Resilience is not a document. It is a live system.
The FCA's PS21/3 rules require firms to identify important business services, set impact tolerances and test against severe-but-plausible scenarios. Most firms satisfy the letter of the rules but not the intent, because the mapping lives in a static document that goes stale. Karvin builds resilience into ServiceNow so it stays current as the estate changes.
Six pillars of operational resilience.
Important Business Service Identification
Identify and map services whose disruption could cause harm to consumers or market integrity.
Impact Tolerance Setting
Define the maximum tolerable disruption for each service, tested against actual recovery capability.
Scenario Testing
Severe-but-plausible scenario testing, scheduled, evidenced and linked to remediation.
Third-Party Dependency Mapping
Link vendor risk records directly to the business services they support.
Governance & Board Reporting
Live dashboards for IBS status, tolerance breaches and remediation progress.
Regulator-Ready Evidence
Evidence packs produced automatically from live ServiceNow records, not static documents.