i have a loss of workplace scenario that has a recovery strategy in this particular continuity plan but my cyber threat my loss of critical vendor and the loss of personnel personnel don't have a recovery strategy but we do have some assets associated with some of those so again for someone who's doing business continuity planning this is a good place to come in and see kind of where you are in the plan now notice if i go to this details page actually it's just above here i didn't need to go to the details page but we were going there anyways i've got a state for this so think of your continuity plan as a living and breathing document that is going to be drafted revised approved revised approved retired or archived it's going to have it's going to evolve over time because you're going to go through a crisis or an event and you're going to modify it we're going to change some part of that over on the left here on the details tab we've got some basic details what business unit department and who's the actual lead associated with this continuity plan so in this case scott hall is the bcm lead and this is focused on our hr department um it is a continuity plan but you can see you've got recovery and crisis response plans too so you could differentiate between the three items there and then we have an owner allie pumphrey here who's the plan owner right so somebody somebody here scott who understands business continuity management but ali is probably a high level director vp who's the owner for the actual plan any activity we'd see there let's jump over to scope we can see okay for this continuity plan it's looking at four different business processes ap ar customer support and higher to retire two of which have an rto none of which have an rpo we covered rto and rpo in our business impact analysis videos so if we wanted to add something there we definitely can do that now the documentation piece of this we get to create these sections as much as we want so i can come up here and do a new section and start drafting a new section you'll see where this comes in when we actually go make a pdf out of this this is the plan overview it's got scope objectives some definitions assumptions a glossary of things right there notice we've got a template ability here so we can put some templates out there for people to get quick started and use it and not have to kind of reinvent the wheel for every plan here's a checklist so you can see there in the first 30 minutes we need to do this in the first hour we do that and then and the for ongoing we need to monitor personnel right these are things that you'd want to do in a crisis um for requirements for exercise you know if we need to do anything there we could add some stuff there and i've got a scopes and objectives an empty scope and objective section that we could put there this is all wissy wig though so i could come in here copy paste from word um type anything i want in there uh wysiwyg is what you see is what you got uh kind of uh editor there like so you can put in free text and format and stuff like that like you saw on the overview page i don't have any recovery teams associated with this business continuity plan but i could go ahead and add them and we could say hey for this particular one we're going to call this the hr super awesome team and what's cool is then we get to go select different groups already in servicenow and associate them with this kind of team that we just made within business continuity management and then i can even pull in the user so i like to grab abraham lincoln and put him on everything so now i've got the hr super awesome team that's uh now a recovery team within business continuity management consisting of those two groups plus abraham lincoln so that's as easy as it there and then they're going to be used to for notifications and stuff like that my lost scenarios you saw those on the overview page there but we've got cyber threat loss of business apps right these are the things that people have thought through about what would happen and then if we have those last scenarios what are the tasks required to recover okay so this is notifying recovery personnel completing damage assessment right you can create as many tasks as you want i can just come in here and click new create a task given an id we can pull in different scope and dependencies and have all those associated associations with those things in our in our plan last here we got users locations and vendors that we can associate with our business continuity plan this again is keeping us organized so that we know what to do with this i had a video on this for the san diego release but i'll highlight it again there's a copy feature on these business continuity plans so you can copy them and do it a lot easier last thing to cover is that generate pdf button which i just hit and what that does if we go back to the details section it creates a pdf of the business continuity plan so you can take this and print it and put it in a binder if that's a requirement sometimes people need physical copies of things if i open the pdf you can see now i've got all that documentation you saw in those tabs there i got my checklist i've got the empty sections that i didn't put anything in there for exercise requirements and scope and objectives what teams so there's my hr super awesome team with the groups and users so if i'm looking at a piece of paper i know i need analytics in the apache support group plus abraham lincoln in order to work on this here's my lost scenarios and strategies for recovering from those and then i got my recovery task associated with that and i've got the users that are associated with it there so that is a business continuity plan within servicenow and we close out this pdf and just hop back to this overview here and i'll emphasize again the states here so it's going to be a continual process of creating these updating them doing exercises and heaven forbid having actual events where you have to execute your plan in order to recover and restore services restore functions i hope you found this video helpful if you did please like please subscribe or share with somebody who you think might be interested and until next time don't forget to always be learning [Music] you
https://www.youtube.com/watch?v=gOOM_kMIgWo