BCM small encyclopedia directory

  • The importance of enterprise and individual certification to BCM system construction
  • In what ways has BCM improved during the 10 years
  • A whole body or a whole new body
  • BC has been redefined and DR has not changed. Is your BCM in place?
  • New Application Scenario of Trinity in Enterprise BCM Construction
  • How will artificial intelligence, big data, NLP and others combine with BCM in the future
  • The impact of digital resilience and cloud native on BCM
  • In the future, how to help enterprises to get a head start in the BCM field

1. Is BCM really only concerned with business continuity?

The COVID-19 outbreak in early 2020, the most significant “black swan” event in recent years, poses a huge challenge to the business continuity capacity of various industries. Enterprises have begun to pay attention to the major disaster response measures, and how to systematically improve the emergency response capacity. Although financial institutions in China have invested a lot of resources in IT system construction in recent years to build disaster recovery centers, there are still problems such as paying more attention to construction than to guarantee, and difficulty in business continuity management reflecting construction. Even though the disaster preparation system is well constructed, since no systematic drill has been done in daily work, when problems really occur, the system is still not easily switched over, for fear that it will not be able to cut back after the switch, resulting in heavy losses. Therefore, from the perspective of sorting out, the current business continuity management of China’s financial industry is still at the technical level of IT system disaster recovery, and no business continuity management system aiming at comprehensive business recovery has been established.

“Five-year plan” in information science and technology full name into the risk management system, commercial Banks should not only strengthen the credit risk management, market risk management to strengthen the operational risk management, emphasis process management, establish integrated management platform (including system construction operations center, development center system and security system construction), Strengthen the horizontal cooperation capability of the operation and maintenance, development and security centers. In this context, the construction of a new round of disaster preparedness management to improve IT emergency response capabilities and compatible hybrid cloud infrastructure is under way.

Business continuity management includes the provision of timely and appropriate emergency response in the event of an emergency; Protecting lives and ensuring safety; Reduce the impact on the business; Restore key business functions; Reduce chaos in times of disaster; Ensure the viability of the enterprise; “Up and running” quickly after a disaster. Implementing BCM not only ensures business continuity, but also benefits from all aspects. In the long run, the value of BCM is not just a tool for enterprises to face disasters. From the perspective of business, it supports the strategic goals of the organization, creates competitive advantages for the organization, protects and improves its reputation and reputation, and promotes organizational resilience. From a financial point of view, it is beneficial to reduce legal and financial risks and direct and indirect costs of production interruptions. From a stakeholder perspective, it protects life, property and the environment, takes into account the expectations of stakeholders, and provides confidence in the organization’s ability to succeed; From the perspective of internal process, it improves the ability of the organization to maintain effective during the interruption period and the active control of risk, and solves the problem of operational vulnerability.

Therefore, the BCM system construction should be based on the business perspective and run through the whole process of business continuity, monitoring and analysis, IT emergency response and disaster preparedness management.

2. Discussion on the new application scenarios of the Trinity in the construction of enterprise BCM

The current BCM system still exist many problems, in banking, for example, business continuity requirements analysis involves multiple departments, multiple application system, information gathering is various, the calculation formula for difficulty, statistical analysis, communication, time is long, and once the business change, business continuity disaster related index update will seriously lagging behind the frequency of the data center adjustment; Long preparation period of business continuity drill, complex drill process, high risk and difficulty of drill handover, decentralized managers, low automation/intelligence, no unified management tools and views, passive handover management, RTO cannot be guaranteed, and cost is difficult to control; In the decision-making process of disaster recovery handover, database replication, storage replication, operator network, data and configuration consistency and other aspects cannot be monitored. Although the leadership and command level of the Business Continuity Committee are involved, the decision-making has no basis and no effective data support.

“Trinity” organizational resilience solutions are designed with reference to ISO22301, ITIL, ITSS, GBT20988 and other standards, norms and best practices, to establish BCM system, IT emergency system, use management system to achieve efficiency; Combine big data and AI technology to provide advanced IT operation and maintenance platform, help customers to establish IT intelligent operation and maintenance system; Assist customer to design disaster recovery system and use disaster management system for system management.

“Trinity” of the solution changed the traditional way of thinking, get rid of the rely solely on artificial way, provide flexible management tools, has realized from the demand analysis, exercise and treatment of integration, monitoring, switch all life cycle management, each link to improve input quality standards means, curing process, the output content clearly, The barriers between business continuity management, disaster preparedness management and monitoring operation and maintenance are broken down to form a loop and realize a trinity prevention and control system, which runs through the unified management of the whole process of IT risks before, during and after the event.

  • Through BCM system, it can realize the systematic management of online business impact analysis, risk analysis, business continuity strategy, plan and contingency plan. Agile construction of emergency response mechanism, automatic implementation of event emergency disposal, the system customized mobile phone APP for off-site linkage, to achieve the same effect with the system emergency check-in and step set linkage; Simplify the whole process of the drill, realize the visualization, automation and intelligence of the drill process, and normalize the drill work; The system has built-in standard off-site regulatory statements of the People’s Bank of China and the China Banking and Insurance Regulatory Commission, which can realize the online filling of information technology governance, business continuity management and other relevant situations, and can flexibly increase regulatory indicators and data collection according to the new regulatory requirements, effectively solving various problems encountered in the filling process of customers. Through the structured maintenance of the report template, the company provides functions such as intelligent filling assistant and automatic generation of reports according to the template to assist customers to achieve regulatory standards and build a comprehensive and compliant business continuity management system.
  • The disaster preparedness management system realizes scene management, drill management, disaster switching, emergency command, process management, capacity assessment and other services, and provides data center application-level disaster recovery automation switching and management capabilities. In the process of embodiment of business continuity, disaster combined with global integration of the environment monitoring and scenario plan custom, disaster drill process routing management, switching process automation implementation, combined with the visual view command, form unified disaster recovery management platform, and combining the business perspective comprehensive assessment on a regular basis, continuous improvement, to fully promote the IT value and business continuity, It enables enterprises to quickly acquire the capability of disaster preparedness management and business recovery on demand, reduce the cost of disaster preparedness construction and management, ensure the safety of business recovery process, reduce the risk of misoperation, and quickly remove emergencies through standard emergency procedures to reduce the impact and loss brought by them.
  • Intelligence operations platform including monitoring management, operations management, business management, automated operations, intelligence analysis, IT emergency management, and other functions, intelligent monitoring technology, to multi-level and vertical data centers of various kinds of IT resources, visual monitoring and management, provides the basic data support for the business management center, to ensure safe, stable and efficient operation of the business system; Real-time perception of business and system operating state from the business perspective, to achieve two-way driving between business and IT, to ensure business continuity and continuously improve business efficiency; It can meet the requirements of automated patrol inspection, automated deployment, automatic fault handling, batch job processing, automated release and batch deployment of naked machines, and has rich operation and maintenance operations and perfect permission control, effectively standardize the operation process, reduce the risk of misoperation and improve the efficiency of operation and maintenance.

The “Trinity” solution of Tongchuang Yongyi can effectively support the comprehensive needs of customer awareness cultivation, sand table exercise and practical operation and landing. Combined with professional consulting and design services in various fields, we will build a business continuity guarantee system for the financial industry.