eRMA v10 product brochure
Operational resilience, connected from impact to proof.
One platform to understand what the organization depends on, assess impact and risk, prepare and exercise recovery, respond to live events, and keep the evidence auditors ask for.
One model behind every resilience decision
Every feature reads the same dependency graph and the same recovery objectives. When a BIA is approved, a vendor fails or a storm crosses a region, the change shows up everywhere it matters.
Built for practitioners
Covers BC, DR and operational risk in one place, with the familiar vocabulary of RTO, MTPD, impact tolerance and severe but plausible scenarios.
Aligned to the standards
Follows ISO 22301:2019 and ISO/TS 22317, and supports impact-tolerance regimes such as DORA, PRA SS1/21 and FFIEC.
Evidence by default
Approvals, change history, exercise results and Recovery Proof are recorded as the work is done, not assembled at audit time.
Fast to adopt
Excel and CSV import, drag-and-drop dependency design and published entity definitions bring existing data in quickly.
1Understand the organization
Map what the organization delivers and everything that delivery depends on.
Business services
Services delivered to customers, each with an owner team, approval and links. RTO and criticality come from the BIA.
Processes and applications
Registers with owners, approval teams, link editors and notifications.
Locations, people, vendors
Contact and emergency details, reachability and organization hierarchy.
Dependency designer
Create links by drag and drop. Changes are staged, reviewed and saved together, and gaps are highlighted.
Impact map
Traces what fails upstream and downstream of any entity.
Map (GIS)
Site and asset positions, address lookup, boundaries and overlays.
2Assess impact and risk
The assessments set the recovery objectives and risk ratings that every other feature reads.
Business Impact Analysis
Impact rated per category over time against defined criteria; approved and reviewed. Group BIAs pass their values down to members.
BIA campaigns
Survey form editor, weighted scoring, survey claim and release, and live progress.
Risk register
A 5 x 5 likelihood x impact matrix, inherent and residual ratings, controls, treatments, actions, owners and sign-off.
Scenarios and coverage
Severe but plausible scenarios linked to risks. A high risk with no scenario or plan behind it is shown as a gap.
3Prepare: strategies, plans, exercises
The question every owner asks is: "If what I depend on fails, what are my options, and have they been proven to work?"
Strategy development
Ranked options per failure type, including a what-if view driven by a scenario. Strategy gaps are flagged.
Plans and templates
Plans built from templates, with procedures, a Gantt timeline, a table of contents, print preview, PDF and checklist packs.
Teams
Response and recovery teams with members, duties and access.
Exercises
Each exercise tests a scenario as an exercise incident, with a measured result against RTO for every entity, evidence and a report.
4Respond and recover
Incident Management takes an event from first alert to a closed record with evidence. The dependency graph and recovery objectives show which services are at risk and how much time is left.
Services affected
Lists the services hit, their owners and RTOs, with an enterprise-wide banner when the impact is broad.
Live command picture
Tasks, issues, messages and a decision log, updated live for every viewer, with pause and close.
Roll call
Staff safety checks, with "need help" responses followed up.
Map watch and incident from map
Live hazard feeds and alerts near watched sites. Draw a footprint and open an incident with the exposed assets already filled in.
5Govern and operate the programme
Keeps the programme current, controlled and auditable without adding administrative work.
MyWorkspace
A personal list of what needs attention: reviews due, approvals, incident tasks, exercises and BIA surveys.
Approvals and change log
Approval teams on records, a full-control rule, edit history and snapshot change logs.
Security Access Manager
Team-based owner, recovery, read-write and read-only grants with approve rights, set per record or in bulk.
Employee Kiosk
Staff correct their own profile and contacts, set their location and schedule, and see their teams, duties and access.
Data management
Excel and CSV import, export and round-trip packs with dry runs, update mode and published entity definitions.
Outbound guard
One control point and call log for every external connection.
Where eRMA v10 supports ISO 22301:2019
| Clause | Requirement | eRMA v10 features |
|---|---|---|
| 8.2.2 | Business impact analysis | BIA, group BIA and inheritance, BIA campaigns |
| 8.2.3 | Risk assessment | Risk register, scenarios, risk coverage, map concentration |
| 8.3 | Business continuity strategies and solutions | Strategy development, strategy gaps, teams |
| 8.4 | Business continuity plans and procedures | Plans and templates, incident management, roll call, notifications |
| 8.5 | Exercise programme | Exercises with per-entity results against RTO |
| 9.1 / 10 | Evaluation and improvement | MyWorkspace, incident review, Recovery Proof, approvals and change log |
See your own dependencies, objectives and plans in one place.
Ask for a demo built around a business service you care about. The demo follows it from the BIA, through strategy and plan, to an exercise and a live incident.