Registering Continuity Risk Evaluation
Continuity Registration is a process that passes through several phases. The second phase of this process, called Requirements and Strategies, will be set the vital functions, business impact analysis, risks evaluation, and continuity strategy.
This functionality allows registering the risk evaluation.
Before getting started
It is necessary the existence of a service defined in the process of Portfolio and Catalog Management;
It is also necessary to register previously the Continuity Registration, policy and continuity project of a service already defined;
In addition, to have registered the scope, vital functions, and impact analysis of continuity business;
You will need to register previously the threat, threat category and link the threat category to the category registered;
Besides, registering previously the automatic action of Incident, request and procedure about Event Management.
Procedure
- Access the functionality through the main menu Processes > Continuity Management > Continuity;
- Find the continuity you want to link the evaluation of the risks and click on "Advance";
- In Requirements and Strategies, click on "Risks Assessment";
- Click on "Add Scenario" and then on the icon “+” to complete the necessary fields;
- To add services to the risk evaluation, click on "Add service" to search and link the service you want;
- To add the risk to the risk evaluation, click on Add risk to search and link the risk you want;
- After adding the risk, click on the icon “+” and click on "Select Threat" , and/or "Add Threat" to complete the necessary fields to link the threat. To enter the threat treatment plan:
- Open the "Treatment Plans" tab, then on "Add Treatment" and enter the name of the plan. Then, click on the “+” icon to complete the other fields;
- After registering the data of the treatment plan, click on the "Risk evaluation chart" icon if you want to verify the risk evaluation chart.
- Click on "Save".
What to do next
After registering the continuity risks evaluation, it is necessary to execute the following action: register the service continuity strategy, being this action, part of the second phase of the complete registration of continuity, called Requirements and Strategies.