--- sourceDocument: Yokohama Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/governance-risk-compliance Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Explore # Exploring Operational Resilience {#ariaid-title1} * Release version: Yokohama * * Updated July 31, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Exploring Operational Resilience The Operational Resilience application in ServiceNow provides a unified platform to monitor and enhance your organization's ability to withstand disruptions across business services and core operational areas. It enables cross-functional teams---including IT, HR, Facilities, Security, Finance, and Risk departments---to gain visibility, automate processes, and manage risks effectively. Show full answer Show less This application complements Business Continuity Management (BCM) by focusing on proactive resilience monitoring and service delivery assurance, whereas BCM concentrates on planning and responding to disruptions at the business process level. ## Operational Resilience Workflow The application supports a continuous four-stage workflow that guides resilience managers through the lifecycle of managing adverse events: * **Anticipate:** Identify critical services, people, and processes using what-if scenario analysis to prioritize protection efforts based on business and risk context. * **Prevent:** Establish automated preventative controls and continuous monitoring to reduce risks and ensure smooth operations with targeted incident response. * **Respond/Recover:** Utilize pre-approved and tested continuity plans to respond effectively, reduce risks, and shorten recovery times during incidents. * **Adapt:** Learn from past adverse events by collecting and assessing data to improve future resilience measures and operational performance. ## Key Benefits and Features * Analyze business service importance and impact tolerance to prioritize resilience efforts. * Perform scenario analyses to evaluate potential risks and outcomes within the Operational Resilience workspace. * Self-attest business services to maintain up-to-date certification of operational readiness. * Create and manage issues, change requests, incidents, outages, and operational vulnerabilities directly within the workspace. * Enhanced user experience with the Coral theme as the default for Business Continuity Workspace, offering a modern, brand-neutral interface and an optional dark mode for web and mobile. ## Roles and Access Users with Operational Resilience IRM Pro or BCM Pro licenses can access associated reports, charts, and data relevant to their roles, ensuring appropriate visibility and control over resilience and continuity management activities. ## Practical Value for ServiceNow Customers By leveraging the Operational Resilience application, ServiceNow customers can unify resilience efforts across departments, automate risk management processes, and maintain continuous service delivery despite disruptions. This holistic approach improves decision-making, response times, and allows organizations to adapt and strengthen their operational posture over time. The Operational Resilience application provides a complete view of your operational resilience status including business service details, entities, and the status of your core business areas. ## Operational Resilience overview {#what-is-opres__section_gxr_bvy_nnb} The Operational Resilience application helps your organization to achieve a uniform vision and build resilience across different business functions. By using the Operational Resilience application on one platform, various teams can monitor the health of their services in one place. The Operational Resilience application helps different departments to build their operational resilience effectively: * IT departments can automate their processes and track the availability and functioning of the failover systems of their applications. * HR departments can have clear visibility on the market trends, resource pools, and retention risks. * Facilities departments can focus on implementing the major improvements that help you to manage your day-to-day business operations with low maintenance. * Security departments can address the physical vulnerabilities and cyberthreats efficiently. * Finance teams can manage the contractual issues, supply chain risks, and overall finances effectively. * Risk teams can analyze their potential risks and mitigate their service impact on the business operations. {#what-is-opres__ul_kmq_4f1_5tb} ## Operational Resilience and Business Continuity Management {#what-is-opres__section_ofj_q4d_myb} Operational Resilience defines the steps that an organization must proactively take to prevent any operational disruptions. Business Continuity Management implements an approach wherein it builds a plan to respond quickly to a disruption that may impact your entire organization. Operational Resilience is about proactively monitoring the resilience statistics and ensuring that the service delivery happens at any cost. Business Continuity Management is about analyzing the business disruptions, preparing a disaster recovery plan, and responding to a crisis event at the business process level. As stated earlier, Operational Resilience provides a clear understanding of your company's operational resilience statistics on the dashboard. It includes the statistics for Business Continuity Management, Risks, Controls, Service statistics, and so on. On the other hand, Business Continuity Management operates at the business process level. ## Roles installed with BCM Pro and IRM Pro licenses {#what-is-opres__section_esl_zl2_4tb} Users, managers, and administrators with an Operational Resilience IRM Pro license can now access the associated reports, charts, and data. Similarly, those with an Operational Resilience BCM Pro license can also access their respective reports, charts, and data. For more information on the updated roles, see [Roles installed with Operational Resilience](https://www.servicenow.com/docs/f4RQSjMpg_FVJEK9NHchnA "Several types of roles are installed with the Operational Resilience application."). ## Operational Resilience workflow {#what-is-opres__section_m3d_ybr_nnb} The Operational Resilience application provides a continuous four-stage workflow that helps your resilience managers and administrators to achieve your organization's safety and well-being. You can prepare for and cope with the adverse events by anticipating, preventing, recovering from, and adapting to such events. The stages of operational resilience are shown in the following example. To build resilience for your organization, analyze each stage in the resilience life cycle: 1. Anticipate: When disastrous events happen, it is not always obvious which services, people, and processes are critical. Organizational silos, poor data, and different tools can impede your understanding of risks and cross-business dependencies. A lack of prioritization and planning can mean imprecise decision making. To overcome these challenges, the Operational Resilience application helps you to perform a what-if scenario analysis to better plan for best, worst, and expected outcomes. The application helps you to prepare for what you must protect and identify the areas to prioritize, according to your business and risk context. 2. Prevent: Most operational procedures are designed for efficiency rather than for risk and compliance. Businesses often over-rely on the manual corrective controls, rather than the automated preventative controls. Early warning of risks or adverse events can be thwarted by manual processes and fragmented data. Such practices can cripple your response to disastrous events. The Operational Resilience application can guide you through establishing sufficient controls that reduce the likelihood of potential problems in time to mitigate them effectively. With risk and compliance activities incorporated into your daily work, operations run smoothly with fewer efforts. Intelligent processes and policies help you unlock new efficiencies. Continuous monitoring triggers an immediate and targeted incident response. 3. Respond/Recover: Many businesses are organized in such a way that they are unable to respond to adverse events quickly or safely. Communication internally, or with vendors and suppliers is poor. Split-second decisions can worsen the situation, especially when information is incomplete or outdated. Continuity plans that are created using the Operational Resilience application can help you prevent an out-of-control escalation of an incident. A pre-approved and tested recovery plan prepares you to respond to the situations effectively, reduces the risks, and improves the recovery time. 4. Adapt: Operational resilience means you can quickly and easily bounce back from disasters. However, when these events occur, they are not often seen as learning opportunities. But they are. If you look at them in that way, you have a chance to improve your protective measures and respond effectively to the next event. Learning from these events and adapting can lead to minimized impacts and speedier recovery. Adverse events, such as fire, extreme weather, pandemics, or data breaches, offer lessons about what could work better. The Operational Resilience application can help you collect data, assess results, and feed conclusions back to your teams. Visibility to the past provides business leaders with a vision of better operational performance in the future. {#what-is-opres__ol_bml_vwd_kyb} ## Operational Resilience benefits {#what-is-opres__section_wy3_gxd_kyb} The Operational Resilience application provides the following benefits: {#what-is-opres__table_ocq_3xd_kyb__entry__3} | Benefits | Features | Users | |-|-|-| | Analyze the importance and impact tolerance of a business service. | [Performing Importance and impact tolerance assessment](https://www.servicenow.com/docs/nxt3bNnNHXJLFaNb4SKqAA "By analyzing the importance and the impact tolerance of your business service or service offering, you can measure how possible disruptions might impact the performance of a service. You can use the assessment questionnaire template​ in Operational Resilience Workspace to measure the importance and the impact tolerance of your selected business service and its child records.") | Operational Resilience managers and users | | Perform a scenario analysis in Operational Resilience workspace. | [Conducting a scenario analysis](https://www.servicenow.com/docs/vveRL1eh0tb28G9gUXI55Q "By performing a scenario analysis, you can determine the risks that might impact your business. You can analyze the impact of the scenarios and events on your business services. You can also track the actions and improvements from the scenario analysis in Operational Resilience Workspace.") | Operational Resilience managers and users | | Self-attest the business services in Operational Resilience workspace. | [Certifying services using self-attestation](https://www.servicenow.com/docs/YG9dHt8AYbtSgDhmStWvlA "Certify the operational resilience status of your business services by completing the self-attestation process in the Operational Resilience Workspace. Complete the self-assessment questionnaire about the services, generate a self-attestation report, and upload the PDF so that you can have a copy of the report for your records. You can perform self-attestation on the selected business service and its child records.") | Operational Resilience managers and users | | Add an issue, change request, incident, and outage in Operational Resilience workspace. | [Creating or adding an issue](https://www.servicenow.com/docs/r4iMmF59p6u4jTVYrsg3~g "You can associate an issue with multiple objects such as controls, control objectives, risks, and so on in Operational Resilience Workspace. You can add an existing issue or create an issue for a business service or a scenario analysis in the Operational Resilience application.") | Operational Resilience managers and users | | Add or remove an operational vulnerability in Operational Resilience workspace. | [Managing Operational vulnerability](https://www.servicenow.com/docs/XTXEKtS3hXTD~D1Sk3AX6Q "Operational vulnerabilities are weaknesses in systems, processes, or procedures that can be exploited by attackers to compromise the security and integrity of an organization's operations. These vulnerabilities can arise from a variety of factors, including IT and non-IT operations.") | Operational Resilience managers and users | [ ] {#what-is-opres__table_ocq_3xd_kyb} ## Coral theme {#what-is-opres__section_k5r_hfm_tfc} Coral is now the default theme for Business Continuity Workspace. This theme provides a fresh look and feel, featuring brand-neutral illustrations to enhance your user experience. A dark theme option is available for web and mobile experiences.