Governance, Risk, and Compliance

When users are assigned to a recovery action item, they are automatically synced as collaborators on the linked Smart Assessment instance.

When users are assigned to a recovery action item, they are automatically synced as collaborators on the linked Smart Assessment instance.

On the Create Action task form, fill in the fields.

Activate the entity filters directly from the form by adding the Active check box to the layout. This field is hidden by default. Follow the steps in this section to make it visible.

After an application has been given entitlement, you can activate it. This process applies to applications downloaded to sub-production instances.

Complete admin procedure to activate the legacy scenario analysis flow (sn_oper_res_scenario_analysis) across the four entry-point surfaces in the Operational Resilience Workspace. Deactivate the advanced flow when you want to continue using the legacy scenario analysis flow.

Add a participant to the scenario analysis first and then add the scenario event, services, issues, and so on. If you are the scenario analysis owner, you can add the stakeholders and reviewers to the scenario analysis in Operational Resilience Workspace. You can then collate the observations of all participants and monitor their responses to analyze the scenario.

Add a recovery task as part of the planned recovery strategy. You can add one or more recovery tasks for a loss scenario and those recovery tasks are displayed in the loss scenario itself. Automate the recovery tasks in a plan for a faster recovery.

Add a scenario event to the scenario analysis and analyze its impact on the business service. By adding the participants, dependencies, services, issues to the scenario analysis in Operational Resilience Workspace, you can determine the impact of the scenario event on the business service.

Monitor event task completion and create ad-hoc tasks as necessary in the exercise from the BCM Configurable Workspace. The tasks are then completed in a sequence.

Link an issue to your scenario analysis by either creating a new issue or adding an existing one. You can also include operational vulnerabilities in the analysis to identify resilience gaps and create a plan to mitigate them.

Add an application service to Operational Resilience reporting. Beginning with Operational Resilience, Release 21.0.x,the Application services module is supported in the Operational Resilience Workspace.

Track the impacted assets and add an associated plan to the exercise. You can then monitor the assets and plans for the exercise in BCM UIB Workspace.

Add an asset and the scope to the business continuity plan (BCP). You can then view the primary elements in the BCM Configurable Workspace.

Track the impacted assets and add a related plan during a crisis event. You can monitor the assets and plans for the crisis event in BCM UIB Workspace. You can then recover your assets in the planning stage.

Add a business process to Operational Resilience reporting.

Add a business service to Operational Resilience reporting in the Operational Resilience Workspace. Managers with [sn_oper_res.manager] roles can add business services, service offerings, business processes, and application services from the business service form or list actions.

Use the Block feature in Document designer to add a repeating collaboration section, including a nested action items table, to a customized event Microsoft Word template.

You can fetch the dependencies for the services or business services from CMDB in Operational Resilience. Similarly, when the BCM applications are installed, the Operational Resilience scheduled job also monitors for the changes in the business impact analysis (BIA) dependencies and fetches the dependency updates.

Add an item by referencing its CI relationship to drill down to the item that is related directly to the dependency group. You can map the item's relationship with the dependency group while assessing the business impact analysis of an asset that is at risk.

Add a task to the crisis event in BCM UIB Workspace. You can then monitor and complete the required actions to respond to the crisis event.

Add an impacted area or an object to the operational vulnerability record in the Operational Resilience Workspace.

Add an existing issue from the available issues or create an issue for the Operational vulnerability.

Add a loss scenario and define the related asset dependencies in your business continuity plan. You can then view the details of the assets in BCM UIB Workspace and then plan a recovery strategy for an identified loss scenario.

Add an existing issue or create an issue to track problems identified during a crisis event.

Add an existing issue or create a new issue to track problems identified during an exercise.

Add an existing issue or create an issue from a business continuity plan to track problems identified during continuity planning.

Add a participant role for your scenario analysis in the Operational Resilience application to collect observations and recommendations by role and function.

Use the Scope tab to add an asset to the scope of the plan. If the business impact analysis (BIA) application is installed, you can view primary elements and RTO and RPO details.

Add a primary origin of an operational vulnerability in its record. Once the primary origin of the operational vulnerability is specified, its upstream dependencies are automatically included in the impacted areas. It enables you to view the operational vulnerability from all affected perspectives. The source is automatically added as the primary origin on the Primary origin tab.

Create a recovery team from the administration menu in the BCM classic Workspace. Add users and groups, attach locations, and build parent-child relationships to organize your business continuity response structure.

Verify that the Main node configurations are set up and the relationships are configured in Operational Resilience.

Add your business continuity associated plans and recovery teams to your business continuity plan. You can then view the details in BCM UIB Workspace.

Optionally document operational weaknesses and link issues identified from the scenario analysis results to support remediation tracking.

Select the adverse-event scenarios to test against the scoped service, then review the historical reference data that the system will use to auto-populate simulation inputs.

Define the scope of the Scenario analysis by selecting the service to analyze and adding the dependencies that support it during a disruption.

You can add a scenario event to the scenario analysis and analyze its impact on your business service. If you are the scenario analysis owner, you can add the stakeholders and reviewers to the scenario analysis in Operational Resilience Workspace. You can then collate the observations of all participants and use their inputs to analyze the scenario.

Associate a scope by adding services and define the dependencies with the scenario analysis by adding services. You can then begin to analyze the impact of the scenarios and events in Operational Resilience Workspace.

Add a service offering to Operational Resilience reporting.

A user with the sn_oper_res.admin role can perform the setup tasks in the Operational Resilience application.

Use the Alert Action form in BCM UIB Workspace to add details about the alert actions.

Use the Alert Rules form in BCM UIB Workspace to add details about the alert rules.

By analyzing the importance and the impact tolerance of your business service or service offering, you can measure how possible disruptions might impact the performance of a service. You can use the assessment questionnaire template​ in Operational Resilience Workspace to measure the importance and the impact tolerance of your selected business service and its child records.

The table lists the application menu options that are available for the main users of the business continuity management application to view and navigate.

Approve the business impact analysis in BCM UI Builder Workspace in the BCM application. If you’re the business impact analysis owner or the BCM lead for the business impact analysis, you can approve the business impact analysis.

Approve or reject the model assessment and validation tasks either from the Employee Center or Model Risk Workspace.

Close the inactive Importance and impact tolerance assessment in the Operational Resilience Workspace.

Approve the Operational vulnerability record after verifying its details such as the root cause analysis, treatment plan, timelines, and so on.

Assess the impact categories and dependencies in BCM UIB Workspace to get the necessary information for a plan. Use the business impact analysis to identify the recovery time objective for an item and prioritize the assets that have the least and most critical dependencies. Use the information to establish their recovery strategies during the planning phase.

Assess the different components of a business impact analysis (BIA). First by assessing and determining the impact categories of a business process. Second, by identifying any underlying dependencies that the business process requires across different dependency types.

View the list of resources that are at stake because of an alert threat that is near your business locations. Take actions to protect your resources and prevent major loss.

Assign the appropriate roles to the users of the Operational Resilience application.

Assign a reported vulnerability to an analyst in the Operational Resilience Workspace.

Quantify the performance of your continuity and recovery plans through event-based testing. Measure success by tracking the completion of tasks associated with each plan.

Use the Assessment Metric Type New Record form to create an attestation template to create the attestations. Use the template form to create a record.

Automate the manual recovery task within the business continuity plan. You can classify the manual recovery task as an automated task first and then attach an automated flow to it.

The administrative tasks that are associated with a business impact analysis (BIA) are listed in General Administration of the Business Continuity Management application.

Business Continuity Management applications are available from the ServiceNow Store, enabling you to obtain new and updated features more rapidly. Before you can use the Business Continuity Management applications, you must verify that you have an entitlement to use them.

Approver configurator provides you with capabilities to define multiple levels of approvals based on business rule definitions.

When the Business Continuity Management application is installed in an instance, BCM dependencies are fetched into the Operational Resilience application.

Starting with Release 6.1.x, administrators have the capability to configure different aspects of a dependency. This includes the Dictionary, UI policy, element variables, and UI view, which determine columns, required fields, and display in dependency assessment views.

When event tasks are created in bulk from task template groups or task templates, the Event tasks list defers refresh to avoid impacting large events. This topic explains the banner and auto-refresh behavior.

The Business Continuity Management application uses the generative AI skills in ServiceNow Otto for Integrated Risk Management (IRM) to summarize issues.

You can integrate Crisis Management in Business Continuity Management application with Everbridge notifications system. Everbridge system enables you to send emergency notification to individuals or group of people alerting them of an impending emergency. It provides a one-way notification and two-way communication through properly established delivery channels.

Browse and create issues from dedicated modules in the List view of the Business Continuity Workspace without opening a plan, crisis event, or exercise.

The Business Continuity Management application provides flexible user licensing terms. The terms are based on whether your operator has read-only access or can complete certain types of tasks.

You can configure the BCM properties in the Properties module.

Business Continuity is an ongoing set of activities aimed at reducing the risk of an organization and improving its ability to respond to and recover from disruptions. To this effect, recovery and exercise management helps in continuous testing and improving of your continuity plans, and minimize business disruptions when a crisis strikes.

Reference topics provide additional information such as tables, roles, and properties that are installed with the Business Continuity Management application.

The Business Continuity Management application supports BCM Configurable Workspace.

You can configure the documentation section of a business continuity plan in a structured format. You can describe high level details of the plan such as its purpose, scope, coverage areas, goals, and success criteria.

As a BCP plan manager, you can create a business continuity plan that can be used for your respective business units during a disruptive event. The Business Continuity Management application provides pre-configured business continuity plan templates. You can streamline the process of a plan creation by using pre-configured plan templates. You can also create a plan template for your business requirement.

The business continuity plan (BCP) administrator can perform certain administrative tasks that are listed in the General Administration section of the Business Continuity Management application.

Create tasks in a plan to recover your business from various disaster situations. Prioritize the tasks by determining the critical assets that have to be recovered and estimate the time by which the task must be completed.

Identify related assets and their referred plans to recover the assets in your planning stage. Reuse the configuration item relationship data that flow from CMDB to business impact analysis (BIA) during dependency assessment to identify the assets in your plan.

Perform the structured workflows that are outlined in this section to create a business continuity plan in Business Continuity Workspace (also known as BCM Configurable Workspace).

Business continuity planning helps you enact and mitigate risk at the time of an event. You can address and plan on the primary scope of the activities, documentation, loss scenarios, recovery teams, approvals, and so on. You can then configure a structured workflow of your business continuity planning tasks in BCM UIB Workspace.

This section describes the common use cases that are used for business continuity planning in the Business Continuity Management application. You can deploy these use cases individually or you can combine them to meet your specific needs.

Impact categories are the types of an impact that you can assess during a business impact analysis. The BCM administrator of an organization is responsible for defining the impact categories and the timeframe during which an organization may experience a downtime. This information is used to determine the recovery time objective and recovery point objective of the assets.

Detailed field definitions, validation rules, filtering logic, and technical specifications for group ownership in Business Impact Analysis (BIA) records.

Use the BIA template record form to configure the business impact analysis with the Smart assessment. You can add details such as name, description, primary element assessed and select the impact assessment template in the form.

Perform the tasks that are outlined in this section to create a business impact analysis in Business Continuity Workspace (also known as BCM Configurable Workspace).

Use the BIA template form to configure the business impact analysis with the legacy template. You can add details such as name, description, elements, impact categories, and so on in the form.

The Business Continuity Management application provides pre-configured business impact analysis (BIA) templates for creating a business impact analysis. If you are the BCM or BIA administrator, you can use the BIA Templates module in the Business Continuity Management application. You can then select the type of the template, elements, impact categories, and so on, for the business impact analysis.

Business impact analysis is a structured process where you assess the impact categories and dependencies. You can then predict the consequences of a disruption on a business process or business function.

You can use the Business Continuity Management application to assess the impact of a downtime on your business services or processes and technical entities such as datacenters or applications. For creating a business impact analysis for your organization, you can refer to the common use cases that are used for managing the business continuity tasks.

The Business services overview tab in the Operational Resilience Workspace provides a comprehensive summary of active business services. It highlights red flags, urgent issues, and the status of resilience activities like assessments, scenario analysis, and self-attestations. It also offers suggestions for mitigating top risks or vulnerabilities and strengthening top controls.

You can configure relationships between various CSDM objects such as business services, service offerings, business processes, and application services by using the Main node configurations. The [sn_grc_m2m_profile_profile table] serves as the source table for establishing these relationships.

Build the Microsoft Word template using the add-in. The Word Templates module provides the Digital resilience incident (DRI) Word templates that are used to generate Microsoft Word reports.

Use the steps in the Business Continuity Management application checklist to download the Business Continuity Management from the ServiceNow Store, and get it ready for operation.

ServiceNow Business Continuity Management application gives your organization the capability to continue to deliver products and services at an acceptable level when a disruptive incident occurs. The ongoing activities of this application are aimed to reduce the operational risks and improve your organizational ability to respond, react, and recover from issues and disruptions.

Business Continuity Planning (BCP) helps you enact and mitigate risk during an event by addressing plan assets, activities, recovery teams, documentation, policies, and procedures.

The CSDM model offers a framework for evaluating and enhancing an organization's reporting and resilience environment, applicable to various business model views. ServiceNow products are CSDM aware, and their Configuration Management Database (CMDB) data is organized according to CSDM guidelines, leveraging this structure for improved functionality.

Verify the details and close the Operational vulnerability record as the Operational vulnerability analyst.

Close the scenario analysis in the Operational Resilience Workspace. Typically, scenario analyses that are incomplete or canceled are moved to the Closed state. Once closed, you can share your observations and notes with stakeholders.

Create a collaboration thread from an exercise and send an email to its recovery teams to coordinate a response.

Perform an assessment on the action task by reviewing its assessment details. As the action task owner, you can view the details of the action task and assessment history in the action task record and then complete the assessment.

Complete the Scenario analysis after all required playbook steps are finished to lock the record and make the results available for reporting and governance review.

Complete the simulation assessment questionnaire to provide the statistical model with the input values required to run the simulation.

Create a collaboration thread on a crisis event and send an email to its recovery teams to coordinate a response.

Configure 360º views for the services, business services, business processes, and application services. You can select the table for which you want to update the sector configurations, relationship registries, and their positions on the 360º view.

Configure an alert rule in the Crisis map so that you can define when a feed is displayed as an alert on the dashboard. You can also specify the conditions under which an alert is no longer valid and dismiss it from the dashboard.

Configure a business impact analysis (BIA) template in the Business Continuity Workspace with the Smart Assessment. Select the type of the elements, impact categories, and dependencies that are assessed in the BIA. The Smart Assessment lets you choose a custom Smart Assessment template for the BIA.

Set up Digital resilience third-party registers in the Operational Resilience Workspace to manage the records of ICT third-party service providers.

Configure an end-to-end workflow for the service to fetch the CSDM dependencies and red flags data to Operational Resilience. You must ensure that entities are generated and associated with pillars, and that the Main node configurations are set up before fetching the required data.

Configure entity filters to define the records from ServiceNow tables that populate each entity type after setting up pillars and entity types. Entity filters use selection criteria to identify and pull relevant records automatically. You can build custom filter conditions tailored to your requirements or select from predefined (saved) queries for common scenarios.

Configure the sources for adding the event dependencies in the Event dependency source configuration record.

Create Smart Assessment templates in the Assessment Workspace for the Business Impact Analysis (BIA) workflow.

Configure the Planning dependency update configuration record to configure the plan record (for which the dependencies are updated), its target records, sources, and notification preferences.

Add Platform Analytics reports to the Overview tab of a BCM record page. Only BCM admins can configure record overview dashboards. Reports added to an overview page are automatically pre-filtered to the current record and are visible in read-only mode to all users who can access that record.

Configure a Resource Configuration record for the Crisis map application in UIB Workspace. You can then plot the assets of your organization on the Crisis map. The assets can be locations, employees, datacenters, suppliers, and others. Configuring resources is also required as an input to set up the alert rules.

The BCM administrators configure the Planning dependency update configuration record. An auto-update of the related assets in the plans can be scheduled based on the source data and relationships in the CMDB and BIA.

To access the Node map configuration from the Operational Resilience Workspace, BCM administrators must set up the Main node configurations. Once the Main node configuration table is set up, it enables you to create configurations for entities such as services, business services, offerings, business processes, and application services. You can update the properties, node, and edge configuration details.

Configure the business continuity plan template in the Business Continuity Management application for your business. You can use the plan template to recover a specific primary element such as Employees or Web Servers. Similarly, you can create a plan template for different plan authoring types such as documentation, loss scenarios, and recovery tasks.

Configure an alert action from the Crisis map interface in the BCM Configurable Workspace.

Create an Application service to dependencies sample Main node configuration record for linking an application service to the dependencies.

Loss scenarios are identified and documented so that the plan has the needs and requirements listed for any particular disaster that may strike. Each potential threat requires unique recovery steps and the need for each loss scenario vary. Your plan must be well laid to maintain operations for any potential impacted loss.

Configure the business continuity plan (BCP) template to create and assign business continuity plans with standard object types. The object types can be business processes, applications, employees, hardware, software, and others.

Configure a business impact analysis (BIA) template in the Business Continuity Workspace with a legacy assessment. Select the type of elements, impact categories, and dependencies to be assessed. The legacy assessment uses the older method of selecting impact categories.

Define the business impact analysis (BIA) template to create and assign BIAs with standard object types. The object types can be business processes, applications, facilities, and others, the impact of which are assessed in a BIA.

Map single or multiple regulations with the entity linked to an incident or security incident.

Manage services, business services, service offerings, business processes, and application services from the CSDM modules in the Operational Resilience Workspace.

Configure the documentation section to describe your plan through structured components: a high-level checklist, purpose, scope, and coverage areas.

Configure a documentation section with structured sections that include high-level details, purpose, scope, coverage areas, goals, and success criteria.

Review and update the Connector configurations for the selected Nexus map configuration. You can configure the label, tooltip, and default Connector type for each connector between nodes.

Configure the Connector status configurations for the selected Nexus map configuration. You can customize the display of connectors that meet specific conditions by assigning them distinct colors and connector types.

Configure element definitions to identify the configuration item that has to be assessed in a business impact analysis and recovered in a business continuity plan. Use the Element Definitions module in the Business Continuity Management application navigator to configure an element definition.

Configure element definitions to identify the configuration item that has to be assessed in a business impact analysis and recovered in a business continuity plan.

Configure an element variable for a specific dependency of an element. To do this, use the Element variables module in the Business Continuity Management application navigator.

Configure an email account and enable the outbound and inbound email properties so that crisis managers can send and receive email from collaboration threads.

Configure an end-to-end workflow for a business service to fetch the CSDM dependencies and red flags data to Operational Resilience. You must ensure that entities are generated and associated with pillars, and that the Main node configurations are set up before fetching the required data.

Configure a grid category such as Dependency Assessment for the grid configuration. Use the Grid Categories module in the Business Continuity Management application navigator to configure the grid categories.

Configure the grid to render the BIA dependency assessment grid with configured columns. Use the Grid Configurations module in the Business Continuity Management application navigator to configure the grid.

Configure the Impact analysis dependency update configuration record to configure the BIA record (for which the dependencies are updated), its target records, sources, and notification preferences.

Configure an impact category to define the timeframe during which the organization would experience a downtime of its business processes. Based on the timeframe, you can determine the recovery time objective (RTO) of the assets that the business process depends on.

Configure an impact category for your business, when you are performing the business impact analysis. Use the Impact Categories module in the Business Continuity Management application navigator to define the name, criteria that the impact category contributes to, applicable timeframes, maximum RTO value, and so on.

Configure a rating for each category to help you measure the intensity of loss when a business downtime occurs.

Configure an impact rating to assess an impact category as low, moderate, high, or critical. Use the Impact Ratings module in the Business Continuity Management application navigator to help you measure the intensity of the loss when a business downtime occurs.

Set up your mobile device and the ServiceNow AI Platform for the BCM mobile application.

Configure the appearance of the Nexus map (Resilience map) for a specific main node by defining its UI settings. It involves defining visual elements such as colors, icons, and connector configurations. By configuring the settings at the Nexus map level, you can associate a single main node with multiple Nexus configurations, enabling flexible loading of settings for different entities.

Configure the settings for the selected node. It helps you to determine the UI display in the Nexus map. You can select the table associated with the node and configure the primary label, icon, secondary label, tooltip, and so on for the node.

Configure the Node status conditions and parameters for the selected node configuration table. You can then customize the map display by assigning specific colors and icons to the nodes that meet certain conditions.

Create your own questionnaire (assessment) template instead of using the default template in the Operational Resilience application to suit your business needs.

Configure the Operational vulnerability feature in the Operational Resilience Workspace to help identify and address operational vulnerabilities within your organization.

Configure the Operational Resilience application to identify risks, failed controls, monitor services and processes, and ensure a complete resilience of your organization.

Configure main properties of the Operational Resilience so that you can set up and fetch data into the application for reporting purposes.

Configure a plan for an identified loss scenario by using the loss scenario template in the Business Continuity Management application. Use the documented plan that has the needs and requirements listed for a potential disaster.

Configure the properties for the Data Relationships Framework application.

Configure a reusable recovery strategy template so business continuity planners can apply a pre-defined strategy to loss scenarios without re-entering the implementation details each time.

Configure a recovery tier with a set of business applications that follow a similar range of recovery time objective (RTO) values. Use the Recovery Tiers module in the Business Continuity Management application navigator to configure a recovery tier.

Configure and use recovery tier to assign a single recovery time and name to a similar range of recovery time objective (RTO) values.

Set up recovery timeframe that starts from when an incident or crisis happens to the time your business can resume usual operations.

Set up a recovery timeframe for a recovery tier. The recovery timeframe starts from when a disruptive event happens to the time when your business can resume usual operations. You can use the Recovery Timeframes module in the Business Continuity Management application to set up the timeline for the recovery timeframe.

Update the number of the records that are displayed for a reference field in the Business Continuity Management (BCM) Workspace. You can configure the referenceFieldLoadLimit system property to control the number of the records that are displayed for each reference field on the grid configuration pages.

Configure 360° view configurations with the sn_bcm.admin role.

Configure Recovery Time Objective (RTO) and Recovery Point Objective (RPO) assessments using the Smart Assessment Engine for Business Impact Analysis (BIA). The Smart Assessment Engine replaces the traditional non-smart assessment questionnaires with an automated, rule-based approach.

Create a Services to dependencies sample Main node configuration record for linking services to dependencies.

You can set up and extend the BCM Workspace pages and components by using the UI Builder.

Configure the Business Continuity Management application to perform the business continuity tasks for your organization.

The BCM administrators configure the sources in the Event dependency source configuration record. The impacted assets are added in the events and exercises based on the source data and relationships in the BIA, CMDB, and plans.

Plan and configure the implementation of the Model Risk Management application. You can follow the steps listed in this topic.

Use the Contact form to create the contacts manually and then synchronize the contacts with Everbridge.

Use the Contact Import Rules form to create a contact import rule that you can apply on the User table.

Create a contact import rule to apply on the User table and filter out users as contacts for emergency notifications.

Use a set of controls on the crisis map to display the alerts that are critical to your asset locations.

Enable the option to copy responses from the most recent completed assessment into new assessments. Respondents can review and edit the pre-filled responses before submission to save time and ensure consistency.

Create a main node configuration record to configure the source for fetching the dependencies. You can configure the details of the main node such as its name, source, table name, filer conditions, and so on.

Create a relationship registry record to set up relationship between the record and object defined in the table. You can configure the details of the main node such as its name, source, table name, filer conditions, and so on.

Use integration of crisis events and Smart Assessment for creating necessary action items related to the crisis event. The action items can be of task and assessment type.

Use integration of events and Smart Assessment for creating necessary action items related to an event.

Create and manage an action task for the Operational vulnerability, where the type of the task is assessment. You can then assign it to an appropriate task owner.

Determine the importance and impact tolerance of a business service by conducting an assessment using either Smart Assessment or Legacy assessment. The assessment questionnaire helps you to measure the service's importance and its impact on customers based on their responses. By evaluating the feedback, you can effectively gauge the significance of your business service and understand its effects on your customers.

Create a customized HTML document template​ in the Operational Resilience application to suit your business needs. You can use the customized HTML document template instead of the default HTML template to export an attestation.

Add or create model issues and their remediation actions. Capture validation findings or performance problems and follow them through to resolution.

Use the Create an issue form to capture validation findings or performance problems for a model.

Create a model risk assessment by verifying the details, assigning stakeholders, and create an assessment using the Model Risk Management application in the Pre-deployment stage.

Review the details of an event in the Details tab, start an event to test your business continuity or recovery plan, and monitor completion of the event.

Save your Microsoft Word document as a template using the Design template provided in the Document designer, enabling you to create a reusable template in your instance.

Create a business continuity plan from a plan template in BCM UIB Workspace so that the loss scenarios, recovery strategies, and recovery tasks defined on the template are generated automatically.

Create a business continuity plan in ServiceNow Business Continuity Management.

As a program manager you can create a plan for the respective business units that can be used in times of business disruption. You can use a specific plan template for each plan type to streamline the process of a plan creation.

Create a business impact analysis in BCM UI Builder Workspace to gather information for an impact analysis.

Create a business impact analysis (BIA) to get the necessary information for a plan. Use the BIA to identify the recovery time objective for an item and prioritize assets that have most and least critical dependencies. Use the information to establish their recovery strategies during the planning phase.

Use the Create collaboration thread form in the BCM Configurable Workspace to enable team members to communicate and coordinate responses during an exercise or a crisis event.

Establish a connection and authenticate your login credentials with an Everbridge instance. You can then send out a notification using the delivery channel. This connection helps you to send and receive communications with an Everbridge instance.

Use the Create Connection and Credential form to establish a connection and authenticate your login credentials with an Everbridge instance.

Create a contact import rule to apply on the User table. You can then filter out the users as the contacts for emergency notifications.

Use the ServiceNow users list to create contacts manually and synchronize the contacts with Everbridge to send emergency notifications.

Create the contacts manually to send out an emergency notification and synchronize them with the Everbridge instance.

Set up the content configurations in the Template Configurations module to define the data you want to view or fetch when creating a report template. You can configure it to display a list of records or aggregated data, such as a list of remediation tasks or top priority issues. You can fetch up to 200 records from any table.

Set up the content configurations in the Template Configurations module to define the data you want to view or fetch when creating a report template. You can configure it to display a list of records or aggregated data, such as a list of remediation tasks or top priority issues. You can fetch up to 200 records from any table.

Use the Create Crisis Event form in BCM UIB Workspace to add details about a crisis event.

Configure the data relationships in the Template Configurations module, which helps you to navigate from a record in the template configuration to any table. When you create these paths, you can fetch necessary data from each of these records in the BCM report template.

Create the data relationships in the Template Configurations module, which helps you to navigate from a record in the template configuration to any table. When you create these paths, you can fetch the necessary data from each of these records in the report template.

Set up the Document Template (HTML Template) that is used for generating the PDF of the Operational vulnerability record.

Create a documentation section in the business continuity plan. You can then document the recovery capabilities of your business continuity plan in BCM UIB Workspace.

Create an assessment of the Information and Communication Technology (ICT) service in Digital resilience third-party registers. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation.

Create a branch record in Digital resilience third-party registers. You can then enhance its digital resilience information for compliance with DORA regulation.

Create a contract record in Digital resilience third-party registers where you add details of the contract such as vendor name, start and end dates, state, substate, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.

Create a function record in Digital resilience third-party registers where you can configure function details such as identifier, license activity, name, and criticality assessment. You can then enhance its digital resilience information for compliance with DORA regulation.

Create an Information and Communication Technology (ICT) service supply chain record in Digital resilience third-party registers. Add details of the supply chain such as type of the ICT services, Legal Entity Identifier (LEI) of the entity that provides the ICT services, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.

Create a third party record in Digital resilience third-party registers. Add the details of the third party company such as its name, address, phone number, vendor manager, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.

Create a third-party engagement record in Digital resilience third-party registers. Add details of the third-party engagement such as name of the third party, its type, annual spend, engagement tier, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.

Use the Emergency notification tab in the event workspace to create a notification for a crisis event or an exercise event where the exercise method is Functional.

Create an emergency notification in BCM UIB Workspace. You can then use Everbridge to notify the stakeholders.

Create an event group in the Operational Resilience application so that you can categorize the events that are defined in a scenario.

Create an event in the Operational Resilience application so that you can associate it with a scenario and assess its impact on your services.

Convert and aggregate contractual expenses to regulator-required currencies and generate consolidated reports for reporting submissions. Beginning with Digital Operational Resilience Management (sn_dora_accel), version 22.x.x, these currency conversion and third-party aggregation capabilities are supported for DORA reporting.

On the Create Excel download/upload request form, fill in the fields.

Create a Microsoft Excel upload and download request to upload and download the records from and into the Digital resilience third-party registers for auditing purposes.

Use the Create Exercise Event form in BCM UIB Workspace to add details about an Exercise event.

On the Create ICT third-party service provider form, fill in the fields.

Set up the Importance and Impact Tolerance Rating Scale in the Operational Resilience application so that you can define new parameters for your business services.

Create a dashboard using the inline-editor for standard analytical reporting that non-technical users can manage and share across pages and workspaces.

Create a legal entity record in Digital resilience third-party registers. You can then enhance its digital resilience information for compliance with DORA regulation.

Configure the conditions and frequency for scheduling assessment and validation tasks to maintain a structured and timely approach to model risk management.

Use the Create Action item form in the BCM Configurable Workspace to add action items about a crisis event.

Use the Create Action item form in the BCM Configurable Workspace to add action items about a crisis event.

Use the Create Service Instance form in Operational Resilience Workspace to set up an application service and configure its related lists.

On the Create Assessment of the ICT service form, fill in the fields.

Create an assessment for the self-attestation and certify the resilience status of services in the Operational Resilience Workspace. Perform the self-attestation assessment using the Smart Assessment template provided with the base system.

Create a customized attestation template in the Operational Resilience application that suits your business needs. By customizing an attestation template, you can add your own questions for your self-attestation. You can also edit an existing attestation template for your own business needs.

On the Create Branch form, fill in the fields.

Use the Create Business Process form in Operational Resilience Workspace to set up a business process and configure its related lists.

Use the Create Business Service form in Operational Resilience Workspace to set up a business service and configure its related lists.

On the Create Contractual arrangement form, fill in the fields. For each contract, a separate form would be required.

On the Create New Contract form, fill in the fields.

On the Create Digital Resilience Incident form, fill in the fields.

Use the Create Event Task form in BCM UIB Workspace to add details about an event task.

On the Create New Function form, fill in the fields.

Use the Create Impact analysis form to add details about the business impact analysis, assessments, approvals, and so on in BCM Configurable Workspace.

Use the Create Issue form in Operational Resilience Workspace to add an issue to a business service or a scenario analysis.

On the Create Company form, fill in the fields for the legal entity.

On the Create Legal entity form, fill in the fields to set up the digital resilience information.

Use the Create Notification form in BCM UIB Workspace to add details about an emergency notification.

Use the Create Offering form in Operational Resilience Workspace to set up a service offering and configure its related information.