The Insights Report Dashboard is the hub for Catalyst’s reporting features. This dashboard displays at a glance three charts to provide understanding about organizational risks as well as a measurables section that gives the overall health of the business continuity program.
Risks by Type
The Risks by Type shows a pie chart that displays the percent of each risk in each category for the entire organization. You can click on the chart to be directed to the Risks by Type page where clicking each slice of the pie chart will allow you to drill down and see the individual risks that make up each slice of the pie chart.
The Rating Distribution chart shows the number of risks grouped in 10-unit increments based on Risk Ratings. This chart gives you a visual look at the span if risk ratings within your organization. Clicking the Rating Distribution table will take you to the Rating Distribution page where you can click each level and see the individual risks that factor into each section.
Rating Scatter Plot
The Rating Scatter chart shows a heat map style view of risks plotting the likelihood and impact rating. The two ratings are multiplied to create the risk rating, meaning the chart visualizes the risk rating. Clicking the Rating Scatter Plot table will take you to the Rating Scatter Plot page where you can click the circles to see the individual risks that factor into each circle.
BIAs tracked by whether they have been approved and when they were last approved. The BIA Rating awards 100 points if you have an approved BIA and 0 if you have a BIA lacking approval.
Plans are tracked by whether they have been approved and when they were last approved. The Plan Rating awards 100 points if you have an approved Plan and 0 if you have a Plan lacking approval.
Capability is measured by looking at the Requested RTOs of a company and measuring to see if they can be met. This is done by taking what has been requested, what has been committed to, and what has been proven through exercises. Insights looks at both the Recovery Time Objective and the Recovery Point Objective (also known as Data Loss Tolerance) to determine the score.
Not everything in an organization requires the Requested, Committed, or Proven RTO fields to have a value. Activities have a Requested RTO, Committed RTO, and Proven RTO. Departments do not have any of these because they roll up all of their individual activities. Products only require a Committed RTO and Proven RTO.
Catalyst’s tracking system then calculates the Recovery Capability Rating. If an item has a Requested RTO, the metric tracks whether the Committed RTO is lower than the Requested RTO. If it is, it is given 100 points. If the Requested RTO is more aggressive than the Committed RTO, it is given 0 points.
The Exercise score is measured and designed around the idea of regularly exercising plans. Exercise Requirements can be set for plans by assigning tags to each plan. You can then set an exercise type for each tag as well as define the frequency of the exercise.
Catalyst tracks the exercise completions and due dates. A plan receives 100 points if it meets all exercise requirements and zero if it fails to meet any exercise requirements.
The overall score is then calculated by averaging the BIA, Plan, Capability, and Exercise scores.