--- sourceDocument: Xanadu Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/governance-risk-compliance Release : - xanadu ft:locale : - en-US ft:publication_title : - Xanadu Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Explore # Exploring Operational Resilience {#ariaid-title1} * Release version: Xanadu * * Updated July 31, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read The Operational Resilience application provides a complete view of your operational resilience status including business service details, entities, and the status of your core business areas. ## Operational Resilience overview {#what-is-opres__section_gxr_bvy_nnb} The Operational Resilience application helps your organization to achieve a uniform vision and build resilience across different business functions. By using the Operational Resilience application on one platform, various teams can monitor the health of their services in one place. The Operational Resilience application helps different departments to build their operational resilience effectively: * IT departments can automate their processes and track the availability and functioning of the failover systems of their applications. * HR departments can have clear visibility on the market trends, resource pools, and retention risks. * Facilities departments can focus on implementing the major improvements that help you to manage your day-to-day business operations with low maintenance. * Security departments can address the physical vulnerabilities and cyberthreats efficiently. * Finance teams can manage the contractual issues, supply chain risks, and overall finances effectively. * Risk teams can analyze their potential risks and mitigate their service impact on the business operations. {#what-is-opres__ul_kmq_4f1_5tb} ## Operational Resilience and Business Continuity Management {#what-is-opres__section_ofj_q4d_myb} Operational Resilience defines the steps that an organization must proactively take to prevent any operational disruptions. Business Continuity Management implements an approach wherein it builds a plan to respond quickly to a disruption that may impact your entire organization. Operational Resilience is about proactively monitoring the resilience statistics and ensuring that the service delivery happens at any cost. Business Continuity Management is about analyzing the business disruptions, preparing a disaster recovery plan, and responding to a crisis event at the business process level. As stated earlier, Operational Resilience provides a clear understanding of your company's operational resilience statistics on the dashboard. It includes the statistics for Business Continuity Management, Risks, Controls, Service statistics, and so on. On the other hand, Business Continuity Management operates at the business process level. ## Roles installed with BCM Pro and IRM Pro licenses {#what-is-opres__section_esl_zl2_4tb} Users, managers, and administrators with an Operational Resilience IRM Pro license can now access the associated reports, charts, and data. Similarly, those with an Operational Resilience BCM Pro license can also access their respective reports, charts, and data. For more information on the updated roles, see [Roles installed with Operational Resilience](https://www.servicenow.com/docs/GLIgLUAl0lbH0m2_q74QYw "Several types of roles are installed with the Operational Resilience application."). ## Operational Resilience workflow {#what-is-opres__section_m3d_ybr_nnb} The Operational Resilience application provides a continuous four-stage workflow that helps your resilience managers and administrators to achieve your organization's safety and well-being. You can prepare for and cope with the adverse events by anticipating, preventing, recovering from, and adapting to such events. The stages of operational resilience are shown in the following example. To build resilience for your organization, analyze each stage in the resilience life cycle: 1. Anticipate: When disastrous events happen, it is not always obvious which services, people, and processes are critical. Organizational silos, poor data, and different tools can impede your understanding of risks and cross-business dependencies. A lack of prioritization and planning can mean imprecise decision making. To overcome these challenges, the Operational Resilience application helps you to perform a what-if scenario analysis to better plan for best, worst, and expected outcomes. The application helps you to prepare for what you must protect and identify the areas to prioritize, according to your business and risk context. 2. Prevent: Most operational procedures are designed for efficiency rather than for risk and compliance. Businesses often over-rely on the manual corrective controls, rather than the automated preventative controls. Early warning of risks or adverse events can be thwarted by manual processes and fragmented data. Such practices can cripple your response to disastrous events. The Operational Resilience application can guide you through establishing sufficient controls that reduce the likelihood of potential problems in time to mitigate them effectively. With risk and compliance activities incorporated into your daily work, operations run smoothly with fewer efforts. Intelligent processes and policies help you unlock new efficiencies. Continuous monitoring triggers an immediate and targeted incident response. 3. Respond/Recover: Many businesses are organized in such a way that they are unable to respond to adverse events quickly or safely. Communication internally, or with vendors and suppliers is poor. Split-second decisions can worsen the situation, especially when information is incomplete or outdated. Continuity plans that are created using the Operational Resilience application can help you prevent an out-of-control escalation of an incident. A pre-approved and tested recovery plan prepares you to respond to the situations effectively, reduces the risks, and improves the recovery time. 4. Adapt: Operational resilience means you can quickly and easily bounce back from disasters. However, when these events occur, they are not often seen as learning opportunities. But they are. If you look at them in that way, you have a chance to improve your protective measures and respond effectively to the next event. Learning from these events and adapting can lead to minimized impacts and speedier recovery. Adverse events, such as fire, extreme weather, pandemics, or data breaches, offer lessons about what could work better. The Operational Resilience application can help you collect data, assess results, and feed conclusions back to your teams. Visibility to the past provides business leaders with a vision of better operational performance in the future. {#what-is-opres__ol_bml_vwd_kyb} ## Operational Resilience benefits {#what-is-opres__section_wy3_gxd_kyb} The Operational Resilience application provides the following benefits: {#what-is-opres__table_ocq_3xd_kyb__entry__3} | Benefits | Features | Users | |-|-|-| | Analyze the importance and impact tolerance of a business service. | [Performing Importance and impact tolerance assessment](https://www.servicenow.com/docs/BEjwtmvuWF28VkB_gyiUew "By analyzing the importance and the impact tolerance of your business service or service offering, you can measure how possible disruptions might impact the performance of a service. You can use the assessment questionnaire template​ in Operational Resilience Workspace to measure the importance and the impact tolerance of your selected business service and its child records.") | Operational Resilience managers and users | | Perform a scenario analysis in Operational Resilience workspace. | [Conducting a scenario analysis](https://www.servicenow.com/docs/7Jeb47VXZAtEo7dKcS3FAg "By performing a scenario analysis, you can determine the risks that might impact your business. You can analyze the impact of the scenarios and events on your business services. You can also track the actions and improvements from the scenario analysis in Operational Resilience Workspace.") | Operational Resilience managers and users | | Self-attest the business services in Operational Resilience workspace. | [Certifying services using self-attestation](https://www.servicenow.com/docs/or2yYyTMlFkkbx__1Stz0w "Certify the operational resilience status of your business services by completing the self-attestation process in the Operational Resilience Workspace. Complete the self-assessment questionnaire about the services, generate a self-attestation report, and upload the PDF so that you can have a copy of the report for your records. You can perform self-attestation on the selected business service and its child records.") | Operational Resilience managers and users | | Add an issue, change request, incident, and outage in Operational Resilience workspace. | [Creating or adding an issue](https://www.servicenow.com/docs/dzBLorovhAriltibsoM~Ew "You can associate an issue with multiple objects such as controls, control objectives, risks, and so on in Operational Resilience Workspace. You can add an existing issue or create an issue for a business service or a scenario analysis in the Operational Resilience application.") | Operational Resilience managers and users | | Add or remove an operational vulnerability in Operational Resilience workspace. | [Managing Operational vulnerability](https://www.servicenow.com/docs/_Fo23t_rXwZwYlEQD5Oemg "Operational vulnerabilities are weaknesses in systems, processes, or procedures that can be exploited by attackers to compromise the security and integrity of an organization's operations. These vulnerabilities can arise from a variety of factors, including IT and non-IT operations.") | Operational Resilience managers and users | [ ] {#what-is-opres__table_ocq_3xd_kyb} ## Coral theme {#what-is-opres__section_k5r_hfm_tfc} Coral is now the default theme for Business Continuity Workspace. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences.