Using Operational Scenario Analysis

The Operational Scenario Analysis use case supports the following processes.

BIA Creation

The following diagram illustrates the overall BIA creation process.

Operational Scenario Analysis - BIA Creation process flow diagram

BIA Campaign Generation

The BIA Campaign automates the creation of Business Impact Analysis records based on the selected scoping methodology. Depending on the chosen scoping methodology, the BIA campaign will create BIA records for either the selected Business Processes, Products and Services, or Business Units. You can associate a BIA record to more than 1 campaign at a time but only to a single business process or product and service. If a business process or product and service already has a BIA created, the system links the existing BIA record to the new BIA campaign after the campaign starts. To start the campaign, click Generate BIA. This action enrolls the campaign record into advanced workflow and triggers the BIA Campaign JS Data Feed, which then generates BIA records. All BIAs associated with a BIA campaign are listed in the Related Business Impact Analysis section of the campaign record.

BIA Manual Creation and Submission

During manual creation, you must first select to scope by either business processes or products and services. You are prompted to select either the business process or the product and service to evaluate. Once you update the general information section, the record is enrolled in the advanced workflow upon save. During this period any dependency mapping that was performed in the evaluated business process or product and service is copied to the Supporting Infrastructure tab of the Business Impact Analysis (BIA) record using a data feed. Once the data feed is complete, the Criticality Assessment tab is displayed. Depending on the selected scoping method, either the Business Process Manager or Product and Service Manager will answer questions related to the impact categories. After all the questions are complete and the record is saved, an Overall Criticality Rating is calculated for the BIA. The Supporting Infrastructure tab is displayed. You can either validate the supporting infrastructure that was copied from the corresponding record or perform dependency mapping if it has not yet been completed. The record is then sent to the Business Process Owner or Product and Service Owner for their review by clicking Submit under the Actions drop-down. The record is advanced in the workflow and a notification sent to the corresponding Business Process Owner or Product and Service Owner. The reviewer can either reject the record, return it to the submitter for more information, or approve the submission. Approved BIA records initiate a data feed that copies the supporting infrastructure contained in the BIA to the corresponding business process or product and service. Additionally, the Overall Criticality Rating is inherited by the business process or product and service and cascades down to all pieces of supporting infrastructure.

BIA Review Phase

A BIA record undergoes a single level of approval. The Business Process Owner or the Product and Service Owner of the corresponding evaluated business process or product and service receives a notification. They can approve or reject the BIA record or send it back to the submitter for more information.

After a BIA has been approved, the Actual Date of Completion is populated, and the review date for the next assessment is set based on the overall criticality of the BIA record. At this point, the supporting infrastructure contained in the BIA record and the Overall Criticality Rating are copied to the corresponding evaluated record. The Business Impact Analysis - Archive Feed is preconfigured to copy approved Business Impact Analysis records into the BIA Archive on a daily basis.

Impact Tolerance Definition

Operational Scenario Analysis - Impact Tolerance Definition process flow diagram

Each product and service can have multiple impact tolerances. Either the Product and Service Manager or the Product and Service Owner can create impact tolerances for their corresponding products and services. On creating an impact tolerance record, they choose the impact type, select the corresponding product and service, and identify the maximum tolerable period of disruption (MTPD) for the impact tolerance. On saving the record it is enrolled in the advanced workflow. While every impact tolerance must have a time-based metric, regulatory guidance is clear that they can also include additional quantitative or qualitative values. You can identify these values by selecting either the quantitative or qualitative type and entering the appropriate value to be tested. Additionally, you can define the impact over time used to document the tolerance for disruption during each period. Once the necessary information is updated in the record, submit it for review by clicking Submit under the Actions drop-down. A notification is sent to the selected BCM program leader member for review. The reviewer can either reject the record, return it to the submitter for more information, or approve the submission. Once an impact tolerance record is approved, it is set to the current status and will expire 1 year from its approval date. Impact Tolerances can be re-enrolled in advanced workflow at any time.

Operational Scenario Analysis Creation

Operational Scenario Analysis - Operational Scenario Analysis Creation process flow diagram

Operational Scenario Generation from Library

The Operational Scenario Library application serves as a catalog of Operational Scenario templates. You can use these templates to generate new Operational Scenario Analysis records, instead of creating them from scratch. You can then use them to test impact tolerances against the defined scenario types.

You can use the Operational Scenario Library application to automate the creation of Scenarios for each of the products and services selected.

Operational Scenario Analysis Creation and Submission

A Scenario Analysis can be performed on multiple products and services by users associated to the Scenario Lead record permission. On creating a new record, select the type of scenario to conduct 1 or more products and services to test, and the impact tolerances related to the products and services to test. Only approved impact tolerances are selected for testing. Saving the record enrolls it in the advanced workflow. A data feed runs that generates a Scenario Results record for each selected impact tolerance. Once the data feed is complete, the Analysis tab is displayed where the scenario results can be interacted with in 2 ways:

  1. Inline edit is used to enter the actual period of disruption, actual quantitative impact, and actual qualitative impact. Once all scenario results are acted on through inline edit and saved, the Overall Result is calculated by comparing the input numbers to the impact tolerances. Any scenario result with metrics that exceed the defined impact tolerance thresholds will fail, which causes the overall Scenario Analysis record to be outside tolerance.

  2. Drilling into the record, you can enter the actual period of disruption, actual quantitative impact, and actual qualitative impact. On saving the record, if any of the impact tolerance metrics are exceeded, the scenario result fails. This causes the point of failure values list to appear. From a list of dependency values, you can select where the point of failure occurred. A cross-reference is displayed for each selected point of failure. You can then select the point of failure in each cross-reference that was identified as supporting infrastructure for the product and service during the dependency mapping stage. Once the record is saved, the identified points of failure cascade up to the related Operational Scenario Analysis record.

Once the Scenario Analysis record is complete, it is submitted to the Scenario Owner for review by clicking Submit under the Actions drop-down. A notification is sent to the selected Scenario Owner member for their review.

Operational Scenario Analysis Review Phase

The reviewer can either reject the record, return it to the submitter for more information, or approve the submission. Once an Operational Scenario Analysis record is approved, findings are generated for any failed scenario result which roll up to the corresponding Scenario Analysis record.

Note: You can use the Third Party Resilience Assessment to view the Overall Resilience of your business units, divisions, and company across the 5 resilience pillars, if you have the Third Party Risk Management license.

Service Interruption Creation

The Service Interruptions application is used to measure the impact of incidents against predefined impact tolerances. After creating a new record, provide details about the service interruption in the Incident Details section. This includes an incident name, the period of time the service was disrupted and the associated unit of measurement (hours, days, weeks), the type of incident, the date/time the incident occurred, and a description of the incident. Select the products and services that were impacted in the corresponding cross-reference. Once selected, the Impact Tolerances cross-reference will be visible. The user can then select impact tolerances that were created for the selected products and services. Once the necessary information has been populated toggle the Create Service Interruptions Results Flag to Ready and click the Create Service Interruption Results button. This initiates the Service Interruption Results data feed that will copy information from the Incident Details and linked Impact Tolerances into the Service Interruption Results application. A Service Interruption Results record will be created for each linked Impact Tolerance.

Service Interruption Results

The Service Interruption Results application leverages the Service Interruption Results Creation data feed to copy portions of the parent Service Interruption and linked Impact Tolerance records for testing. No action needs to be taken if the Overall Result is Within Tolerance. If the Overall Result falls Outside Tolerance the user needs to complete the Lessons Learned section and add Comments to explain why the Incident brought the organization outside the impact tolerance. Additionally, Findings can be created for Service Interruption Results falling outside tolerance.

Operational Resilience Assessment

The Operational Resilience Assessment is used to determine the resilience of business units within your organization across 5 pillars - cyber, IT, facilities, people, and suppliers. Questions are grouped into 1 of the 5 categories (pillars). Based on the response a resilience percentage and rating is calculated for each pillar. The pillar percentages are aggregated to determine the overall resilience percentage and rating for the business unit being assessed.

The assessment has been preconfigured to operate with Archer Engage for Business Users. This allows the record creator to publish the assessment to employees that may not have Archer access. To enable this functionality, expand the Instructions section and click the Yes, display the Engage Details check box. This will display the Engage Details section, which contains the fields required to publish an assessment using Engage for Business Users.

Operational Resilience Assessment Creation

Operational Scenario Analysis - Operational Resilience Assessment Creation process flow diagram

Resilience Scorecard

The Resilience Scorecard application automatically scores the resilience of each business unit, division, and company across the 5 resilience pillars - cyber, facilities, IT, people, and suppliers. Resilience ratings are calculated by equally weighting results of Operational Scenario Analysis, Operational Resilience Assessments, Metrics, Third Party Metrics, and Third Party Resilience Assessments linked to the resilience pillar and the business unit. The resilience ratings at the business unit level are aggregated to determine the ratings of their associated division and company. Ratings are only calculated for business units, divisions, and the company if they have data points tied to that resilience pillar. Ratings are automatically calculated for each enterprise level by the following data feeds:

  • Business Unit Generate Resilience Scorecard Records - Business Unit

  • Division Generate Resilience Scorecard Records - Division

  • Company Generate Resilience Scorecard Records - Company

Resilience Scorecard Calculations

The Resilience Scorecard application aggregates data points from several applications not included in the Operational Scenario Analysis use case, including the following:

  • Third Party Resilience Assessment from the Third Party Risk Management use case.

  • Third Party Metrics from the Third Party Governance use case.

  • Metrics from the Key Indicator Management use case.

If you do not have licenses for these use cases, you must update calculations. See the following sections for the calculation information:

 

Customers Without Licenses for Key Indicator Management

Important: Customers that do not have the Key Indicator Management use case licensed must update the following calculations in the Resilience Scorecard application. Replace the existing calculations in these fields with the values shown below.

Cyber Resilience Percentage

IF([Enterprise Level]=VALUEOF([Enterprise Level],"Business Unit"),

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[Cyber Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance"))))*100,0)),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[Cyber Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated]))),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[Cyber Resilience Percentage]))),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[Cyber Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated])),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance"))))*100,0),NOVALUE()))))),[Cyber Resilience Percentage Helper])

Cyber Resilience Percentage Helper

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[Cyber Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance"))))*100,0)),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[Cyber Resilience Percentage])),0)),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[Cyber Resilience Percentage]))),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[Cyber Resilience Percentage])),0),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Cyber Resilience - Outside Tolerance"))))*100,0),

NOVALUE())

))))

Facilities Resilience Percentage

IF([Enterprise Level]=VALUEOF([Enterprise Level],"Business Unit"),

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[Facilities Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance"))))*100,0)),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[Facilities Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated]))),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[Facilities Resilience Percentage]))),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[Facilities Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated])),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance"))))*100,0),

NOVALUE()))))),[Facilities Resilience Percentage Helper])

Facilities Resilience Percentage Helper

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[Facilities Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance"))))*100,0)),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[Facilities Resilience Percentage])),0)),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[Facilities Resilience Percentage]))),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[Facilities Resilience Percentage])),0),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Facilities Resilience - Outside Tolerance"))))*100,0),

NOVALUE())

))))

IT Infrastructure Resilience Percentage

IF([Enterprise Level]=VALUEOF([Enterprise Level],"Business Unit"),

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance"))))*100,0)),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated]))),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage]))),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated])),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance"))))*100,0),

NOVALUE()))))),[IT Infrastructure Resilience Percentage Helper])

IT Infrastructure Resilience Percentage Helper

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance"))))*100,0)),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage])),0)),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage]))),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[IT Infrastructure Resilience Percentage])),0),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"IT Resilience - Outside Tolerance"))))*100,0),

NOVALUE())

))))

People Resilience Percentage

IF([Enterprise Level]=VALUEOF([Enterprise Level],"Business Unit"),

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[People Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance"))))*100,0)),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[People Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated]))),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[People Resilience Percentage]))),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[People Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated])),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance"))))*100,0),

NOVALUE()))))),[People Resilience Percentage Helper])

People Resilience Percentage Helper

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),

NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[People Resilience Percentage])))),

ROUND(AVERAGE(

IF(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance")))>0,

ROUND(

(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance"))))*100,0)),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[People Resilience Percentage])),0)),0),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[People Resilience Percentage]))),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[People Resilience Percentage])),0),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance"))

/SUM(

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"People Resilience - Outside Tolerance"))))*100,0),

 

NOVALUE())))))

OSA+ORA+Metrics Helper

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[Supplier Resilience Percentage])))),

SUM(IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))/

SUM(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance"))))*100,0)),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[Supplier Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated]))),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[Supplier Resilience Percentage]))),

MOSTRECENTVALUE(REF([Operational Resilience Assessment],[Supplier Resilience Percentage]),REF([Operational Resilience Assessment],[Last Updated])),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))/

SUM(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance"))))*100,0),

NOVALUE())))))

DC OSA+ORA+Metrics Helper

IF(AND(ISEMPTY([Operational Scenario Analysis]),ISEMPTY([Operational Resilience Assessment])),NOVALUE(),

IF(AND(NOT(ISEMPTY([Operational Scenario Analysis])),NOT(ISEMPTY(REF([Operational Resilience Assessment],[Supplier Resilience Percentage])))),

SUM(IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))/

SUM(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance"))))*100,0)),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[Supplier Resilience Percentage])),0)),

IF(NOT(ISEMPTY(REF([Operational Resilience Assessment],[Supplier Resilience Percentage]))),

ROUND(AVERAGEA(REF([Operational Resilience Assessment],[Supplier Resilience Percentage])),0),

IF(NOT(ISEMPTY([Operational Scenario Analysis])),

IF((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))+COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance")))>0,

ROUND((COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance"))/

SUM(COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Within Tolerance")),

COUNTIF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),VALUEOF(REF([Operational Scenario Analysis],[Resiliance Pillar - Result]),"Supplier Resilience - Outside Tolerance"))))*100,0),

NOVALUE())

))))

Customers Without License for Third Party Risk Management

Important: Customers that do not have the Third Party Risk Management use case licensed will need to update the following calculations in the Resilience Scorecard application. We recommend removing the existing calculations in these fields and using the calculations provided.

DataPoints_Helper

Note: Strike lines should be part of calculations as per licensed applications.

SUM(

IF(COUNTIF(REF([Operational Scenario Analysis],[Resilience Pillar]),VALUEOF(REF([Operational Scenario Analysis],[Resilience Pillar]),"Supplier Resilience"))>0,1,0),

IF(COUNTA(REF([Operational Resilience Assessment],[Supplier Resilience Percentage]))>0,1,0),

IF(COUNTIF(REF([Metrics],[Resilience Pillar]),VALUEOF(REF([Metrics],[Resilience Pillar]),"Supplier Resilience"))>0,1,0),

IF(COUNTA([Third Party Metrics])>0,1,0),

IF(COUNTA([Third Parties])>0,1,0)

)

Customers Without a License for Third Party Resilience

Supplier Resilience Percentage

IF([Enterprise Level]=VALUEOF([Enterprise Level],"Business Unit"),

IF(ISEMPTY([OSA+ORA+Metrics Helper]),NOVALUE(),

ROUND([OSA+ORA+Metrics Helper]/[DataPoints_Helper],0)),

IF(ISEMPTY([DC OSA+ORA+Metrics Helper]),NOVALUE(),

ROUND([DC OSA+ORA+Metrics Helper]/[DataPoints_Helper],0)))

Customers Without License for Third Party Governance but do have License for Third Party Risk

Important: Customers that do not have the Third Party Governance use case licensed but do have the Third Party Risk use case licensed must update the following calculation in the Resilience Scorecard application. Remove the existing calculations in these fields and using the calculations provided below.

TPM+TPRA Helper

IF(AND(ISEMPTY([Third Parties])),NOVALUE(),

IF(NOT(ISEMPTY([Third Parties])),

ROUND(AVERAGEA(REF([Third Parties],[Overall Resilience Percentage])),0),

))