Business Continuity and DR
Plans that reference the same inventory everything else does.
Works with
What it does
Continuity plans go stale because they are written once, in a document, against a picture of the estate that stops being true a month later.
Here the business impact analysis runs against the processes and assets already in the platform, so the recovery objectives it derives sit on the same records the rest of the organization maintains.
Plans, exercises and crisis communications templates are all held against those records, and the findings an exercise produces feed straight back into the plan.
Business Impact Analysis
Impact over time per process, deriving recovery time and recovery point objectives from what the analysis actually shows.
An RTO picked in a workshop is a guess. An RTO derived from an impact curve is a number you can defend to a regulator.
RTO 4h · RPO 15m
Continuity plans
Plans built from ordered procedures, each with an owner and its dependencies made explicit.
On the day, ordering matters more than completeness. A plan that says what to do third is more useful than one that lists everything.
Tabletop exercises
Schedule, run and record exercises, with the findings feeding back into the plans they tested.
Frameworks such as ISO 22301 require evidence that plans were exercised, not just that they exist. Recording the exercise in the platform is that evidence.
Crisis communications templates
Pre-approved messaging with its recipient lists, prepared before the day you need it.
Legal review of a customer notification takes days you will not have. Pre-approving the template is the only way to send it in hours.
Roles that live here
- Business Continuity Manager
- Process Owner
- Asset Owner
- Executive
Drawn from sixteen built-in roles, each scoped along the org tree. Access control
Related frameworks
See continuity planning on your processes.
A 45-minute working session focused on the frameworks and requirements that matter to your organization.