Operational Resilience

Operational resilience is the ability of an organization to absorb disruptive events to business operations while continuing the delivery of important products and services. Operational Resilience includes business recovery, but it also requires a change in mindset, culture and approach that drives the implementation of resilient measures throughout the organization. To build a culture of operational resilience, organizations must identify and anticipate disruptions to critical services and their supporting assets. Threats and risks should be shared across the enterprise to effectively break down silos that could jeopardize the resilience of the organization.

Archer Operational Resilience

Archer Operational Resilience follows regulatory guidance, current standards, and best practices to guide your organization through the process of implementing and maintaining a culture of operational resilience.

Since timely information is so important, real-time dashboards and reports provide visibility and insight on the status of your organization’s resilience, as well as disruptions, risks, threats, and remediation activities to those across your organization that need it to make decisions. This insight will help you fine-tune your approach over time and improve engagement across the organization.

Archer Operational Resilience features a risk-driven, business-prioritized approach to build operational resilience across your entire organization. With Archer, your organization can evolve from reactive recovery to a more proactive approach that will enable your team to focus on the most important business impacts and significantly reduce the effects of disruptions to your business.

See the Solution Brief for this Solution on Archer Community: https://community.rsa.com/docs/DOC-40093

The following table describes the Operational Resilience use cases.

Use Case

Description

Prerequisites

Operational Scenario Analysis

Operational Scenario Analysis enables you to identify and understand the disruptive scenarios that could impact your ability to provide products and services to your customers. It helps you correlate threats and issues, test your assumptions, and identify, prioritize, and focus on gaps that could have the most drastic impact on your organization.

Business Impact Analysis, Issues Management

Business Impact Analysis

Business Impact Analysis is designed to help you determine the criticality of your products and services and automate the process of mapping supporting infrastructure so you can protect and recover what’s most important. You can share information with interdependent teams across the organization and enable business leaders to prioritize recovery strategies, recovery tasks, risk assessments, and other activities crucial to the entire organization’s operations and IT systems.

None

Issues Management

Issues Management provides users with the ability to identify and assign responsibility for the gaps, issues and deficiencies identified by their risk and compliance program. Users document these items in the Findings application, which is preconfigured with the relationships to various components of the Platform, including risks, questionnaires, policies and authoritative sources. This use case also contains two applications that enable users to manage their response to identified findings. Remediation Plans allow users to document and assign responsibility for corrective actions that address Findings. Exception Requests allow users to grant temporary acceptance of an identified risk.

None