BCM module – BCP and DRP
Purpose of the Business and IT continuity management module
The BCM module is aimed at making sure that the company is prepared to tackle unexpected situations that might cause significant business damages. The module is set to support to full life-cycle of BCM operations in a single, unified system by encompassing planning, preparation, testing, application and maintenance tasks.
Risk mitigation measures and BCM plans can be defined for threats with low probability of occurrence, but events carrying potentially considerable business impacts. SeCube is capable of bringing together business and technology continuity planning and recovery and also of handling them both in a uniform manner, with respect to common restoration time objectives. BCP and DRP activities exhibit similarities in terms of objectives and tools, however, they generate solutions of different level and nature to manage problems.
Business continuity planning (BCP)
The main focus of Business continuity planning (BCP) is planning the continuity of Business or Production processes by taking into account their resource dependencies. Business continuity planning may offer replacement solutions or other remedies to avoid the lack of business process enhancing resources – either
- human or
In addition, alternative business or production processes may be defined. In the course of BCP activity, the aim is to develop plans that can be implemented with adequate preparation in a specified emergency situation using available resources and competences, and can ensure that business/production processes perform at a sufficient level even in cases of emergency.
The main target group of BCP planning is the areas implementing business and production processes.
Disaster recovery planning (DRP)
Disaster recovery planning (DRP) is primarily focused on planning the recovery and continuity of services, IT systems and most important resources used by business/production processes. The objective here is also to recover the normal functioning state of business processes, but the main focus here is the emergency treatment (replacement, recovery) of necessary resources as fast as possible.
The main target group of DRP planning is areas responsible for resources serving business / production areas (e.g. IT).
Integrated support of the full life-cycle of BCM
The BCM module is set to support the full life-cycle of business continuity management (implement requirements of the ISO 22301:2012 standard):
- Flexible Inventory and operating model
- When performing a BCM planning the structure and normal operating design (business and/or production system) of the company should be known. In the Inventory, resources and business/production processes as well as their dependency relations can be defined.
- The information needed during preparation for emergencies can be recorded in the BCM module. Warehouse supplies, cool and hot reserves, flexibility of human and inventory resources and emergency offers can be recorded.
- Maintenance of recovery time objective
- Using business impact analysis, consequences and recovery time objective can be defined and compared with your plans.
- RTO – Recovery Time Objective; MTO – Maximum Tolerable Outage
- RPO – Recovery Point Objective
- Detailed preparation of BCP and DRP plans for emergency situations
- Flexible scope and emergency scenario planning using the results of risk analysis to satisfy individual needs.
- Planning supported by graphic dependency graph analysis and simulation.
- Supporting the continuity and replaceability planning of business processes, and planning alternative processes.
- Emergency and recovery planning of IT resources and services, defining recovery actions.
- Decision support based on the usefulness of possible solutions, comparison of recovery scenarios with time objectives.
- Resource management planning and warehouse inventory management based on the flexibility of resources.
- PERT network planning of the sequential and parallel implementation of emergency actions.
- Storing BCM plan versions in history (for audit pupose).
- BCP and DRP plans can be exported into MS Word
- Management of preparation tasks during normal periods.
- Planning of preparation tasks and controlling of their implementation.
- One-off capacity increasing actions (e.g. purchasing, special education) or continuous maintenance and preparation actions.
- Testing support
- Planning and supporting testing, storing test results in history.
- Routing test results back into plans, assessing execution times against recovery time objectives.
- Continuous maintenance
- Our aim is also to support the continuous maintenance of plans. The continuous actuality of existing exportable plans is supported by various change tracking, validation and testing functions.
- The status and executability of BCM plans can be monitored on the basis of preparation tasks, test results and validation checks.
- Supporting the implementation of plans in case of emergency
- Simulation of incidents and emergency situations, consequence and impact reports.
- Detailed BCP and DRP plans that can be exported into MS Word documents
- Management of preparation actions and programs during nomal period
- Testing reports
- Preparation and executability reports
Inventory BIA RISK Compliance GDPR BCM Governance