Getting started
Getting started with Business Continuity Planning
What Business Continuity Planning is for, who uses it, what you need before you start, and your first steps.
Applies to Business Continuity Planning as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Moraph licenses, implements and runs Fusion Risk Management for your business continuity program. We configure the platform for business impact analysis, continuity and disaster recovery plans, and exercise records in line with FFIEC expectations, then administer it, keep plans on their review cycle and prepare the evidence your examiners ask for. Your organization keeps every decision about recovery priorities, plan approval and risk acceptance.
What it is for
Many institutions keep continuity plans in documents that drift out of date as staff, vendors and systems change. Business impact analyses are refreshed irregularly, recovery times on paper do not match what IT can actually deliver, and test results live in meeting notes and spreadsheets. When examiners ask which critical services were tested, what failed and whether the issues were fixed, the answer takes weeks to assemble.
- Plans and contact lists go stale between annual reviews
- Recovery objectives in business plans do not match IT recovery capability
- Exercise results and remediation are tracked by hand, if at all
- Evidence for examiners and the board is rebuilt from scratch each cycle
Who uses it
- Business continuity and operational resilience managers at banks and credit unions
- Business-line plan owners who keep their unit's plan current
- IT disaster recovery leads responsible for application and infrastructure recovery
- Executives and crisis management teams who lead the response to a disruption
- Internal audit and examiners reviewing the continuity program
Before you start
- Your organization uses Business Continuity Planning as a managed platform from Moraph, under an agreement that covers it.
- Licences for Fusion Risk Management, bought through Moraph or under your own agreement with the vendor.
- A Moraph account in your organization for each person who works with Moraph on the service.
- Named technical and security contacts, recorded in the Moraph Portal.
Steps to get started
Agree the scope of the managed service for Business Continuity Planning with Moraph, including which environments and teams it covers.
Name your administrators, technical contact and security contact in the Moraph Portal under People and access.
Review the configuration baseline Moraph proposes for your regulations, and record any changes you need.
Confirm how users will sign in, through your identity provider where the platform supports it.
Agree the pilot group and the cut-over plan with your Moraph delivery lead.
Where to go next
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.