What’s new in Business Continuity Management
awesome so as everybody else rolls in we've got quite a few people on the line uh but I'll get started and uh kick this off for Oswin So today we're going to talk about what's new in continuity management with the Washington release I quickly have to go over the safe Harvest statements we tend to try to be as transparent as possible with what's coming in the product and answering your questions as much as we can um but that being said please note that things can and do shift during our development cycles and don't hold us to anything that we're saying on this call but if you do have additional questions after this call feel feel free to contact us we're happy to be as open as I said as we can about what's coming up in that vein we do have a lot of webinars and exchanges and an interactive series on the service now community and today's session is part of that live on service now Cur a event Series where we're trying to connect service now experts and peers with you and helping you deploy your products and Achieve value faster you can join the schedule by scanning the QR code or I'll put a link in the chat shortly after my comments thanks for joining us and I will introduce Oswin briefly but everybody on the call probably knows him as the principal product manager for both business continuity management and operational resilience um I am rosin morville and I'm the senior marketing manager you are on mute uh so definitely please use the chat feature or if you have questions the Q&A the Q&A is better because we can see who is asking the question and it will be recorded So if we don't get your to question then we can follow up after the call the session is being recorded as I said and it will be live in the community Forum shortly after after the event and after the session ends you may be prompted for a short survey and we use this for future uh content and try and get us uh ideas and inspiration as well as give you all the Insight that we can so please use that survey uh whenever it's prompted so that we can be more helpful to you I wanted to let you know that our new risk applications and updates are now live in the service service now store uh this is the Washington release and it was released um earlier uh last week we do have a lot of sessions coming up to talk about things that have been released in the Washington release earlier this week we had an on we had a session that will now be placed on demand in a day or so in the community on privacy case management privacy management is now a standalone uh product that you can uh purchase so definitely if you're interested in privacy check that out and uh see what what's available we also how going to have risk management I will be back again to talk about third-party risk management with Stephanie where we're talking about some questionnaire enhancements um assessment enhancements and some due diligence things that we're adding to the product we talk about continuous authorization and monitoring on February 20th on the 22nd we'll go over compliance and audit management and then on the 27th we'll be back to talk about more privacy when we talk about the radar first integration with our partner so today as I said we're here to talk about business continuity management there are several enhancements that oswin's going to go over in a demo I won't go into the detail on these slides but I did want to include two slides for your reference so that you can see what we're talking about we're talking about some automated uh enhancements to Bas and plans and then we're also talking about the availability of operational resilience within BCM so without further Ado I'll definitely turn this over over to aswin uh because he's got all the detail and it's easier to see within product so aswin if you could take over that' be great sure let me share my screen and then we can discuss this just give me a second I hope you can see my screen loing I can see the power point okay all right thanks everyone for joining our today's session uh I'm not going to use a lot of slides we will directly get into the application but before we do that I just want to let you know whatever we are discussing today we have it already created as a collateral so you guys can just sit and look at what is being demoed right and then we will share this PowerPoint with you what I mean by that is so there are around what uh 60 odd slides it's going to cover all the screens that we are going to discuss today right so you don't have to uh create copies or uh you know spend time on that we will share this for your reference offline uh like I said we will go into the application directly right so the first enhancement that we are looking at is around maintenance of the business impact analysis business continuity plans and then finally the exercises right one of the major advantages of using service now business continuity management application is if there is data already captured anywhere in service now platform that gets reused again in B planning and exercises right this is something that we always wanted to do and Achieve so previous releases what we did was when you're creating a Bia you would be able to just say what is your scope and based on your item in scope let's say business process your related business uh applications or software will get automatically pulled in from the cmdb right and if you have done your Bia and set all your dependencies in the Bia right uh all of those dependencies will get pulled into the plan and then from plan it used to get pulled into the exercises so this is something that we already had but what we have enhanced now is the easiness of maintaining this going forward right you created a Bia and then there are some underlying changes that happened in the cmdb right how do we handle that in the application how can that be easily consumed in the Bia newly that you're creating or if you already created how can that be updated so this is what we are going to look at first then we will go into plan and then we'll go into the exercise yeah so that's the first uh enhancement we are going to look at this is on how you can uh maintain these B on a ongoing basis all right so in this release of Washington DC you will start seeing there is a new menu item that has been introduced it's called pending updates right so here you will be able to see that there are some things called as snapshots that we have created we will go into this and look at what this is and I'll I'll also explain what are the configurations behind the scene to get this working so let me open up one of the shots here so basically there is a business impact analysis that's been created in the system and once it was created uh there are some updates that happened in the cmdb that is some assets got added so you created your Bia for a business process and you published it it got approved and it got published in the system right now somebody else went in and then they protion new applications or they decommission some of them or they updated the level of relationships in the cmdb right there can be multiple changes so what this functionality lets you do is it lets you configure what are those tables that you want to monitor for example the CI classes right so it could be Linux servers that you're looking for if you're are doing an itdr plan if it's a business continuity plan it could be as simple as software applications and data centers right so you can set what are those table that you want to Monitor and what are those new relationships from these tables happening to my process in the cmdb level by the cmdb owner right and what this does is this configuration will create a snapshot for you and you can set the frequency when you want to run this uh scan right so it does the scanning part and then it'll tell you what are the newly added items which may be needed to be included in your Bia because your Bia is outdated now somebody changed the underlying relationships do you want to go and update it and publish it right so this is presented for the user to manually verify this and you can see there are 14 things added there's nothing updated as such and nothing that was added earlier in my Bia has become invalid now so it was you would see those also in these three related items once you review this you can just click on update Pia and it will go update that particular Bia in the system so let me see if I can open up one more that has something that's deleted or updated right so we can go in here and if you see here in this case some things have got deleted from the cmdb you can see the source that's where I've set the monitoring uh part right this is the source tables that I have configured we look at the configuration as well how this can be configured to monitor this entire thing if I go into the V I let's say the user doesn't go into this report right and somebody's reviewing this or somebody's looking at it at a later point in stage after this was approved and published right or if it in draft during the workflow itself in this case during the workflow somebody changed some of the data in the cmdb so you would immediately when you land on this uh record that's the business impact analysis you'll see this alert message it will tell you that there are dependencies that have been updated in the source so so do you want to view the snapshot and apply this change you click on this this will take you to that snapshot where you have the newly added ones updated once and deleted once right this is where you can see this and the US user can uh update it from the snapshot directly or you can go into the assessment and we have added something called update dependencies earlier it used to be cmdb dependencies right now we have expanded that this dependencies can come from multiple tables so we made it generic the user can click on it and then it will pull in the uh related dependencies right and once it's updated the error I mean not the error messages the notifications will go away and what would happen is in the snapshot that you're seeing here this list right uh there is also one got reduced right so that's because we would have moved that into and completed State uh so the unsaved or unupdated snapshots would be in new status once the user says I want to update it it'll move to complete it if you don't want to consume that update and just want to cancel it right it'll move into a cancel status by default it is filtered by just the new ones right you would be able to apply filter on any of these columns and set it as default so the user sees only the latest and we save this all these completed once so there is traceability right not just from the business impact analysis but from here as well where the user can go in and see on what date was this update pulled in from the source and when was it applied onto the Bia so for this the user doesn't have to monitor the system all the time what we have done is let me quickly show you one more screen here hopefully you can read this uh let me expand this so this is a screen shot of the actual email that goes out of course you guys can configure your own email as well but this is the one that uh uh is shipped out of the box right so if you are a Bia owner or a plan owner right we look at the plan as well it's a similar mail that is sent out once there are some updates on things that you own we create it like an email digest right so what I mean by that is there are two records that this person owns and and there are some updates to the underlying tables for these things so the user can see what kind of updates have happened like a summary and there is a link to go view the snapshot once you get this in your inbox that's when you'll click on this link and land up on that particular snapshot that you want to uh apply or review this is the manual method of updating these dependencies into the Bia that's number one number two is we ensure there's a configuration for our customers who have um not a very big BCM team right so the manual intervention has to be minimum so you can set that configuration and this snapshot would be created but it would immediately move to complete it even though the user has not reviewed it and clicked update Bia right it will automatically get pulled into the biia and the user doesn't even have to go click but they will just receive that email state these things have been changed in your business impact analysis if you want go look at it right at a time when they have this as priority then they can go and look at it but the change would have already happened behind the scene right so that is the other way of doing it I mean other configuration that we have introduced and before we go to the configurations let me just uh tell you one more thing so uh you can also set every time there's an update that happens right let's say this Bia is approved for instance uh when you do an update on an approved via do you want to keep it still approved or do you want to send it all the way back to the owner so the review cycle kick starts again right so the uh owner again looks at it makes every correction that they need to do or if everything is fine they submited the reviewer again looks at it and then approves it then again it goes into an approved state right or if you want to maintain the state as it is you can do that as well so these are the configurations we have done now let's quickly look at uh these configurations right so under business continuity uh we have introduced something called as general Administration um I mean General Administration and then business impact analysis dependency update configuration so this would pull in the conf configurations you can base it on the template of the Bia so for each template it can be different different frequency Etc so I'm just pulling up one so we can go over the details here so you can provide a name and you can provide uh the whether it's an active or not so in case you want to make this obsolete at some point in time right you want a new configuration to be created you can just inactivate it you can provide an order and there are help text provided in context to every single setting here right so it it makes it easier for you guys we are trying to update and maintain the business impact analysis so you need to know the table name but by default it's filled for this release so you guys don't have to uh go look for this one and then the filter condition is we are going to maintain the B that is not in an archived state right so you can set the bis that you want to update and maintain so for example if my recovery time objective is uh let's say uh recovery time objective recovery tier or recovery Point objective any of these right so you can look at that and you can set the value and only the ones with that value will be monitored and updated or in this case I said status right status is not equal to Archive only those will be updated and maintained in the system and Fields to be updated here I can also say uh state of the viia uh is to be set as draft right so if you do this whenever there's an update to the Via that's happening by the system it will get moved back to the draft status if you do not set anything the status will remain wherever it is currently if it is pending approval or under review it'll still be under review the system would have made the changes behind the scene and the current workflow will continue if you set it back to draft it will move back to draft and based on the updates that's happening you can also change any value of any of the other fields in the Bia and you can provide the target um value that you want to set it right so you would be able to set any of these things in the viia form so this field is a little checkbox here this is going to determine whether you want this updates to be manual or automatic if I do not set this this would trigger the email to the user first that there are some changes and there will be a link the user can click on it they can look at the changes and after reviewing they can manually click on update right that's the manual way of doing it if you want the system to make the changes and then inform you of the changes that have been made you just simply need to turn this on so this would auto update your bis and send out an email to you saying these things have been changed now this is the target part of it right what should I set the uh Target value as and what are the things that I need to Monitor and update right so this is the target record that we want to do here comes the source tables so this in this case I've selected cmdb as the source table where I want to monitor this and the last one is the notification if I want want to send a notification that is nothing but this email that we were discussing uh or if you don't want people to be bothered right you can simply turn it off so if you say that it'll ask you to pick the user field that you want to use from the Bia who needs to receive this notification so this is how the configuration is done for this particular functionality uh let me go back to this one uh I hope you can see the screen again right um so that is how business impact analysis updates are monitored from The Source tables for the dependencies this is number one number two is for planning so when we have updates in the cmdb or in the Bia right it could be either of that this one and the cmdb in any of them if there are updates or in both we will be able to configure it and that will get pulled into your plan so this is Bia gets the update from the cmdb plan gets it from Bia as well as the cmdb both of them in case you don't have a met short cmdb and you're making all your dependencies and linking between processes and assets during your Bia that can directly be pulled into the plan as well right let me show you how that is done similar concept here there are pending updates that I can see yeah and I can just go into a snapshot and see that uh this is for a particular plan this is the plan name right and I can see that things have got added and I'd be able to see where did it get added so uh there is a related Bia to my processes and there are some Downstream dependencies that I've got refreshed there somebody has redone the Bia there are some changes in the cmdb that has happened right so earlier we had to uh you know reassociate the process to the plan and then refresh it only then the latest Bia used to get picked up so we have done this functionality to include that changes in Bia as well as cmdb you don't have to re uh allocate or reattach any of these scope items it will get updated automatically and we will monitor all of these changes same concept you will be able to see the updated items here and deleted items here let me see if I have any other example uh okay this also has only added okay so you can see there are some updated things here right if something had been removed you would see that in the deleted item as well so this is one way of monitoring this for this also the user doesn't have to be monitoring this in the system the same notification applies here as well similar kind of stuff if you own multiple plans you will get a single notification with all the changes that have happened and then you click on the link and you can look at this what are the changes are right and you can update that uh or if you go into the plan right uh let me just pick a plan here let me open the plan uh if this is already in workflow right the next person in the the workflow will see that there are some underlying changes that have happened and that has not been applied in the plan yet so you know that I will want to stop reviewing this at this point in time and I can send it back to the owner asking them to apply all of this and then resubmit it that's number one number two is if the plan is already approved and somebody's looking at it who has the edit right right not everybody in the organization but if the person has the edits right they'll be able to see that there is this message that's popping up and they know that okay this is an approved plan but looks like there are underlying changes we need to redo this plan or update the plan right so you will be able to click on the snapshot link you'll see what are the newly added items updated and deleted and you can say update dependencies and it'll just pull it in into your uh the scope and the related items basically you can just do that and it'll queue it up for uh updates so that is the plan update functionality it'll get pulled in right so this is the manual update process same way like what we discussed for business impact analysis plan also has a configuration so I can go into the plan configuration and I can see uh what are those things that I want to set here can provide a name active order and the Target right so this is the business continuity plan that I want to keep updated uh that should not be arive for example and I can say whether it is an OP update or it should be a manual review before the update happens to the plan right and I can also say what are the sources so in this case I can make sure the cmdb changes are pulled into the plan the downstream dependencies from B are pulled in or the Bia Upstream dependencies also so I can also ignore the Upstream for example and say I want to only get these these um Source changes into the plan automatically updated or sent forth manual review the last one is the notification uh this will govern who needs to get the notification and if they have to or not right so you'll be able to check that and update it this will apply to the plans now taking us to the last one on this functionality and then we'll take some questions on this right uh let me just quickly show you the bit where we also have the exercises part exercises also has this functionality uh what we have made sure here is we have added uh exercises I mean configuration that will pull in the related items from cmdb Bia and plan it can be from any of this right so it incrementally increases the tables that you can monitor and update The Source table so you can look at the assets uh you would be able to see these are the assets right and you can see where did this get pulled in so I added something into the exercise manually let's say I just added this application first and in cmdb there are some relationships that will get pulled in if you want it to get pulled in from Plants as well I mean b as well you can set it and it'll get pulled in here and uh You' be able to see uh these are all cmdb items if it is coming from a plan it will show that as the source as it's coming from a business continuity or itdr plan right so I'll show you how to configure this one uh the manual way of updating it is you'll just click on update dependencies and it'll get pulled in it's the same kind of configuration for this as well okay so I can go into event dependencies and I can see a similar configuration so there are three right impact dependency this is business impact analysis configuration this is planning and the last one was the event dependency these are the three admin configurations that we have enabled for this functionality to work so you can see uh what are the exercises that we want to keep updated and uh pull in the latest right let's say for example you don't want to go and update anything that is closed right so you can avoid that you can select the rest of the things yeah um so if the exercise is already closed then I don't want to go make any changes automatically or by the user so I can just filter that out and those Target records will not be updated you can basically uh base it on any different items in the uh exercise form similarly these are the sources like I said it can come from the cmdb the related items it can be from b or from the plan assets as well so these are the available tables from where you'll be able to keep your exercises and events and the scope in it up to date so this is the settings for this functionality and I think we discussed this in brief right sorry one second let me go back to this and let me open up a snapshot so that I can uh tell you guys uh let me just pull one of this okay so here you're seeing this added updated and deleted right and there are dependencies in all of these that are updated so when you update this it's it applies the entire set you would not be able to pick for example one of them and avoid another so that is the functionality for Washington DC release we've received some feedback from many of our customer custers that we should be able to cherry pick the updates that we want to do um that's something that we will add in future because that feedback came in late in the cycle right so currently in Washington DC release if there are underlying updates you can either choose to apply the entire set or you can just cancel it it will not apply any of these updates right so that is how this works today all right so this is the maintenance of Bia plans and exercises and the sources from where you can pull this in automatically versus manual review and then apply the changes now let's look at if there are any questions and we can take that out and then we can look at the next feature there are a couple that came in so I don't know if you can open the Q&A on another screen can open it but I don't think it'll be displayed to the user so I can read it read it out right that be great yeah are there details of the data model that aligns Bia and cmdb yes we can share that with you somebody's asked for the data model that is for BCM and cmdb um we can share that with you guys Kevin has asked this update functionality is available in all levels of Licensing correct yes this doesn't have to do anything with licensing this is a very standard basic feature as long as you have bia plans and events you'll be able to get these updates um our Kamar has asked like our bi is currently pull dependencies from BCM however we are updating our cmdb if attach assets on the business process from the cmdb for the Cs refresh yes that is correct so um if you already have the bis and if you're changing the cmdb it will still apply as long as you have that configuration on and when that runs the changes will get pulled in right so that is something that we have done taken care of um then we have from Kevin when the updates to the Bia or plan are made will the PDF generated be regenerated as well or should be a flow we would add the PDF generation would take care of the new changes right if that is what you're asking kin uh let me just open that plan again uh if I I just going here so the way this works is the PDF generation works is um when you first generate the PDF file right it'll generate and it'll add it here okay unless there is any Dela in this uh this will be something that people can download if you go regenerate it it will generate it again and it'll add it but at that time the update once after you do the update if you generate it it'll it'll generate with those updates and then when people download it again they will download the latest so that is how this will work yeah um and I think the details will have that as well so every time you generate the file you can go track it and in the attachments it's the latest that gets displayed so every time you apply the changes and you pull it in it'll pull the latest and create a new copy of the PDF file this basically is for the Creator or the person who's updating the Bia so you can keep generating stuff and for the rest of the organization where they just want to download your update and view the plan latest plan they'll not go into this right so they'll just go into this one and they'll just download the latest if they need and you can make this available in other screens as well wherever you need that's how we have uh tackled that point all right uh as there was just one clarifying point will that automatically regenerate PDF the PDF generation is driven by that manual action the UI action where we say generate PDF file thanks and can I also ask uh that David who was asking the question for the uh model that you can put your email address into the chat just for uh host and panelists so we can follow up with you yeah definitely we will do that um okay uh I think uh there's one more question Alicia uh can you put your question into the chat or into the Q&A I think we are unable to unmute anybody because this in a webinar mode so if you can put your question into the chat I'm just adding my email address so you guys can okay David I've given you a contact please send me an email and then we can get things answered for you all right so this was the first functionality the second one is also something that uh many of our customers have been waiting for especially people who have wanted to do resilience from an Services point of uh view right so what we have done here is we have added um business City management will have uh the operational resilience workspace space as well right let me explain what this is a very quick overview of the functionality and then we can look at uh what are the roles that we have introduced for this and how you can access this right the existing BCM users so uh we have introduced it as a separate workspace it it's not combined with the BCM workspace business continuity workspace right in case you have users who are focusing only on operational resilience and you have a separate team that focuses on business continuity management you can create these uh assign these workspaces to these different roles or if they are doing both you can assign both of them so they have access to both of this right operational resilience application is going to be focused on Business Services that you manage and the supporting assets and providing and risk compliance and business continuity lens to it to monitor the resilience across right that is the idea so in this case as soon as the user logs in there is an homepage like in other applications You' be able to see there are 21 business services that we are uh managing right and uh you'd be able to see the services by different classifications right and then there are some red flags when we say red flags these are the problem areas when it comes to resilience basically the is green because there are no issues or P1 issues that are still open but we have four controls that are failing right which is impacting these uh Services right so what this means is because of the failed controls here there could be a situation where it escalates to a crisis event right and then you need to activate a business continuity plan and this could be impacting your overall resilience in your organization right operational resilience so that's why this is getting highlighted here there are no high risks that have been identified in the latest assessment that the risk management team did so that's not a problem but you can see that there are some current outages that the teams are working on and these are impacting one or multiple of these Services again all of this is in context with these business services right we are we have set a metric for incidents there are some change requests people are working on and these are coming from technology aspect right I can see what are the ongoing tasks in this we'll go over this uh in a bit right and there are some suggestions basically uh You' be able to see what are the controls to be strengthened and what are the risks to be uh mitigated basically the risks are zero that's why you seeing that but there are some controls that are failing these are the four controls and each control is impacting three different Business Services right so it just lines it up based on the number of Business Services each one of this is impacting so you know where to focus on or where to start from the suggestion section just provides you that particular angle uh and you can also look at the uh issues and risk and business continuity plans and everything from a pillar perspective we call these as pillars people process facilities and suppliers right you can dissect the data in that as well as a predefined filter we have provided that now let's look at the uh different modules and capabilities in operational resilience you would be able to create and maintain the business services in this application under this particular menu here these are all the business uh services that are there so you would be able to open uh particular business service for example and I can see that uh uh the same view but only for my business service earlier it was for the entire 21 services right so I can see what are the red flags where are they coming from uh I can also visualize like the hierarchy of services so I'm looking at faster retail payments for example it rolls up into a group service right that is called payments under payments there's faster retail payments and then under faster retail payments there are some more retail related Services here right so a hierarchy of services that can be maintained and further broken down into business processes that support these services in our business continuity management we are doing a Bia and uh relating the process to dependencies right so the processes are added to what we call as dependencies in b sorry I picked a wrong um example here but uh from the Bia the dependencies will get pulled in here as well and you can see what are the RTO gaps RPO when was the Bia done and when was the last time it was exercised Etc I'll try to show you one more uh record but this fullen information from cmdb the business impact analysis business continuity plan and the exercises that gives you an idea of business continuity related activities that have happened that are related to your business service this is an endtoend Business Service which is broken down into the processes and then the underlying dependencies the exercise might be happening for a particular application that supports a process and the process is supporting your business service right so all of that gets pulled into this view you will be also able to see the issues from issue management system risks from irm right but for data to populate in these tabs and these different metrics you need these applications to be installed otherwise you can just hide these off until those are getting installed and you start using them you can just use this with the BCM information right so you can see what are the business continuity plans related to it and you can track the business service related resilience from this view that is one number two is uh like your RTO assessment or Bia in the traditional BCM exercise there's also an importance and impact tolerance assessment that has to be done on your service level Okay so so we have introduced a survey capability for that so this is a regulatory mandate in multiple places right so you can provide a name you can set who are supposed to be part of the workflow you can provide a milestone by when it has to be completed you can set the scope of the assessment okay and uh you are going to pull in a template questioner template which will populate and can have categories of questions and under each category there can be multiple questions by default we have enabled three categories what is the impact on customers if your business service goes down right You' be able to say what kind of customers are there what is your customer base capture are rational for each one of this question you can come up with your own question as well it doesn't have to be limited to these this is just an example so that you know what can be done with this right can think of it like as survey um that's being sent out and you have decided what questions are supposed to be answered and what kind of options are available either it is a radio button a checkbox a drop down Etc so once the user provides the answers yeah um we will have a score assigned for each answer under each question and you can do a math uh like you can add up all the scores or you can multiply or get an average right and based on that you can decide what should be the final output basically we are doing this assessment entire assessment for calculating for the business service what is the importance so like our recovery tier in Bia that we do operational resilience needs to needs you to classify your services into importance right so this gets classified as uh not as recovery tier 123 but as most critical critical Etc so you can set the values but by default it starts from one and ends at four there are four scale importance that we have said but you can always go and configure additional ones and then there is an impact tolerance the impact tolerance is very similar to your RTO but the concept is this is encompassing all the processes under this service all the dependencies under this service so in an ideal situation the business team will set this for the high level business service that is being delivered to the customer and this needs to be dictating what is required from the business process owners the individual business processes and that should trickle down to further down to the it dependencies supplier dependency and so on so anywhere in this chain if there is a gap that would get flagged out in one of the charts I'll show you that part as well under this service right so that is how we are tracking this and this is the impact analysis that can be done then comes the scenario analysis this is like a simulation exercise yeah uh just opening up an existing record so we can quickly go over this there are recorded videos in detail for operational resilience uh that's out there in YouTube as well as we can share with you guys uh for the sake of this meeting I'm just going over over high level over in scenario analysis you can provide the name when do you plan to start it right and who is the owner who is the approver uh once you have done that there's a Central Library of scenarios that can be maintained in the system and that can be pulled in for analysis at any point in time in this case we have pulled in a flooding situation the flooding situation is the scenario that I've named right and it has three events under that there can be a power outage because of this there can be a facility outage or the commute is taken out right and uh once I have added this the next thing I would be doing is I would add who are the people who need to participate in this analysis and what are their roles and what should be their instructions I can get someone from HR someone from technology aspect someone from supplier um someone from finance and so on right I need input from all of these subject matter experts so the scenario analysis is completed um so I can add that I can track their individual responses within this and I can also see what are the dependencies that we want to be tracking or including in the impact analysis and what are the services that we want to be analyzing the scenario analysis requirement is to make sure wherever you don't have enough of data from the previous years right you you have created scenario analysis and accounted for most probable cases like in a flooding situation what are the events that can happen and you include people from different functions and say what could be the impact on each Business Service uh in our department or function right so each one of this has a different impact tolerance and a different U importance say right this is determined by the survey and based on the input uh of flooding situation can last for two days right uh based on the current controls that we have continuity plans that we have and the exercises we have done so far so this is the input provided by the participants we'll compare that with the impact tolerance and in this case it's breaching all of this right so if it is one day and this is two days it is beyond this impact tolerance uh if it is within this would say it is within the limits right so this is what we're trying to achieve and once we have this analysis done then the team also recommends what are the corrective actions and issues so that can be added new or added existing um analys I mean issue can be added into this all right so that is your scenario analysis piece you can account for scenarios you can add participants you can add what are the dependencies and what are the services you want to analyze you can track their tolerance level to what the scenario output or impact can be you can see which ones are bleaching and you can track the actions out of the scenario analysis the actions can have its own workflow and the scenario analysis can be having its own workflow it can be approved and closed even though the actions are open right so that is how the scenario analysis piece is and the last one is the self attestation this is from an operational resilience perspective so the regulation not in all geographies but some of them also requires the person who's accountable for the business unit or Department uh does a sign off at the end of the year or that time period where you want to submit this for your uh you know auditing and references so you can pick for which department what is the PDF template you want to generate and you can add an e signature right and uh you can say what are the services in my dep Department you can select that and you can say uh have we done the have we analyzed all the important business services what is the approach we took for them how did we do the impact tolerance have we done uh the mapping of the business services uh are there adequate scenarios that we have analyzed where there's no data provide an explanatory text uh this also is actually a survey questionnaire by default we do ship with uh this but you can change or you can add your own right once this is answered you can simply say um generate PDF file that would generate it and uh with the E signature of this person along with the date right attestation due date and attest date actual date and uh all of this will get uh pulled into the PDF file uh that is uh again driven by the template yeah so you can change the information that to go into this and that can be used for self attestation so these are the four capabilities that have got introduced uh to BCM users now right now let's look at who can access this and uh what is the impact on licensing and so forth right so let me quickly cover that as well all right so I hope you guys can see my screen again here so to get access to operational resilience workspace uh you either have to have irm professional or irm Enterprise applications this was already there it's not new but what we have done is we have also added operational resilience for BCM customers here that is the new thing right and these are the roles so there are some operator roles and light operator roles basically a user who wants to view data into this new workspace that I was talking about so someone who can only view all of this they'll be counted as an uh light operator and then people who typically edit uh the analysis approve and then who want to manage the entire system that is BCM operator part that are the new roles that we have introduced uh okay I like I said I'll share this PowerPoint with you guys so you have an access to this offline as well uh but then this would explain the uh the screens that we discussed right with a very high level you'll be able to see each of the screenshot and all the functionality in operational resilience workspace in detail and uh you can get uh some information that's already called out here and like I said there are detailed demos of this functionality but if you need further help let us know and we will be able to take it out okay I'll pause here H and these are all the screens that uh are there in Impact tolerance scenario analysis and so on so I'll just share this collateral with you for offline viewing all right so um that is the presentation I had but before we wrap up let's look at if there are any questions and we can answer this yeah I think about matur does it require a robust and mature csdm implementation actually that's the recommendation but if you don't have a csdm implementation you can still have this operational resilience up and running as long as you have the business services captured and then the dependencies can be mapped using your BCM app it doesn't have to be in the cmdb you can do this mapping and getting that pulled into uh the the operational resilience uh application directly but the like I said the recommendation is to have the csdm implementation that is right and oops okay so there are some more open questions where can I get this presentation slide deck I think uh yeah we will make sure that work on that so the deck that I have um does not have the demo the the full slide decks in it so I will try work with the community team to make that available we make that available to you guys okay um I can see that you have also puted some of those email addresses we will send it out to you guys we have that noted uh is there anything in the [Music] chat yeah I think the recording link is shared typically so you guys can uh take a look at that I think that is Sol the questions uh I had some more time if you guys need any other answers let's know we can answer we are we are actually just coming up on time um so I want to make sure that we're respectful of people's time I your sessions generally are the longest ones that I run so uh great to see the interactivity um the key takeaways and highlights are on this last slide just in case anybody wants a summary um for folks to um you know kind of remind yourselves of everything that you saw um additionally if you have more questions please keep them coming aswin did put his email address he's very open and accommodating to customers um but please also be respectful of his time as well so if we can use the community as much as possible so that people can um learn from each other's answers that would be great too and then finally please join us for future uh community webinars that we have um there's a lot going on in Washington DC from the risk business unit um and then there's also a cross product so if you're interested in anything specific you do have a service now rep that you can follow up with but as and I are definitely available and manable um and the community folks are extremely responsive and finally um definitely check out our blog post we're trying to make sure that you've got all of the events and workshops and demos and things in one single place so if you use this screenshot uh that would be great otherwise go to the GRC blog and look for 2024 risk and ESG events uh my coworker has Consolidated those and really has done a great job of trying to get them from all over the company um to make sure that you've got a One-Stop shop so finally I'll say thank you first to aswin um great detail great demo as usual and then secondly uh thank you so much to our customers and our partners for joining us on this session very informative and as I said if you additional questions following please let us know so Asen I'll let you go for the day um and thank you so much for your time sure thank you thanks everyone have a good day
https://www.youtube.com/watch?v=rDkQWYevH9c