Skip to content

Scope in BCM🔗

The Scope defines which part of your organisation the respective BCM project covers. Only the objects linked within the scope are considered in the BIA, risk management, and plans.

Typical examples of scopes:

  • "Security 2025 – core business processes"
  • "Production Site A"
  • "Critical IT services for customers"

Purpose of the Scope🔗

A well-defined scope helps you achieve:

  • a clear delineation of which processes and resources are considered,
  • focused BIA and risk assessments,
  • better traceability for audits and certifications.

Creating a Scope🔗

  1. Open the BCM module.
  2. Navigate to the Scope tile.
  3. Create a new scope or select an existing one.
  4. Assign:
    • a unique name,
    • a description,
    • optionally a responsible person.

Linking Processes and Resources🔗

Within a scope you can link the following objects:

  • Processes
  • Infrastructure
  • Hardware
  • Software
  • Service Providers
  • Data
  • Personnel

Steps for linking (example: Processes):

  1. Open the scope.
  2. Select the Processes section.
  3. Click Link Processes.
  4. The dialog displays all processes that are not yet linked to this scope.
  5. Select one or more processes.
  6. Confirm your selection (depending on system configuration, with or without dependencies).

The same logic applies to Infrastructure, Hardware, Software, Service Providers, Data, and Personnel.

Multi-selection

You can select multiple entries in the selection dialog at once and link them in a single step — this saves a lot of time, especially with larger volumes.

Leveraging Dependencies🔗

If dependencies between processes and assets have already been maintained in the inventory (e.g. input/output assets, process chains), the BIA and risk management benefit from this:

  • In the BIA you can quickly see which resources a process depends on.
  • You can mark SPOFs (Single Points of Failure).
  • Strategies and plans can be targeted at critical resources.

Impact of the Scope on Other BCM Areas🔗

  • In the BIA, only processes within the selected scope are assessed.
  • In Risk Management, only resources belonging to the scope are displayed.
  • In Strategies, Continuity Plans, and Communication Plans, the scope is used as a filter.
  • In Audit Management, audits can be planned and evaluated on a scope-specific basis.

Therefore, make sure the scope is always up to date, especially when processes are added or removed from the scope.