Business Continuity Management: Plan Templates / Loss Scenarios

[Justin N]

Background: Our company implemented GRC in early 2022 and customized the BCM process quite a bit to meet business need. We are currently revising our process in order to revert back to OOTB BCM to help with plugin updates and longevity. 

Through our analysis of our currently customized process and the OOTB process, I have the following questions that I would like some experienced insights into:

1. Do other SN customers make new Plans every year?  Or is there a process to edit existing Plans when it is time to update them? 
2. How many BCP Templates do SN customers usually have?  How many Loss Scenarios are typically on a BCP? 

If anyone with BCM/GRC experience has insight into these questions, I would love to hear other opinions. Thanks!

[Rakesh Chigari · Accepted solution]

@Justin N 

We have implemented BCM recently, not very well matured, we are implementing in phase, slowly by expanding the scope definition. 

1.  No, we don't. Ootb BCP plan have life span of 1 year, BCP plan owner will get an email notification before the expiry, owner can then click 'Edit' which resets the plan back to Draft, allowing it to be edited and then go through the workflow to Approved. Once Approved, presumably a new 'Expires by' date is set (365 days from the new Approved date.  if no action is taken before the due date, it is automatically moved to the state "archived", and these are displayed as overdue BIAs or expired BCPs in the BCM Workspace. 

2. Like i mentioned, we are in quite early stage, we are just using one template  to keep process very simple. this number may differ with matured BCM Project and number of loss sceneries may be different for impacted elements, we have 9 loss scenarios for business application and quite few other elements

If I could help you with your Query then, please hit the Thumb Icon and mark as Correct