Upload
others
View
0
Download
0
Embed Size (px)
Citation preview
Sponsored by
BUSINESS CONTINUITY SOFTWARE REPORT
36Robust equals trustThe importance of effective business continuity management, by Keith Tilley SunGard Availability Services
38Taking IT to taskDeborah Ritchie asks how the global economicdownturn has impacted the market for businesscontinuity software
40Software reportProducts and features
AVAILABILITY SERVICES
automated processes
centralised secure accessdependency mapping
standar
dise
d re
port
ing
data consistenc y
AVAILABILITY SERVICES
Keep your business continuity plans moving
As your business continuity strategy grows – particularly if you have numerous plans across multiple sites – there comes a point when standard offi ce software doesn’t have the dynamic manageability you need to maintain control. At this point, moving to a solution that is purpose-built becomes the only realistic way you can ensure all your plans stay up to date.
With SunGard Availability Services Continuity Management Solution (CMS) you can select a software package that suits your needs – there are six to choose from. Enabling you to update your business continuity strategies in real time and with complete accuracy at all times.
Gain an insight into all your CMS options with an engaging online clip at: www.sungardcms.co.uk
SunGard and the SunGard logo are trademarks or registered trademarks of SunGard Data Systems Inc. or its subsidiaries in the U.S. and other countries. All other trade names are trademarks or registered trademarks of their respective holders.
accommodate the evolving needs
of people and processes. And it
is not just important from an
internal perspective – customers,
shareholders and regulatory
bodies often demand that
organisations have processes in
place to ensure recovery from
any disruption to operations.
Unfortunately, as many BC
managers will know, keeping
a BCM process current and
relevant is an incredible burden,
not least because a lot of time is
spent on the maintenance of plans
and a struggle with templates that
were not specifically developed to
the needs of the BC manager.
Effective, tailored, BCM software
can make a huge difference: it can
highlight problem areas in the
business and help with assessments
around various areas of risk
including supply chain and the
workforce. It also frees up time for
the BC managers to focus on the
primary task of protecting the
business, but also the task of
marketing the value of business
resilience to customers and
stakeholders and positioning it
as a key differentiator.
Beyond Word and Excel
Many companies still use Microsoft
Office software to house and
maintain continuity plans, but
this approach generally can’t meet
the stringent requirements for
updating and maintaining plans.
BCM processes need to be
underpinned by documents and
resources that truly reflect ongoing
changes in the organisations they
serve. Real-time revisions are
best maintained in a relational
database with BCM software
designed specifically to perform
changes and automate the entire
planning process. In addition to a
Today’s
organisations
are complex
structures. Even the
smallest of companies have to
deal with an intertwined web of
suppliers, customers, partners and
employees spread across a variety
of different locations – often
globally. Increased levels of
outsourcing also mean that non-
core and sometimes even core
processes are entrusted to third
parties. At the same time, modern
organisations are continually
evolving to offer new products
and move into new markets, often
within a very short timeframe.
In the new world of on demand
services where customers expect
businesses to be fully operational
24/7, businesses cannot afford to
be offline even for a few hours.
Just five years ago the average
organisation would be able to cope
with recovering 30 to 40 per cent of
their business after an outage, but
today, expectations are set to rise
thanks to new technological
developments which means it’s
perfectly viable for 60 to 70 per
cent of staff to be recovered within
a shorter timeframe.
Doing their best to keep this web
intact is the business continuity
(BC) manager, on whose shoulders
is placed the huge responsibility of
ensuring that if something does go
wrong, plans are in place to cope.
The need for a multi-faceted
business continuity management
(BCM) process that remains fluid
and constantly evolving is therefore
perhaps more important now than
ever before.
Keeping plans live to survive
Though demands on the BC
manager are increasing, thankfully,
technology and services which
engender continuity and availability
are becoming more advanced, and
at the same time, are now much
more affordable than only a few
years ago. For example, we
will soon be offering a service
based on virtualisation technology
which enables organisations to
recover a far greater proportion
of their staff by providing access
to recovered data and systems
wherever they have access to
a PC, internet connection
and telephone.
While these continuous advances
in business and ICT availability are
ultimately of huge benefit to
organisations of all sizes, each
advance requires a change to the
existing or corresponding BC
plan(s). Consequently, a BC
plan can no longer be a static
document that may or may not
be updated every once or twice
a year. It needs to be fluid,
constantly evolving, dynamic
management process that takes
into consideration changes in
circumstances, regulations,
technology and people.
Organisations need a ‘living’ plan
they can trust, that integrates
seamlessly with the business,
yet can be easily modified to
CIR August 201036 www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > OPINION
The importance of effective business continuity management
Robust equals trust
“Keeping this webintact is the businesscontinuity manager,on whose shouldersis placed the hugeresponsibility ofensuring that ifsomething does gowrong, plans are in place to cope”
CIR August 2010 37www.cirmagazine.com
relational database, BCM software
provides: the flexibility to customise
to the requirements of company
standards, simplicity for the plan
development process to integrate
with multiple plans and increased
efficiency for plan maintenance
and activation.
Aside from saving hours of
word processing time, the best BCM
software can now cover business
impact analyses, continuity planning,
incident response and emergency
notification on a common, easy-to-use,
web-enabled platform.
One particularly important aspect
the latest BCM software can help with
is workforce assessment. Whether the
situation involves the major loss of a
facility, the failure of a critical
business operation or a widespread
event such as a pandemic, the right
BCM software can help evaluate
critical personnel’s ability to respond
to disruptions. With the best software
for workforce assessment, a company
can answer the following and many
other questions:
● Who has a critical recovery role?
Are there situations for these critical
employees that would impede their
ability to support the organisation
during a disaster?
● Who has BC experience?
Who has taken part in a test,
and what was their role?
● How prepared are our staff
to work at home? Do they have
the right equipment, work
environment, and security
to protect company assets?
● How dependent are we
on contractors or consultants?
How critical are they to company
operations? Will they be able
or willing to participate in a
recovery event?
● How current is the information we
have on our workforce: contact
numbers emergency contact
information, skills and experience?
The same applies to vendor
capabilities: with the supply, or value,
chain having become critical to the
operation with straight through or
seamless processes between
customers and vendors. These
processes are now at far greater risk
of disruption due to the lengthening
of these chains. So it is no longer
acceptable to simply trust a vendor
will be reliable during a disruption
you need to know they can survive
and supply your business. The latest
developments in BCM software can
help evaluate service providers’ or
suppliers’ compliance with the
organisation’s own continuity
requirements through vendor
assessment. Effective assessment:
● Minimises vendor record
maintenance and enables vendors to
verify and update information online,
including contract information.
● Minimises weaknesses in the
supply chain by identifying services
or suppliers not in compliance.
● Collects and stores vendor
contracts centrally; identifying
vendors with low resilience
and risk.
Making the right choice for you
The latest developments in BCM
software will be of most interest to
two types of organisations: larger,
more complex organisations who
want to improve their BCM planning,
and smaller organisations that
are only just embarking on the
process and want to get it right at
the first opportunity.
Many of the former will have
multiple plans and facilities that
span across a number of different
countries, a complex business
network, and employ workers that
are not based in one specific
location. A standard MS Office
plan will be too time-intensive to
keep up, lack the inbuilt relational
capabilities to be truly fit for BCM
purpose, and will not leave the BC
manager time to be strategic and
keep up with all the changes in the
business and its environment.
For smaller organisations or
those new to adopting BCM, it is
important to get it right the first
time. This is an age where BC
processes are increasingly
expected and seen as vital.
Customers, suppliers and other
third parties expect such a
capability to be in place and it may
well be a condition of doing
business with them. For start-ups
it is important to remember that a
DIY approach to BCM is a false
economy, ultimately costing more
time, efficiency and money in the
long run.
Whatever your shape of
organisation, when selecting the
tools to underpin your continuity
and availability processes, it is
important to select those that are
truly up to the task at hand.
That is why BCM software is a
better choice than office software.
And why when you take the BCM
software route – a proven,
reputable, well-established solution
which is also in tune with the latest
good practice requirements is
better still.
Then your partners, suppliers,
customers and stakeholders can
be assured that you’ve done all that
is reasonable to prevent letting
them down.
Keith Tilley is managing director,
UK and executive vice-president
Europe for SunGard Availability
Services
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
“Customers,suppliers and otherthird parties expectbusiness continuityprocesses to be inplace and it may well be a condition of doing businesswith them”
BUSINESS CONTINUITY SOFTWARE REPORT > OPINION
Rosenberg disagrees with these
views on the economic picture.
“I don’t think our business has
been affected by the downturn. We
are actually doing better business.”
His firm, Controll IT’s latest project
involves the development of a
disaster recovery testing function to
enable larger customers (including
one major German bank) to easily
plan tests and then follow them in
real time.
But one thing is for certain in this
economic environment, and that’s
change. In terms of BC
management itself, re-prioritisation
is the order of the day, which has
provided fresh impetus for
developing new functionality.
New priorities
Over the last year or so the
market has moved beyond
businesses being worried about
their own continuity capabilities
alone to considering more closely
those of their supply chain. New
functionality like SunGard’s
Continuity Management Solution’s
(CMS) Vendor Assessment tool
can make this task far easier to
carry out.
In addition to the supply chain,
organisations are now looking for
ways to cut costs by removing any
surplus. “Newer technologies such
as our Notifind technology which
automates the ‘roll-call’ exercises
involved during any major incident
where staff need to be contacted
can also help simplify the plans
themselves and remove layers
of process and detail,” says
SunGard’s Forbes.
“Customers want greater real-
time recovery capabilities,” adds
Alvord. COOP’s latest offering also
includes a notification function,
By the beginning of this
year, the global economic
downturn had taken a toll
on business continuity (BC) teams
and smaller vendors in the UK and
overseas, resulting in a handful of
closures, in some cases layoffs and
at least cutbacks in others.
Naturally, this trend extended into
the BC software market.
CEO of US-based BC software
provider Coop Systems, Chris
Alvord, who has been in the
business for almost ten years,
believes the IT aspect of the BC
operation took much of the hit
following the downturn, but that
business has picked up sharply
since Autumn 2009 when
he said capital spending dropped
by about 50 per cent in the
second quarter.
“Other sectors, which were
not as exposed to the sub-prime
mortgage crisis were obviously not
as directly affected, and in mature
operations where the BC reports to
risk department, funding has
largely been retained. Some forty
per cent of our business this year
will come from the finance sector,”
he adds.
Business continuity software
provider, Paradigm Solutions
International president and CEO,
Raymond Huger, offers his view:
“Some of the projects that we had
lined up didn’t happen, because
everyone was taking a wait-and-see
attitude. This year, however, things
are moving along. There’s a lot
more activity.”
It’s no surprise that in difficult
times, the value of any investment
comes under much greater scrutiny.
As Simon Maddox, director,
solution design and support, ICM
Continuity Consulting, points out:
“It sometimes takes a downturn for
people to be more careful with their
overheads. There is no point having
a tool unless it is adding real value.
“I have seen some smaller
organisations say they don’t even
want to look at BC at the moment
as it is seen as a risk they are
prepared to take in the recession;
it becomes an acceptable risk
given the other pressures.”
Ramesh Warrier, director of
Canadian firm, eBRP Solutions,
observes: “Most business executives
have been trying to trying to ensure
that their company financials look
good, so that they are seen to have
spent less and spent only on what
they need to spend on. They are
focusing on their core competencies
and outsourcing those functions
that are not.”
On the other hand, there are
other firms that, having tightened
their belts already, have become so
dependent on the smooth running
at all times of the rest of the
business that the risk assessment
process is even more heightened.
“It comes down to value. You can
justify the spend when it can return
advantages that you can’t get
elsewhere,” says Maddox.
Tracey Forbes, vice-president,
product development, SunGard
Availability Services concurs:
“The global economic downturn
has required organisations to do
more with less so the time savings
provided by BC management
software are very valuable.”
Carrying out a BIA on a
global enterprise with 100,000+
employees, for instance, is a job
particularly well suited to some of
the BC software products on the
market today, Maddox points out.
Hamburg-based vendor Mathias
CIR August 201038 www.cirmagazine.com
Taking IT to taskDeborah Ritchie asks how the global economic downturn has impacted themarket for business continuity software
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > INTRODUCTION
provided in conjunction with MIR3.
Alvord’s team has also been focusing
on adding more advanced relational
databases to its product’s
functionality, a significant step to
adding more analytical and visual
power to the offering. Last is a new
ability to make all planning content
accessible securely through eight
major types of mobile devices.
eBRP’s Warrier, whose clients
include a glut of Fortune 500
Enterprises and many large financial
institutions, and whose product is
built to be ITIL compliant, says,
“We have improved our product
in terms of incident management –
that is command, control and
communications.”
Over the last year, many of the
major software providers have been
fine tuning their products to include
these instant messaging features and
other new functions and technologies
such as enhanced BIA functions and
automatic RTO calculations.
Huger points out that these new
functions can have a dual purpose if
used correctly. Of their instant
messaging function, he says, “This
can also be used on a day-to-day
basis, when you are developing the
plans together. It’s a useful
collaborative feature that can also
lend itself to a crisis situation.
Paradigm’s OpsPlanner solution
is also looking to add enhanced
language capabilities and multi-smart
phone functionality, and ICM is soon
to release its new iPhone app.
“A lot has changed, Maddox
explains. “I started out in the
business in 2001 when we developed
the first web-based BC tool. Using
email reminders was quite ahead of
the game. What I am seeing now is
the move from plans being fixed to
the desktop, to having them more in
peoples’ hands.”
That mobile capability is, he
believes, the most significant strategic
shift. “ICM has also developed a
BlackBerry application which is not
dependent on a connection, but
which synchronises to the application
when it can. This to me is only the
start of things.”
Taking business-critical plans to
the mobile level will bring home
the security imperative, however.
One could hardly call the iPhone
Fort Knox, and now the security of
the long trusted BlackBerry may
be in question – at least by the
UAE and possibly now the Indian
Government, too.
But security fears are not stemming
the tide in mobile platform
development. Stateside, George
Liscinsky, senior vice president at
RecoveryPlanner, which is about to
bring its RPX Mobile to market is
confident about the outlook. “We’ve
had a very brisk summer business
wise. The summer months are
usually quieter, but we believe
our clients consider BCM even
more important if they have cut
back on personnel. Saving time
and resources is exactly what we
promote with our software.
They are currently adding
new language and compliance
functionality that aims to help
clients align their plans with
pertinent regulations. “We’re
really excited about our recent
enhancements to our integrated
incident management and
notification system.”
Factoring in Liscinsky’s positive
outlook is his theory that the
market is not yet broken in the US.
“There are a lot of companies out
there without BCM programme,”
he smiles.
Just seven months after we
welcomed in a very unhappy new
year, the picture looks brighter
already, with business looking up
across all sectors throughout the
UK and beyond.
So while this year may have got
off to a slow start for the IT market,
for some, it is just the beginning.
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > INTRODUCTION
CIR August 201040 www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCTS
You
r g
uid
e to
bu
sin
ess
con
tin
uit
ym
anag
emen
t so
ftw
are
Bus
ines
s co
ntin
uity
so
ftw
are
repo
rtSUNGARD CONTINUITYMANAGEMENT SOLUTION SUNGARD AVAILABILITY SERVICES
Function: SunGard’s CMS is acomprehensive solution designed tomanage all phases of the businesscontinuity management (BCM) lifecycleand advances in recovery technology andtechniques such as the virtualisedrecovery desktop and soft phones. Assuch, the solution now encompasses newworkforce and vendor assessment tools.
Launched: 1988, continuous developmentsince. Additional modules were releasedin 2010 covering risk assessment,workforce assessment, and vendor (supplychain) assessment.
This product is typically aimed at multi-site
and large-scale organisations looking to
improve their business resilience by using
software to help them manage and automate
the complexity arising from multiple plans
across multiple sites. This helps to improve
resilience without increasing headcount.
The product is aimed at both the public
and private sectors. SunGard’s CMS is also
suitable for those organisations that
originally developed their plans in MS
Office but now find that business growth
and constant change means that MS Office
based plans are no longer suitable to use
as the relational data and Macros now
embedded in the plan need constant
attention and upkeep.
SunGard’s CMS allow users to develop
call lists as easily as they can open, move
files, and map dependencies. This allows
users to see what processes and applications
are dependent on others in during a crisis.
Planning tools are also designed with key
regulations in mind that enable users to
build comprehensive, compliant, and
complete BCM programmes.
The service is accessible using a web
browser from any location. The product’s
licensing model is flexible; users can
choose to host the software themselves, or
have SunGard host it for them.
The suite can be purchased in modules so
that a fledgling business can start off with
lower cost starter modules and upgrade in
line with its business growth and complexity
avoiding a time-consuming migration at a
later date.
SunGard’s CMS has been designed to
allow organisations to implement BCM
good practice, as explicitly or implicitly
required by many standards including, but
not restricted to Sarbanes-Oxley, NFPA
1600, BS 27001, Civil Contingencies Act
2004, The New Basel Capital Accord,
NASD Rules 3510 and 3520, New York
Stock Exchange (NYSE) Rule 446, FFIEC
BCP Handbook, Executive Order 12656,
Health Insurance Portability and
Accountability Act (HIPAA), Statement on
Auditing Standards (SAS) 70 audit reports,
North American Electric Reliability
Council – Standard 1200, and Information
Technology Infrastructure Library (ITIL).
The product fully supports BS 25999 by
allowing organisations to use the solution
as a framework for implementing the
standard. All phases of the standard are
supported allowing organisations to
complete a business impact analysis (BIA),
plan their strategy, implement their plans,
manage their testing and reviews and
report to their management their
preparedness.
Customers are advised to take regular
training classes to help maximise the value
of investment. SunGard offers a host of
training opportunities for the industry so
that customers can train a wide cross
section of users.
SunGard’s CMS is available in the UK,
France and the US from SunGard
Availability Services, and across the world
through authorised representatives.
Live demos and Webex demos are
available upon request.
Tel: 0800 143 413www.sungard.co.uk
CIR August 2010 41www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCTS
123BCP123BCP
Function: Plan development, riskanalysis, crisis messaging.
Launched: 2006; first upgrade 2008;corporate version launched 2008. Majorupgrade 2010.
123BCP takes the plan manager step-by-
step through the whole planning process.
Staff are allocated to groups which have
specific tasks and processes to carry out
before, during and after an incident. The
plan manager can set dates that all tasks
have to be done by and this produces a
full plan diary.
Plans can be uploaded to the 123BCP
web service and can then be managed
using any recent web browser. Plans can
also be made available on a company
intranet. Data is maintained by plan and
group administrators rather than directly
by third parties although this is available
online if required.
Plans can be created in £, $ or €. 123BCP
is both an online editable system and a
desktop application installed on a users’
PC or a server. For larger organisations,
the corporate version links to SQL-
enabled in house databases.
Major upgrades during 2010 have
introduced calendar scheduling, plan
phases, risk and reliance analysis, business
processes analysis, testing procedures,
extended insurance analysis and post-
disaster review and effectiveness analysis.
One benefit of the 123BCP model is that
a plan can be downloaded from the
internet to a laptop, managed using the
123BCP PC software (perhaps during a
flight or a site visit) and then uploaded
back to the internet when convenient.
Plans can also be ‘activated’ – with
notifications being sent to customers/
suppliers/employees via SMS and/or
email.
123BCP is a standalone application;
123BCP Web Service, a hosted solution.
With 123BCP Web Service, all data
stored on the web server is encrypted
using the 256bit AES algorithm. A demo
of this product is available at
www.download.com.
123BCP is purchased via a one-off fee
and all support is free of charge. Training
can be purchased if required and 123BCP
provide a full planning service.
Tel: 0845 22 55 444www.123bcp.com
ALIVE-IT – BC FRAMEWORKCONTROLL-IT GMBH
Function: Plan development andexecution in case of disaster, emergencyplans and IT recovery plans. WithGrade-It: BIA and risk impact analysis.
Launched: 2001.
alive-IT supports all aspects of the
planning process. With its built in wizards,
the software also supports culture and
awareness programmes which makes the
product well suited to enterprise-wide
roll-outs. A BIA module is the latest
addition to this software.
Supporting BS 25999, alive-IT is fully
web-based and can be accessed from any
PC with a web browser. All software
modules necessary for the operation are
included in alive-IT except the database
management system and, if needed,
database clients (especially for Oracle
and DB2).
Apache Tomcat is provided for the web
server. An integration of Apache web
server and IIS (MS Internet Information
Server) is also possible. Sun Java 5 (JDK
1.5.x) is assumed to be present.
With alive-IT, resource classes can be
freely defined. Users can automatically
import data from existing databases
(batch and online). An essential aspect of
alive-IT is its process modelling.
Diagrams are automatically generated.
Alive-IT’s resource data/resource
management function enables
optimisation of an enterprise’s data
administration, including customisable
definition of data and data classes.
Secure access of alive-IT is organised in
four steps: authentication, encoding,
bugging protection and rules-based
authorisation. Alive-IT can be purchased
or leased. Training can also be purchased.
Tel: +49 (0)40 89 06 64 60www.controll-it.de
BUSINESS PROTECTORBUSINESS PROTECTION SYSTEMSINTERNATIONAL
Function: BCM lifecycle, notificationand crisis communication.
Launched: Web-based BusinessProtector, featuring a new code base,was released in 2000. The product iscurrently in version 4.5. 2008 Version5.0 integrating .NET 3.0.
Business Protector supports all phases of
the BCP lifecycle – from easy-to-configure
frameworks, intuitive content management
to robust scorecard, plan testing and
system reporting.
Access control can be granted at any
level of the software to supply chain
participants, external stakeholders,
regulators and other interested parties.
These rights can be granted as
read/write or read-only. All access is
audited. Business Protector is
benchmarked against BS 25999 and is
fully web-based.
Additional modules include incident
management and automated notification.
End-user and administrator training can
be provided either online or in-house.
Administrative training typically takes two
days, usually provided in two one-hour
sessions. End-users can be generally
conversant with the solution after one
four-hour training session
Tel: 020 8002 9029www.businessprotection.com
CIR August 201042 www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCTS
CONTINUITY COMMANDERCONTINGENZ CORPORATION
Function: Guided analysis to developBC and DR plans and operationalinformation.
Launched: 2003. Version 4.0: 2010
Continuity Commander (formerly IMCD
Business Backup) supports the planning
and maintenance of BC and DR plans
and is compliant with relevant ISO and
British Standard specifications.
Users require a Windows PC workstation.
Reports can be posted on websites using
PDF or HTML generated outputs. Training
is not usually required for this product.
Tel: +1 310 906 0589www.contingenz.com/imcd
CRISIS COMMSUITECPA SOFTWARE LTD
Function: Externally-hosted, secure, web-based information storage andcommunications.
Launched: 2007. Beta version: 2006.
CrisisCommsuite aims to make vital
information (during invocation, testing or
post-incident review) available to all
authorised users, regardless of location.
It does not aim to undertake BIA, risk or
plan writing functionality, but rather
provides a readily available platform for
the output from those projects to be
stored, distributed and made available to
support time-critical decisions at the time
of an incident or in testing/exercising.
Within the lifecycle, Crisis CommSuite is
primary a tool that supports BC
programme management, embedding
culture and testing, maintenance and
review.
Crisis CommSuite provides a whole range
of functionality both to support multi-
channel communications during a
disaster and also to create a virtual battle-
box that can be accessed individually or
on a shared basis at a command centre or
EOC. It supports a media management
facility, the opportunity to assign and re-
schedule tasks as an incident progresses,
an automated means of assessing levels of
impact and the automatic notification of
the appropriate levels of contact.
The objective of this product is to work
worldwide with all other products such as
planning tools and automated callout
products (regardless of vendor) to provide
a single point of access at critical times.
In BAU conditions it also provides a
means of introducing and monitoring
plan governance, and helping enforce a
maintenance and testing regime in line
with defined corporate policy.
In post-disaster and post-testing review it
provides absolute proof of what happened
when, how and who made what decisions
and why.
The product supports BS 25999 and can
provide an off-site, virtual storage
capability for all of the key control
documents required by BS 25999-2.
If an organisation defines its BC
management policy and supporting
governance structure this can be input
into Crisis CommSuite and a series of
RAG flags will provide management
overview of status and plan currency.
The product uses recognised Secure
Socket Layer (SSL) security and
incorporates full user ID and password
protection, and user profiles dictate
which areas of the system the users can
obtain access to.
Tel: 01527 61926www.cpa-ltd.com
DRP & BCP TEMPLATESJANCO ASSOCIATES
Function: Templates for creating disaster recovery and businesscontinuity plans in Word formats.Templates include forms andquestionnaires that can be used tocustomise the plan to fit specify needs.
Launched: 1998. Version 5 launched2008.
Disaster Recovery Plan (DRP) and Business
Continuity (BCP) are designed to create,
maintain, test, audit, and function in
compliance with all enterprise and
mandated BC management requirements.
No training should be required to use
this product. The DRP and BCP Templates
can be used in any enterprise.
Templates and supporting material have
been updated to be Sarbanes-Oxley,
HIPAA, PCI-DSS, and ISO 27000
compliant. DRP and BCP Templates
predate BS 25999 but cover its
requirements.
Tel: +1 435 940-9300www.e-janco.com
DRSTAMP SYSTEMS
Function: Consulting, software and plandevelopment, management, maintenanceand distribution.
Launched: 1984.
TAMP Systems is a DRI Certified
Business Continuity Vendor (CBCV) that
provides planning solutions for BC and
disaster recovery (DR). TAMP’s web-
based BC planning and management
software, Disaster Recovery System
(DRS), can be provided as a Software as
a Service (SaaS) or client-hosted model.
The DRS software creates plans, keeps
plans up-to-date and manages BC
management data.
TAMP’s consulting services include the
development of BIAs as well as plans for
BC, DR, crisis management and
pandemics. TAMP also offers the
Essential Notification System (ENS),
which provides automated delivery of
voice messages and failover of a current
voicemail system for DR.
Tel: +1 800 252 4080www.tampsystems.com
CIR August 2010 43www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCTS
EBRP SUITEEBRP SOLUTIONS
Function: Risk assessment, BIA, plandevelopment and maintenance, incidentmanagement.
Launched: 2003. Upgraded 2006, 2009.
The process, technology, supply chain
and organisational modelling provides
organisations with a decision support
system facilitated by ‘what if’ analysis.
This product supports the complete BCM
lifecycle including risk assessment (asset-
centric risk management), impact
analysis (business, technology and supply
chain), plan development, plan testing
and exercising, plan maintenance,
incident management (command, control
and communications) and integrated
notification.
eBRP Suite incorporates NIST 800
suggested nine-step risk assessment
methodology including a risk dashboard.
The product also provides the ability to
create plan templates, embed documents,
create checklists and review Gantt charts
with granular role-based access control.
eBRP Suite contains features that display
a to do list on the logon splash page as
well as send email reminders to plan
owners to trigger plan maintenance. This
product can also can be integrated with
many of the leading emergency
notification systems using web services
API for contact database synchronisation
as well as to initiate notification natively
from within the eBRP Suite. Windows
ADS integration and single sign-on (SSO)
can be used for user authentication.
Training is minimal and can be carried
out using a simple manual, or less than
two hours of training. In many cases,
training can be conducted remotely using
WebEx or other collaborative tools.
Tel: +1 905 677 0404www.ebrp.net
ESECURUSNON-VERBA
Function: Awareness and education,plan development, plan maintenance,crisis communications.
Launched: 2004. Major upgrades in2005, 2006, 2007, 2008, 2009 and 2010.
eSecurus is the overall enterprise BCM
planning tool that supports all aspects of
the BS 25999 recommendations,
embedding BCM into the user
organisation's culture through:
understanding of the company structure
and having the ability to map this visually
supporting ease of plan navigation
definition of policy; understanding and
defining the organisation and
stakeholders; definition of key resources;
definition of the risk register; BIA and
identification of critical processes;
development of BC and incident
management plans; invocation and
exercise of plans; ongoing maintenance
and review of BC management strategies
along with remedial action support;
internal audit (supported through
NonVerba's eInviso software); state of
readiness reporting and management
oversight through dashboard technology;
change management and audit control.
BCM Cloud is the SaaS version of
eSecurus designed to give SMEs the ability
to grow into an enterprise solution by
using the modules needed when required.
NaCSTO BCM Cloud has been developed
in partnership with the National Counter
Terrorism Security Office (NaCTSO) in
the UK and is an 'invitation only' version
of the BCM Cloud system which has been
developed to offer free basic planning to
companies who take part in a NaCTSO
VSAT (Vulnerability Self Assessment)
programme. This initiative aims to help
organisations prepare for incidents in
crowded places.
eSecurus Blue Light is a specialist version
of eSecurus that has been developed in
partnership with a national UK police
force to meet the specific needs of the blue
light services. In addition to the software
NonVerba also offer secure hosting and
our environment and software has been
officially penetration tested by Local
Authorities on several occasions now.
TCRMS is the compliance and risk
mitigation suite.
The eSecurus product and associated
products are all fully web-based and
accessible using the IE browser. They can
also be installed and hosted in-house or
from a NonVerba cloud/ASP host server
farm over the internet. A specialist ultra
secure host environment has also been
established for the police force.
Central administration is initially
established through one defined
administration account. Within a
corporate environment security access to
the product is embedded within the
profiled users' access. In an ASP
environment all users require user name
and password to access their profiled
areas. This can be embedded within the
corporate environment to provide single
sign-on so that the user only needs to log
in once. Data security is managed
through the system administrator who is
responsible for the establishment of
access rights, roles and responsibilities.
Latest new features include impact
analysis reporting, integration to UK
Government video resources, generic
BCM awareness and education web
portals to support Civil Contingencies
Act 2004.
Tel: 020 7887 4544/0800 783 6917 www.nonverba.com
FRONTLINE LIVE CONTINUITY LOGIC
Function: GRC, programmemanagement, plan development,maintenance, testing, crisismanagement.
Launched: 2008.
FrontLine Live supports all parts of the
BCM lifecycle: understanding the
organisation, determining BCM strategy;
developing and implementing BCM
CIR August 201044 www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCTS
response; exercising, maintaining,
and reviewing.
All users have access to the portal
including supply chain vendors (based
on permissions). Department managers,
IT managers, supply chain groups can
access the platform to maintain and
manage their business areas, access
plans, and document business process.
Integrated modules include: programme
management, employee management,
vendor management, risks and impacts
management, technology management,
plan management, team management,
employee portal and reports manager.
FrontLine Live feature sets fully support
BS 25999. The platform includes project
plans and templates based on BS 25999
implementation. It also supports other
areas of governance, risk, and compliance
including enterprise risk management,
recall management, vendor management,
technology management, employee skills
and talent tracking which can be used for
pandemic planning and testing.
Tel: +1 973 845 4004www.continuitylogic.com
ICM SHADOW-PLANNERICM CONTINUITY SERVICES
Function: Integrated suite includingdiscovery (BIA and compliancequestionnaires), policy setting (riskappetite and recovery time objectives),BC planning, maintaining and exercising.Links for real-time integration with crisiscommunications systems.
Launched: 2002. Major upgrade undernew ownership in June 2010.
This software supports all parts of the
BCM lifecycle. Among its key features are
its integrated suite, connectivity with
other applications, a new mobile
application – essential data available
offline and automatically synchronised
daily, ease of plan maintenance, full
BIA workflow from request of resources
through to audited approval process.
ICM Shadow-Planner suits a spectrum
of users: from small law firms to global
manufacturers and other software
producers. The product is available
within the UK and worldwide via agents.
SaaS is provided from London, Geneva,
New York and Sydney.
User’s supply chains and other networks
can gain access to the software securely
using web questionnaires. Suppliers can
see performance reports and users may
identify and chart weak supply chains.
This product has been built around BS
25999 with direct involvement from the
standard’s steering committee. It can
support other compliance sets through
a dedicated compliance module.
Tel: 08448 63 00 63www.icm-continuity.com/shadow-planner
INONI BCM PROINONI LTD
Function: Standards-aligned BCM, BIA,risk, crisis management, BC plan,awareness, maturity, supply chain.
Launched 2005, updated six-monthly
INONI BCM Pro is a web-based BC
management system that is quick to learn
and easy to use. It provides whole BCM
lifecycle capability that can be scaled to
fit all sectors and business size. The
software is flexible and can be customised
in respect of presentation, operation,
structure and content. It is delivered
ready-to-use and standards-aligned. It
allows preferred or pre-existing
methodologies to be implemented. BCM
information is collected via customised
dialogues and a flexible import and
export capability allows frequently-
changing data to be captured and
reflected in deliverables. Access is
provided to libraries of data and system
applications such as a risk register and
a crisis event log.
Output is delivered online to MS Office
and to PDF; interfaces are provided for
notification systems. Deliverables can be
rolled up allowing consolidation by
location, by division or for the organisation.
Benchmarking capability allows diverse
global information to be captured,
mapping BC maturity, staff awareness and
supplier compliance with organisational
requirements. Risks to business can be
modelled online using time-lapse
simulation, allowing validation of
maximum tolerable period of disruption
(MTPD) and strategies, quantified impact
analysis and identification of single
points of failure. Software and training,
support and consultancy are available.
Tel: 0845 045 1171www.inoni.co.uk
LINUS REVIVELINUS INTERNATIONAL
Function: Corporate structure,geographic spread, businessrequirements (including BIA andresource dependency mapping), riskmanagement, costed strategydevelopment, emergency response,incident management, proceduresdevelopment, exercising, programmemanagement, maintenance, audit, anduser permissions.
Launched: 2002. Annual upgrades.
Written by accredited practitioners for use
by novices, Revive delivers an ‘all hazards’
planning approach. The user moves from
module to module as they work through
the BC management lifecycle. Revive
tracks progress and determines who is
falling behind the scheduled review
windows. Emails can then be issued to
assist in getting back on track.
40-48_products2010c.qxd 04/10/2010 18:07 Page 5
CIR August 201046 www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCTS
Revive integrates with MS-Word
procedure templates enabling simple
integration of pre-existing plans with
database reference information. If
authorised by the user, the external
supply chain may gain network access
to the software for planning and
maintenance purposes. The software
supports BS 25999, with the latest
version including incident management
capabilities. Training can be arranged
at additional cost.
Tel: +61 412 557798www.linusrevive.com
MATACOSAVANT
Function: Fully integrated BCP solutioncovering BIA, plan development,maintenance, exercising, review, threatassessment, dependency mapping.
Launched: 2009. Current version: 2
Key benefits of this system include a
single repository for all the information
required to implement the BCM and
emergency planning process; efficiency
savings for organisations whose staff are
tasked with maintaining their BCM
response; a web-based interface that
offers remote access to all plans; easily
integrated into client’s intranet; flexibility
in the way the information is maintained
and used to produce documents and
plans; and support for BS25999.
Tel: 01524 784400www.mataco.co.uk
MSTAMSTA – MICHAEL BEWSASSOCIATES
Function: Plan development,maintenance, exercising and audit.
Launched: 1989, Version 5.0: 1992.Version 7.35: 1997. Version 7.36: 2008.Version 8.0 (online): in development.
MSTA software is designed to support
initial BIA, plan development, distribution,
periodic maintenance, exercising and
staff training. At the discretion of the plan
owner, supply chain participants may also
access plans. MSTA v7.36 is standalone.
MSTA v8.0 will be standalone or web-
hosted. MSTA shares the MS Windows
security environment. Training for this
product is provided free of charge.
Tel: 020 7723 7676www.msta.co.uk
MYCOOPCOOP SYSTEMS
Function: All phases of the BCMprocess: project initiation, BIA/risk,planning, awareness, maintenance,testing, and incident command all from a simple browser interface and a unified database.
Launched: 2002, Version 6.6 2010,features upgrades quarterly.
myCOOP is a simple, web-based BCM
software solution designed to support the
global enterprise. First released in 2002,
COOP Systems and its international
partners support some of the world’s
largest organisations by unifying all
professional practices.
The full lifecycle of BCM is managed in a
tightly integrated, web-based, easy-to-use
package supported 24/7 internationally.
Advanced new capabilities include
graphical dependency modelling.
System and feature customisation can be
carried out quickly and easily without
added coding, database modelling, or
expensive on-site consulting. Initial
production process availability is
measured in days, with high-level
functions including flexible BIA/risk
survey collection and graphical analysis;
quick and easy plan creation and
management; program management
tools, eg. maintenance tasking, testing,
training, integrated one-click mass
notification, and incident command for
exercises and real events.
COOP Systems and its partners support
clients anywhere in the world, regardless
of their industry, language, geography or
scale of business.
US Tel: +1 703 464 8700UK Tel: +44 (0)1923 286 905Australia Tel: +61 2 8001 6597
www.coop-systems.com
OPSPLANNERPARADIGM SOLUTIONSINTERNATIONAL
Function: OpsPlanner is a BCP, BIA,incident/recovery management andautomated notification solution.
Launched: 2003. Major feature upgradesannually.
OpsPlanner is used in a variety of
industries and organisations of all sizes.
It is particularly popular among medium -
sized to large commercial companies
and government agencies. Typical user
firms include pharmaceutical, financial
services, food and product distribution,
education, utilities, transportation,
healthcare and federal contracting firms.
Among the key features of this product
are ease of use and scalability, no need
for time-consuming training for both the
administrator and the casual end user to
attain proficiency in less than four hours.
OpsPlanner is offered on a client-hosted
basis and as well, as a SaaS solution which
requires little to no overhead for server or
software administration and support.
BIA Expert is an optional integrated
feature in OpsPlanner. This feature allows
an organisation to define BIA threshold
parameters, dynamically generate
customised BIA surveys based on these
OPSPLANNER™
Web-Based Continuity Planning
ADVERTORIAL
47CIR August 2010www.icm-continuity.co.uk/shadow-planner
For many in business,
maintaining a business
continuity (BC) plan is one
of those tasks that is never at the
top of the to do list. Against this
backdrop it has been interesting to
see how plans have evovled from
complex, massively detailed and
combersome thomes, to more
slimline documents offering mere
guidence to suitably trained
responders. The driver behind this
evolution has been the need for
plans to be relevant to an incident
requiring a pre-planned response,
yet immediately up to date and
easily accesible. The risk is that
the slimline variant dumbs down
the plan and creates potential
execution risk.
BC software has historically
been viewed as a potential solution
but one that is often seen as
complex and too difficult for the
occasional users to embrace. But
it is now possible with modern
web based software-as-a-service
(SaaS) tools such as ICM's Shadow-
Planner, to break down complex
and detailed plans into manageable
chunks. Instead of updating the
document at once, BC managers
can schedule update tasks through-
out the year and allocate the task
to the specific head of division. By
making tthe software easy to use
by non BC specialists, the plan can
be deconstructed and there is a
higher chance it will be maintained
- embedding BC in the organisation
and making your business more
efficient and effective.
So once you have the plan up
to date, it is important to have it
available anywhere. With the rise
of the remote and mobile work-
force, managers now want their
plans with them but without carry-
ing around a wad of documents.
This led to the dumbed down
approach, but now technology
means that detailed plans for any
eventuality can be delivered on
smartphone & mobile devices.
For the first time, using ICM's
Shadow-Planner, it is possible, to
carry the documentation on the
one device that fits neatly into
your pocket and is with you 24/7.
Yet, a reliable BC plan cannot
rely on a connection through your
web browser and network as, in the
case of the 2005 London Bombings,
the networks shut down and prevent
access. With ICM Shadow-Planner,
we have developed a method that
ensures telephone numbers, emails
and BC plans can be physically
stored on your Blackberry or Smart-
phone's memory, ensuring access
to the documents even if your net-
work provider is down. Everyday
the data is synchronised to the
master, guaranteeing you always
have the updated version of the
plan and it is encrypted. The data
is then only accessible via the ICM
Shadow-Planner application, which
requires user identification, ensur-
ing no breach of confidentiality.
It's impossible to forsee a disas-
ter, which is why businesses need
to adopt a powerful yet simple
solution to remove the headaches
previously associated with creating
and managing comprehensive BC
plans for every eventuality.
Businesses need to look solutions
and providers that can offer them
the flexibility and functionality
they require in today's busy envi-
ronment, to make the BC plans
work for them. ICM's award win-
ning business continuity manage-
ment software, Shadow-Planner
has been given a complete re-write
to address today's challenges. The
SaaS solution can help businesses
of all sizes devise a plan that is
effective and adds value, ensuring
they can continue to work how and
where they want, no matter what
the disaster. With the ability to
find what you need in fewer clicks
and update records quickly, it
gives you the time to concentrate
on achieving your business
continutiy objective and
ultimately peace of mind.
Maintaining & ImplementingBC plans on the move
Mike Osborne, Managing Director, ICM Continuity Services, exploresthe need to have well maintained business continuity plans and how theemergence of flexible SaaS solutions meets the growing demand frommanagers to have a continuous connection to plans via their mobile.
For more information on the ICM Shadow-Planner v4, you are invited to attend the ICM Shadow-Planner launch events across
the country, and to find out how ICM Continuity Services can assist your business; please contact ICM Continuity Services on
0844 63 00 63 or [email protected], www.icm-continuity.co.uk
CIR August 201048 www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCTS
parameters and automatically calculate
recovery objectives via specially
formulated patent-pending algorithms.
OpsPlanner allows the user to incorporate
any number of standards into the
planning process as needed within the
unique environment of each client.
Specifically, the solution contains
specialised templates and checklists
which enable the client to plan
consistently with NFPA 1600, ASIS, BS
25999, NIST 800-34, FFIEC guidelines,
and DRII/DRJ GAP.
Recent feature upgrades include
enhancement to each of the modules
including new compliance templates and
surveys, plan development and recovery
dashboards, BIA automation, recovery
management, and emergency notification.
Tel: +1 814 943 4007 www.opsplanner.com
PARADDEVOTEAM
Function: Plan development,maintenance, incident management, crisis communications.
Launched: 1992.
PARAD integrates a unique structuring
and methodological approach to build
and maintain plans. The models
contained in the software simplify the
update of BC procedures and data.
Suppliers can also access plans,
which fully comply with BS 25999.
To use the advanced features, Internet
Explorer, MS Word and Excel are all
required. PARAD features rights
management, secure connections and
password encryption.
Training, available at a fee, usually
takes between one to four days. PARAD
is distributed by license or service
rental (ASP).
Tel: +33 1 41 49 41 87www.devoteam.com/parad
RPXRECOVERYPLANNER
Function: BCM lifecycle: risk, BIA,planning development/maintenance,incident management, automaticnotification.
Launched: 1999. Enhanced regularly.
RPX includes the components to support
the entire BCM lifecycle in one, web-
based application. An organisation may
start the planning process with risk
assessment and/or BIA, which RPX has
simplified with surveys and wizards, or go
straight to the planning process. RPX
promotes collaborative, automated
planning and maintenance in one closely
integrated application. The information
entered under risk assessment and/or
BIA is used in building and maintaining
and activating plans, eliminating the
need to enter duplicate data.
The virtual command centre is an
interactive event management tool that
automatically records and manages all
incidents and exercises. RPX’s robust
integration capabilities through web
services API provides a means to connect
to customer’s other systems for real-time
data acquisition.
RPX incorporates pertinent BCM best
practice, standards and regulations
including BS 25999, DRII, NFPA 1600,
BCI, NIMS, ITIL, FFIEC guidelines,
Sarbanes-Oxley, and HIPAA. ISO 27002
is followed for security assurance.
New features include mobile support,
compliance and standards, scenario
analysis, data migration/integration and
automatic notifications. Compliance
audits can be easily generated for
internal and external review. The RPX
Scenario Analysis feature allows users to
pinpoint everything affected by a loss.
RPX provides multiple ways to get your
information loaded into the software.
Editions and support in Portuguese and
Spanish as well as GIS mapping.
Tel: +1 203 455 9990www.recoveryplanner.com
THE PLANNING PORTALAVALUTION CONSULTING
Function: BIA, recovery strategydefinition, recovery planning, planexercising, learning, generalmanagement, automated notification,automated workflow and customisablereporting.
Launched: 2006. Upgraded annually.
The Planning Portal (TPP) can assist with
each phase of the BCM lifecycle – from
helping organisations start a BC
programme to helping them mature and
increase the efficiency of their
programme. The solution uses a set of
integrated modules – including BIA, risk
assessment, planning, exercising,
training, and notification – to support
both initial data gathering and ongoing
maintenance of BC related information.
TPP offers live crisis/ incident
management modules that enable online
situation reporting and alerting, resource
and recovery issue tracking, department
and application recovery status tracking,
interactive geo-tracking and mapping,
and online news and media reporting.
This product was designed to enable
organisational compliance with BS
25999’s Part 2: Specification.
It also supports NFPA 1600 2007/2010
(US). The product is completely web-
based and operates inside of Microsoft
SharePoint 2010. Users with Microsoft
Internet Explorer or other major browser
type can access and work securely.
TPP is available as a hosted solution. It
stores client information in secure
databases, located in a SAS 70 Type II
datacentre, protected by passwords as
well as database and network firewalls to
prevent the loss, misuse or alteration of
personal information.
All communications are encrypted with a
GeoTrust 256bit Security certificate.
Training is provided for a fee and is
always included in the initial proposal.
Tel: 0866 533 0575www.theplanningportal.com
50 www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCT FEATURES
CIR August 2010
Plan navigator
Dependency map
Graphical call list
Location resource manager
Reports – preformatted
Reports – own build
Process modelling capabilities
Technology modelling
‘What if’ analysis
Flowcharts
Graphs
Tables
Plan viewer
Data collector
Automatic analytics
Simulation capability
Dynamic updating from database
Education and training
Test and exercise support
Functionality & AdministrationScreen customisation/translation
Help
Spell check
Calendar
Charts and reports
Shortcut keys
Search and filter
Filters
Personal filters
Copy and paste
Roll-forward capability
Templates available
FAQs
Change control and tracking
SecurityUser roles
User groups
Business activity and project access
Risk security
Security preview
Individual passwords
Internet security
Audit trails
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
Contin
uity C
omm
ander
BPSeBRP S
uite
eSecuru
s
DR&BC
Tem
plate
Disa
ster R
ecove
ry S
yste
m
Cris
is C
omm
suite
aliv
e-IT
123bcp
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
SunGar
d’s C
MS
CIR August 2010 51www.cirmagazine.com
AVAILABILITY SERVICESCONTINUITY MANAGEMENT SOLUTION (CMS)
BUSINESS CONTINUITY SOFTWARE REPORT > PRODUCT FEATURES
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
●
Plan navigator
Dependency map
Graphical call list
Location resource manager
Reports – preformatted
Reports – own build
Process modelling capabilities
Technology modelling
‘What if’ analysis
Flowcharts
Graphs
Tables
Plan viewer
Data collector
Automatic analytics
Simulation capability
Dynamic updating from database
Education and training
Test and exercise support
Functionality & AdministrationScreen customisation/translation
Help
Spell check
Calendar
Charts and reports
Shortcut keys
Search and filter
Filters
Personal filters
Copy and paste
Roll-forward capability
Templates available
FAQs
Change control and tracking
SecurityUser roles
User groups
Business activity and project access
Risk security
Security preview
Individual passwords
Internet security
Audit trails
INO
NI B
CM
Pro
Linus R
eviv
e
MSTA
myC
OO
P
OpsP
lanner
PARAD
FrontL
ine L
ive
ICM
Shad
ow-P
lanner
The Pla
nning P
ortal
Mat
aco
RPX
BUSINESS CONTINUITY SOFTWARE REPORT > SUPPLIER DIRECTORY
SunGard Availability Services12-13 Bracknell BeechesOld Bracknell Lane WestBRACKNELLBerkshireRG12 7BW
Tel: 0800 143 413Email: [email protected]: www.sungardcms.co.uk
SunGard's Continuity Management Solution
Business Continuity Management made easy. And efficient. And reliable.SunGard's Continuity Management Solution (CMS) is designed to maximise your time as a BC expert; by making the administrative managementof BC as easy and yet comprehensive as possible. Instead of creating queries, pivot tables and ad-hoc coding you should be utilising andimplementing:
• Easy-to-use wizards and templates allowing you to have the tool set up and functioning quickly and easily • Intuitive management of the system with scheduling and ready-to-use reports allowing delegation and reminders to be set up at the
click of a button • Efficient use of data by eradicating duplication of information, time and workload by being a one-input system • Import capabilities for all your existing plans to ensure your hard work and intellectual property transfers to your new improved BC tool.
The tools you want for the work you do.Unlike other tools that BC managers traditionally find themselves using, CMS is designed for purpose. Its interface, functionality and end-goal areall designed specifically with Business Continuity in mind - taking the headache of admin and plan development away and leaving you with time tothink smarter about the BC processes you oversee.
Harnessing 32 years of risk management expertise and 20 years of development, CMS comprises a number of powerful software modules including:
• LDRPS - award winning* BC planning software• BIA Professional - Intuitive BIA survey tool for overall strategic planning• Incident Manager - Virtual command centre for communications, tracking and monitoring of incidents
SunGard's CMS is one of our many award-winning* solutions that deliver strategic Information Availability - Consulting, Recovery Services andManaged Services - to help you stay in business no matter what.
* Business Continuity Awards: Service Provider of the Year - 2010, 2009, 2006, 2005, 2002, 2000, 1999: Finalist -2009, 2008, 2007, 2006, 2005, 2004, 2002,
2001, 2000; BCM Software - Finalist 2009, 2008; Most Innovative Product 2004 - LDRPS; 10th Anniversary Awards for Outstanding Excellence in Business
Continuity - 2008
OpRisk & Compliance: Business Continuity Strategy & Planning - 2007; Business Continuity Planning Software - 2007
Making Business Continuity a priority together with you.
With our expertise in Business Continuity Management we have developed the BCMS² system to provide you with a comprehensive aid tomanaging your BCMS.We continually improve our offering to the market having developed a system that adds real value to the ongoing management of your BCMS.Don't take our word for it, our customers in Global organisations and Government establishments continually recommend us.www.continuity2.com
BCMS² - Effective, affordable and resilient business continuity software by Continuity²
Continuity2Ltd - E232 Edinburgh House,Righead Gate, Glasgow, G74 1LS Telephone: 0845 0944402Fax: 0845 0944403Web: www.continuity2.com
• Incident Management • Compliance with BS25999 • Distribution & Call Cascading • Business Impact Analysis • 2 Way SMS & VOIP Messaging
• Manage Call trees • Plan Management • Exercising • Ease of Administration • Version Control
myCOOP™
COOP Systems, Inc.
Function: All phases of the BCM process - - Project Initiation, BIA/Risk, Planning, Awareness, Testing, Maintenance, and Incident Commandall from a simple browser interface and a unified database.
Launched: 2002, Version 6.6 2010, features upgrades quarterly.
USP: “myCOOP is easy to use, fast, less costly BCM software supporting the global enterprise. First released in 2002 and recent winner ofthe Software of the Year Award, COOP Systems and its international partners empower some of the world's largest organizations by unifyingall the Professional Practices in one web-based instance.”
The full life cycle of the Professional Practices is managed in a tightly integrated, web-based, easy-to-use package supported 24X7internationally. Advanced new capabilities include pandemic planning, structured workflow and graphical dependency modeling.
System and feature customization is done quickly and easily by clients without customized coding, systems modeling, or expensive on-siteconsulting.
Initial deployment for initial use takes only a few hours, with high-level functions are as follows:
• Flexible BIA/Risk survey collection and graphical analysis • Quick and easy plan creation and management • Program management tools, e.g. maintenance tasking, testing, training, etc. • Integrated one-click notification • Incident command for exercises and real events
COOP Systems and our partners support clients anywhere in the world, no matter their industry, language, geography or scale of business.
U.S. Tel: +1.703.464.8700London Tel: +44 (0)1923 286 905Sydney Tel: +61.2.8001.6597www.coop-systems.com
Web-Based Continuity Planning
Controll-IT – Business Continuity ServicesControll-IT is your partner for Business Continuity Management - As an independent consultancy and software house, we develop integrativeconcepts and products for the active Business Continuity Management of our customers. We help enterprises with strategic, organizationaland technical concepts to secure their business processes against any threats.
WHAT WE DOWe deliver since 10 years consultancy services and software for Business Continuity Management.
OUR SERVICESConsultancy services for BCM, ITSCM, Crisis Management, Test strategies, Test preparation and Support during Tests, BSI 25999Certification Support...
SOFTWAREWe deliver with our modern software products [alive-IT] and [grade-IT] support for the duties within the scope of BCM and ITSCM.
alive-IT: Integrated Business and IT Service Continuity Software
grade-IT: Professional survey software for BIA and RIA, integrated with alive-IT
Controll-IT GmbHStresemannstraße 34222761 Hamburg, GermanyTel: 0049 - 40 - 89066460Fax: 0049 - 40 - 890 664 69
BUSINESS CONTINUITY SOFTWARE REPORT > SUPPLIER DIRECTORY
Paradigm Solutions International (PSI) is an industry leader in providing Business Continuity Management software and certified BCMconsulting services to commercial organizations and government agencies.
The OpsPlanner™ BCM tool delivers web-based, fully integrated BCP/COOP/DR planning, incident management, and automated notificationalong with the most advanced Business Impact Analysis module available. PSI's easy-to-use, yet powerful tool is very affordable and canprovide a scalable and reliable Business Continuity Management solution for any organization. Our cost-effective OpsPlanner solution, and the expertise of our certified consulting team, provides a highly competitive offering that has been chosen by a wide range of large andsmall organizations.
PSI assists our clients in the development and maintenance of effective Business Continuity Management programs. Let us help yourorganization prepare for, manage, and recover from, any unexpected business disruption. We are "In Business to Keep You in Business". To learn more or arrange for a free demonstration, call us at 814-943-4007 x308 or visit us at www.OpsPlanner.com or www.ParadigmSi.com.
Paradigm Solutions International 6701 Democracy Boulevard, Suite 300Bethesda, Maryland, USA 208171-814-943-4007 - [email protected] - Corporate Websitewww.OpsPlanner.com - Product Website
OPSPLANNER™
ICM Shadow-Planner ICM Shadow-Planner is an award winning Software-as-a-Service solution that makes structured Business Continuity Management a breeze.
Following the acquisition of Office Shadow by ICM and an investment of over £1m, the latest version - the much anticipated Version 4, is beinglaunched worldwide. Scores of functionality enhancements, a range of new features, increased performance and a new user interface makesVersion 4 the best yet. It represents a compelling proposition and an essential tool for anyone serious about business continuity.
With a global user base for over a decade, Shadow-Planner has become renowned in the business continuity industry as a pioneering,automated, on-line software tool.
The solution comprises a suite of integrated software modules designed to support the entire BCM lifecycle. It helps firms of all sizes achievestrong and effective business continuity plans that are continually updated.
Organisations in the financial services sector, public sector and others in regulated industries have used ICM Shadow-Planner to help complywith business continuity standards such as BS25999 and other specific codes of practise.
Key features and benefits of Shadow-Planner include:● Hosted Software-as-a-Service - allowing predictable budgeting, minimal set up costs and no additional strain on your IT resources● Facilitates Speedier Recovery - in the case of an incident or disaster, avoiding downtime and the costs of lost business● Company-wide Resource - so that information is shared, avoiding data silos ● Fully International and Multilingual ● Support for all aspects of the BCM Lifecycle - including compliance with standards such as BS25999 and other industry specific codes ● Intuitive Interface - making it easy to use - even on an occasional basis, by personnel with no specialised IT or business continuity
knowledge● Task Management - system-generated reminders and automatic escalation using workflows, ensure the BC plan is kept up-to-date, with
an audit trail to demonstrate compliance● Browser-Based - quick and easy business-wide deployment means it's accessible always and everywhere● Strong Security - your data is safe, with security built into all aspects of the solution● Unique Data Mining - architecture allowing dynamic plans to be created on the fly using company or regional boundaries most suited to
the incident● Software Commissioning and Project Management - available from our highly qualified and experienced professional services team
Contact ICM Continuity Services to find out more about the unique benefits of Shadow-Planner Version 4.
Call 08448 63 00 63Email [email protected] icm-continuity.co.uk/shadow-planner
INONI LIMITED
UK: 0845 045 1171
INT: +44 (0) 1189 629 757
EMAIL: [email protected]
WEB: WWW.INONI.CO.UK
INONI provides BCM and risk governance solutions to organisations worldwide. We offer a unique blend of software and services that satisfy eachcustomer's individual and changing needs, providing an enduring solution.
INONI® is fully supported online software with a range of delivery and hosting options. It provides end-to-end coverage of the BCM Lifecycle with the following important features:
INONI® gives you access to powerful BCM and risk-related capabilities
INONI has been used since 2005 by the UK Financial Authorities and the BCI. Secure, reliable, flexible and proven, it is the software of choice formany organisations.
eBRP was the first to:● Introduce Process Modeling as a Risk Management concept.● Promote Dependency Mapping as a knowledge tool for Enterprise Risk Management.● License its software for Unlimited Concurrent Users.● Pioneer Technology Modeling as a means of mapping IT Applications and systems from their dependent components (hardware,
software, networks, etc.) to the Business Processes that depend on them.● Focus on Asset-based Risk Management (People, Process, Technology, Products & Services, Suppliers Supplies, Equipments
and Customers).
The thought leaders at eBRP Solutions developed eBRP Suite to provide support for organizations’ full Business Continuity and RiskManagement Program, including Risk Assessment, Business Impact Analysis, Plan Development, Testing, Exercising, Maintenance, IncidentManagement and Integrated Notification. The Process, Technology, Supply Chain & Organizational Modeling unique to eBRP Suite, providesFortune 500 organizations with a full decision support system facilitated by ‘what if’ analysis. While competing products are essentially planrepositories, eBRP Suite helps organizations’ understand, manage & monitor their exposures. eBRP Suite provides Business Continuity and Risk Management professionals the tools to meet the needs of today’s evolving business world, and the power to take their programbeyond ‘Business as Usual’. Providing for unlimited user access, web-based eBRP Suite gives you the power to know everything, see
everywhere and therefore be able to respond to anything.
eBRP Solutions230-7895 Tranmere DriveMississauga, ON L5S 1V9Phone: +1 905 677 0404Fax: +1 905 677 6677Email: [email protected]: www.eBRP.net
• Easy to use and maintain • Intuitive and real-time• Automated data collection and programmable workflow• Replaces unmanageable spreadsheets
• Standards-aligned, including BS25999• Reports and plans online and to MS Office• Quantitative analysis for better decisions• INONI® Adaptive Technology™ that fits your organisation
• BIA and Risk Assessment for one or many locations• Modular Continuity Plans• Pandemic Planning and Risk Management• Awareness-raising and education
• Time-lapse scenario simulation and testing• Self-assessment benchmarking• Real-time incident management• Supplier risk management
DC
rDNM
ver-MASTER
erver
ROD-PSHR
NePro
DBHR Application
Maintain Servers
Server
APP-BKUP-PSHR
Serv
AD-PROD
Critical dependencies for critical times
AVAILABILITY SERVICES
Keep your business continuity plans connected
Gaining a visual overview of the dependencies between business process and IT services makes managing your business continuity strategy faster and more effi cient. Should anything ever fail, you’ll be able to see the likely impact, and be clear on how to get everything back up and running as quickly as possible.
As part of SunGard Availability Services Continuity Management Solution (CMS), the dependency mapping feature gives you a simple way to track the network of hardware, applications and processes underpinning your IT. It’s just one example of how our purpose-built CMS system can help you manage your business continuity strategy more easily.
Gain an insight into all your CMS options with an engaging online clip at:
www.sungardcms.co.uk
SunGard and the SunGard logo are trademarks or registered trademarks of SunGard Data Systems Inc. or its subsidiaries in the U.S. and other countries. All other trade names are trademarks or registered trademarks of their respective holders.