The SeCube BCM module is a standalone business continuity management software component designed to support the entire lifecycle of BCM activities. Supports the planning, maintenance, review, and testing of corporate resilience and recovery strategies.

Business Continuity Management lifecycle

The Business Continuity Management (BCM) module is designed to ensure that the company is prepared for risk events that, if they occur unexpectedly, could result in significant business losses; therefore, conscious planning and preparation for such events are fundamental to the company’s business operations.

The SeCube BCM module is designed to support the entire lifecycle of business continuity management within a unified system (in accordance with the ISO 22301 standard):

  1. With risk analysis (RISK module) and business impact analysis (BIA).
  2. By defining recovery time objectives and comparing those with our plans.
  3. Through the designing of BCP and IT DR and continuity plans for emergency situations.
  4. By planning the preparation tasks during business-as-usual periods and checking their implementation.
  5. Maintenance and periodic review of BCM plans, including change management and validation monitoring functions.
  6. By testing BCM plans.
  7. By supporting the implementation of plans in the event of an emergency with simulation functions.

The SeCube software is capable of integrating and managing in a unified manner

  • both business continuity planning (BCP) and
  • IT technology/service continuity and disaster recovery planning (IT DRP).
Business Continuity Planning (BCP)

The main focus of Business Continuity Planning is planning for the continuity of business or production processes, taking into account their resource dependencies. During business continuity planning, we can develop replacement and workaround solutions for the loss of resources supporting business or production processes (whether technological, data-related, human, or facility-related), and we can define alternative business or production processes. For alternative processes, we can define the actions required to implement them and the tasks necessary to return to normal operations once the emergency has passed.

The primary target group for BCP planning is typically the departments responsible for executing business and production processes.

IT Service Continuity and Recovery Planning (IT DRP)

The main focus of IT Service Continuity and Recovery Planning (IT DRP) is to plan for the recovery and continuity of the services, IT systems, and key resources used by business and production processes, taking into account the needs of the processes they support. The goal here is also to restore the operation of business processes, but the focus is always on ensuring the fastest possible emergency provision and restoration of the necessary resources, as well as service continuity.

The primary target group for service recovery (IT DRP) planning is typically the departments responsible for the resources serving business and production areas, as well as IT operations departments.

Recovery time objectives

Recovery time objective values for resources can be evaluated and determined manually and/or calculations using the results of the business impact analysis (BIA function).

  • RTO – Recovery Time Objective
  • MTPD – Maximum Tolerable Period of Disruption
  • RPO – Recovery Point Objective
  • MBCO – Minimum Business Continuity Objective

The recovery capability of the procedures defined in the BCM plans are compared and continuously monitored with the recovery time objectives, with audit ready reports.

BCM Planning and maintenance

A key feature of the SeCube BCM module is the detailed planning of BCM plans and ensuring they remain up to date, with delegable responsibilities and access control for a large number of users.

Key Capabilities and Business Benefits

  • Flexibly Configurable Plans
    The number, scope, resource coverage, and scale of BCM plans can be flexibly managed to align with the company’s existing modeling practices. Plans can therefore include:

    • Continuity and redundancy planning of business/production processes, scheduling of recovery steps, and planning of alternative processes (BCP)
    • Disaster management and recovery plans
    • Emergency and recovery planning for IT resources and services, and definition of recovery actions
    • Resilience scenarios
    • Maintenance plans
    • Incident management plans
    • Other organizational plans, e.g., pandemic plan
  • Process, IT architecture and technology operation modeling
    In the Inventory function, the normal (business-as-usual) operational architecture of resources and business processes can be defined, and their interdependencies can be visualized in a clear and transparent manner, thereby supporting BCM planning.
  • Automated Time-Objective Calculations (RTO, RPO, MTPD)
    Business time objectives can be derived directly from the Business Impact Analysis (BIA) or manually reviewed and refined.
    Additionally, the system continuously compares the actual recovery capabilities provided by BCM plans (ETR – Execution Time to Recover) with the expected time targets, in a reportable format.
  • Visual planning canvas
    The structure of IT services and/or the relationships, operations, and dependencies of business processes can be visually designed and modeled, thereby enabling the definition of the scope of resources for the BCM plan, complete with visual incident simulations.
  • Emergency Response Actions
    Recovery, continuity, and alternative response actions—which must be carried out during an emergency—can be created with a level of breakdown and detail tailored to specific needs.
  • Interactive Scenario Planning
    Scenarios represent emergency or risk events, or recovery methods, to which we can assign the emergency actions from BCM plans and plan their execution using interactive Critical Path–PERT visualization method.
  • Standby resources management
    In the SeCube BCM module, standby items and reserves (cold/hot) can be tracked and managed.
  • Intelligent Plan Maintenance, Validation and actuality checks
    The software automatically monitors the currency of plans and sends notifications to responsible parties if an event occurs that jeopardizes the plans’ operability. Examples include: plan design logic errors, relevant inventory changes, insufficient current status of preparation actions, time target changes, and review and test results.
  • Review and Version Control
    Managing the cyclical review of plans and maintaining a historical, audit-ready record of version statuses, along with associated test reports.
  • Custom Attachments and Notification Lists
    Management of custom attachments and notification lists (including third parties)
  • Exporting BCM Plans
    Plans can be exported to DOCX format with a dynamic table of contents, including images and diagrams.
Preparedness Period Management

Certain elements of BCM plans may rely on preparedness, business–as–usual, and standby actions and resilience controls to ensure that the plans function effectively during an emergency. The system supports and tracks these tasks with a comprehensive task management feature and provides status updates via email notifications.

Test management

Tests can be created for managed BCM plans; test activities can be planned and managed, and test reports can be generated. The content of the tests can be freely assembled from the plan’s elements, and actual execution times can be measured during execution. The system supports test tracking and the creation of audit-ready test reports.

Crisis Management and Ad Hoc Decision Support

In the event of an emergency, SeCube’s simulation engine facilitates rapid modeling and immediate access to relevant plans. It enables the quick development of ad-hoc recovery scenarios based on previous plan elements, effectively supporting executive decision-making.

What happens if the production SeCube system is unavailable? The entire project database can be exported as a single file and immediately launched in any backup environment (e.g., a Kürt SeCube partner system), in addition, Word exports of the plan may be available from time to time.

BCM results

As a result of the work performed in the software, audit-ready documentation can be generated at the click of a button:

  • Detailed BCM, BCP, IT DR and service continuity plans, can be exported into MS Word documents
  • Structured test plans and test reports
  • Management of preparation actions during business-as-usual periods
  • Recovery time objective reports

BCM

    top