Business Continuity Management (BCM)

Overview

The Business Continuity Planning (BCP) module in AQUILA provides an easy way to document critical business functions, assess downtime impact, and define recovery needs. It also helps map dependencies, assign team roles, and keep track of contacts. With these tools, users can ensure their organization is prepared for disruptions and can recover operations quickly.

Key Features

• Document project details such as description, goals, scope, and key milestones.

• Track Business Continuity Plan (BCP) maturity with visual dashboards and detailed progress views.

• Perform Business Impact Analysis (BIA) to measure financial, compliance, and operational risks.

• Define Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for downtime and data recovery.

• Map dependencies across IT systems, facilities, suppliers, people, and processes with backup options.

• Assign teams and roles using RACI (Responsible, Accountable, Consulted, Informed) for clear accountability.

• Record both primary and alternate contacts to ensure communication continuity.

• Add and manage team members with role-based details and disaster declaration authority.

To navigate to Unified Compliance Blueprint module, please follow the instructions below:

Step 1: Log in to CyTech - AQUILA: usdc.cytechint.io

Step 2: Click on Cyber Resilience

Figure 1. Overview

Step 3: Press the ">" icon and Choose Business Continuity Management (BCM)

Figure 1.1 Business Continuity Management (BCM)

Step 4: Hover into leftmost panel to view all the Risk Management sections. This Process is applicable in all navigating into a Module.

Figure 1.2 Cyber Resilience Navigation

Project Charter 

• This section shows the main details of each project, such as the project name, manager, sponsor, start and end dates, approver, reviewer, and current status. Projects that still need evaluation are marked as For Review. To see full details of a project, click the eye icon beside it.

Figure 2. Project Charter

Create Project Charter 

• In this section the user can input the details of the project charter they want to add.

Figure 2.1 Create Project Charter

Business Continuity Plan Pilot

1. Project Details

This section shows a full view of the selected project. It includes the Project Description, Goals, and the items that are In-Scope or Out-of-Scope. The Project Overview panel lists key details such as the manager, sponsor, contacts, dates, and approvals. On the right, the Key Milestones and Activities panel displays the project timeline, showing each phase (initiation, planning, training, execution, and closure) with its start and end dates.

Figure 2.2.1 Project Charter - Detail Dashboard

2. Business Continuity Plan Maturity

This section gives a visual view of the organization’s Business Continuity Plan (BCP) progress. The Overall BCMS Maturity gauge shows the total maturity percentage, while the Section-by-Section chart breaks down results for areas like scope definition, business impact analysis (BIA), incident response, and governance. Below, the Core BCP Maturity panel highlights progress in key areas based on ISO 22301 standards, and the Additional Requirements panel tracks supporting areas such as crisis management, BCP testing, and documentation.

Figure 2.2.2 Project Charter - Business Continuity Plan Maturity

3. Business Continuity Plan Team

This section lists all team members in the project, along with their roles, team, responsibilities, and contact details. Each entry shows the primary contact, their title, email, and RACI designation (Responsible, Accountable, Consulted, Informed). To add a new member, click the Add Members button in the upper-right corner.

Figure 2.2.3 Project Charter - Business Continuity Management Team

4. Business Impact Analysis

This section shows how critical business functions are affected by downtime. The Asset section lists key assets with their owners and descriptions, while the Impact Analysis panels display effects such as goodwill loss, compliance issues, health and safety risks, and financial costs (e.g., revenue loss, productivity impact, operating costs, and penalties). The Total Impact of Downtime Summary combines these into an overall risk and cost estimate.

Below, the Recovery Objectives Analysis helps measure resilience. The RTO (Recovery Time Objective) table compares target vs. actual downtime, while the RPO (Recovery Point Objective) table compares target vs. actual data loss. These help identify gaps in recovery planning.

Figure 2.2.5 Project Charter - Business Impact Analysis

5. Process and Dependencies

The Process and Dependencies section allows users to document and review the essential resources required to sustain business operations. Dependencies are grouped into categories, each showing primary and alternative options for resilience.

• End User Devices – Lists workstations, PCs, and related equipment, with fallback alternatives.
• IT Applications, Data, and Services – Captures critical IT systems, data sources, and services, including contingency measures such as disaster recovery.
• Facility Location and Requirements – Identifies operational sites (e.g., offices, warehouses) and backup facilities.
• Suppliers and External Services – Details third-party vendors and service providers, along with their alternate suppliers.
• People – Records key personnel roles and responsibilities, with designated alternates.
• Additional Process Inputs and Requirements – Tracks supporting inputs such as control lists, tools, or documentation, with offline or backup options.

Each section provides asset details, primary resources, and alternative resources. Pagination controls are available to navigate records efficiently.

Figure 2.2.6 Project Charter - Process and Dependencies

To navigate to the Business Continuity Teams and Roles sub-module, click the left-side panel where Risk Management is located, then hover over Business Continuity Management. Risk Management (Domain) → Business Continuity Management (Module) → Business Continuity Teams and Roles (Sub-module).

Business Continuity Teams and Roles

• This section allows users to define and assign roles and responsibilities across different areas that support business continuity and resilience. Each team card provides a description of its function, and users can view team details by selecting View Team.

Figure 3. Business Continuity Teams and Roles

Team Roles

• This section shows the team members of this team, their roles, responsibilities, primary contact, primary contact titles, primary contact email, Responsible. Accountable. Consulted. Informed (RACI). The user can also add a team member through "+ Add Member" button.

Figure 3.1 Business Continuity Teams and Roles - View Teams

Add Team Member

• The user can add their team members through here and input any necessary information about the new team members.

Figure 3.2 Business Continuity Teams and Roles - Add Members

Conclusion

The Business Continuity Management (BCM) module in AQUILA helps you prepare for disruptions by identifying your critical business functions, checking the impact of downtime, and tracking costs or risks. It also lets you set recovery targets (RTO and RPO), map out dependencies like systems, suppliers, people, and facilities, and assign clear team roles with both primary and backup contacts. Altogether, it gives you a straightforward way to make sure your organization can keep running smoothly and recover faster when issues happen.

If you need further assistance, kindly contact support@cytechint.com for prompt assistance and guidance.