BCM Key Stages
An essential part of a holistic Continuity program is the analysis of the Threats impacting upon the business, and a corporate understanding of where it stands with regard to such Threats, and how it will deal with them. ClearView Risk Assessment helps clients to evaluate such Threats, and select appropriate mitigations to attempt to bring the organisation 'into compliance'.
Each Risk Assessment questionnaire asks the user to select the likelihood and severity of any particular Threat to her part of the business, the combination of which determines the Risk that the Threat imposes. The user can select from a library of mitigation strategies which link to the non-conformance workflow for corrective action / continuous improvement and ISO 22301 reporting.
In addition, the Non-Conformance function enables key BCM Risks to not only be identified, but registered, allocate to business contact for actions with workflow monitoring to ensure risks are resolved or mitigated. This supports key BCM standards regarding non-conformities of process.
The starting point to building recovery plans is to 'understand the business', to prioritise process recovery and this is achieved elegantly by ClearView's BIA.
Clients can configure their own Impact Assessment rules, and collect dependencies upon Resources, Sites, other departments etc, Vital Records etc., Sophisticated 'roll-down' of calculated RTOs allows for insightful recovery planning and powerful 'gap' analysis.
Detailed 'work-around' descriptions, work transfer analysis, and Recovery Site seat planning provides the start of the response and recovery strategy consistent with the assessed recovery needs.
As with all ClearView functionality, the user interface is clean, clear and enables users to understand easily what is required and then make informed decisions. The underpinning automated processes and thresholds controlled by administrator then allow key metrics such as Recovery Periods and RTO to be automatically generated according to corporate policy, but with the ability for individual BIA owners to justify and variations required.
Beyond strategy development, ClearView automates the collection and maintenance of plan content, and the presentation online, on paper, or on mobile devices, for use during and after incidents. Plans are built in ClearView via simple configurable questionnaires, and are then maintained with policy-driven workflow for completion, approval, update, review etc.
Plans can be derived directly from BIAs or built independently. If linked to a BIA there is a common source of data which means that all/any changes are immediately reflected in both Plan and BIA.
At the heart of each Plan are the various sets of Activity Steps: simple checklists of what needs to be done, in what timeframes, by whom.
Plans can be printed or are accessible from a browser. Moreover, key plan components are also immediately available offline via a mobile app, under username / password control so that responders and recovers always have secure plans available, wherever they are and at all times. And print versions can be created to different templates, giving users choice in format - a summary plan, a fully detailed plan, a plan focusing on key actions and communications contacts. The flexible print template function effectively provides an unlimited number of print formats for each and every plan type.
ClearView recognises that plans are only valuable if they successfully meet the needs of the business, and are actually followed at the time of incident. To this end Exercising and drilling is essential.
ClearView encompasses an end-to-end BC exercising capability; with the ability for administrators to issue exercises to user departments and monitor their completion of planning the drill, scheduling it with a detailed agenda, and analysing the findings. This allows a consistent approach to exercising which can be developed to cover desk checks, walkthroughs, simulations, technical recovery, etc.
Most importantly exercisers and reviewers create corrective-actions / improvement tasks, so that the people, the plans, and the business itself is continuously learning.
As with all key functions, ClearView uses a unique template approach which enables exercises and tests of any number of different types to be created and controlled, from desk top reviews to full Recovery Site Tests. And templates enables exercises to be stipulated as ad hoc or recurring. And all of this is supported by work flow management so that administrators know when tests are being held, who is involved, whether objectives are met and what issues or non-conformances have been raised for resolution.
ClearView's exercise capability is sophisticated, but in a wrapper that makes it easy for users. Dynamic test-scripting to enable key applications and resources to be tested can be utilised within the exercise as can the dynamic Incident Management capability in 'test mode' to allow users to simulate live incidents and then track outcomes.