0
20.0.10
Yokohama Patch 1, Yokohama, Xanadu Patch 4, Xanadu, Washington DC Patch 7, Washington DC Patch 5
Digital Operational Resilience Management is a common application used to store legal entities, branches, functions, third parties, third-party engagements, and contracts for reporting.
Key features of the Digital Operational Resilience Management include:
- Legal entities, branches, functions, third parties, third-party engagements, and contracts tables
- Export and import functionality to support Digital Operational Resilience Management features
New:
- 'Business Capability' has been added as a Function type that can be selected from a drop-down list on a Function record. The Business Capability records being referenced are from the cmdb_ci_business_capability table.
- The 'Business Capability' field is now available as a Function type option for a Function record on the Vendor Risk Management Workspace.
- Added the following new fields for Third parties and Third-party engagements "Type of additional identification code to identify the ICT third-party service", "Additional identification code of ICT third-party service provider", "Legal name of the ICT third-party service provider". Added "EUID" as a choice for "Type of code to identify the ICT third-party service provider's ultimate parent" and "Type of additional identification code to identify the ICT third-party service" for third parties and third-party engagements. If supply chain records, assessment records, or contract records are associated with a third party or third-party engagement that uses "EUID" code type, all relevant code type fields are auto-filled.
Fixed:
- Addressed the issue where the system was selecting incorrect choices when downloading a template and creating duplicate choices when uploading functions. Both the label and the category are used to find the correct choice to avoid duplicate choice options.
- The column code numbers have been updated to align with the updated regulatory requirements. Additionally, the template has been updated to include new fields, such as 'Type of additional identification code to identify the ICT third-party service', 'Additional identification code of ICT third-party service provider', and 'Legal name of the ICT third-party service provider'. 'EUID' has been included as a choice for 'Type of code to identify the ICT third-party service provider's ultimate parent' and 'Type of additional identification code to identify the ICT third-party service'.
The following applications need to be activated to use the Digital Operational Resilience Management application:
- GRC: Operational Resilience, and/or
- Third-party Risk Management
Permissions and roles:
Role required to install the app: System admin (admin)