# Operational Resilience Software > Swiss GRC bietet mit der SwissGRC® Platform eine Software für Operational Resilience. Unternehmen, Finanzinstitute und Verwaltungen definieren wichtige Geschäftsservices, setzen Impact Tolerances, bilden Abhängigkeiten ab und weisen Szenariotests nach. - URL: https://swissgrc.com/en/operational-resilience-software/ - Publisher: SwissGRC® - Published: 2025-08-21 - Last updated: 2026-10-07 ## Key facts - Die SwissGRC® Platform verknüpft jeden wichtigen Geschäftsservice mit Prozessen, Personen, Systemen, Standorten, Dienstleistern und Daten. - Die Operational-Resilience-Funktion umfasst sechs Bausteine: Service Mapping, Impact-Tolerance-Management, Resilience Assessments, Szenariotests, Regulatory Alignment und kontinuierliche Verbesserung. - Operational Resilience nutzt dieselbe Datenbasis wie BCM, ISMS, TPRM, internes Kontrollsystem und Risikomanagement, ohne doppelte Datenerfassung. - Szenariotests werden geplant und durchgeführt, Ergebnisse und Erkenntnisse werden dokumentiert, und sie dienen als Nachweis, dass Toleranzen eingehalten werden. - Die Seite nennt DORA, FINMA 2023/1, die Basel Principles, ISO 22301 und NIS2 als Standards und Aufsichtserwartungen, auf denen die Lösung aufbaut. - Laut Seite gilt FINMA-Rundschreiben 2023/1 seit dem 1. Januar 2024, und die Übergangsfrist von bis zu zwei Jahren für das Kapitel zur operationellen Resilienz ist abgelaufen. Operational Resilience # Resilience per discipline, or per business service? Identify important business services, set impact tolerances, map dependencies and test them in scenarios: Swiss GRC makes your operational resilience evidenced. [Request a demo](https://swissgrc.com/en/operational-resilience-software/#kontakt) [Explore features](https://swissgrc.com/en/operational-resilience-software/#funktionen) Trusted by leading organizations What makes the difference ## From separate disciplines to a view of the service BCM, ISMS, TPRM and risk management are well established. Operational resilience asks what they mean together for one specific business service. The common starting point ### Silos well run, service untested Every discipline is documented properly on its own. Whether a critical service stays within its impact tolerance only becomes clear during the event. - Important business services never formally defined - Dependencies on IT, people and providers scattered - Impact tolerances missing or never tested - Evidence only comes together for the supervisory review With the SwissGRC® platform ### One service, every dependency evidenced Every important service stays connected to processes, people, systems, sites, providers and data. Impact tolerances are defined, tested and evidenced at any time. - Important services defined with an impact tolerance - Dependencies mapped across every resource type - Scenario tests with documented outcomes - Same basis as BCM, ISMS, TPRM and risk management The SwissGRC® platform at a glance ## Your operational resilience, in one place Map, set tolerances, assess, test and improve. Six building blocks that work on top of each other. 01 ### Comprehensive service mapping Identify and document key business services with all their critical dependencies, down to the individual resource. - Services linked to processes, systems and providers - Complete view of the service chain - Vulnerabilities and single dependencies made visible 02 ### Impact tolerance management Define, monitor and test clear disruption thresholds so that unacceptable harm does not occur. - Impact tolerance per important service - Tolerance compared against tested recovery - Breaches identified early 03 ### Resilience assessments Identify weaknesses in critical resources and processes early and prioritise corrective measures. - Assessment per resource type - Actions with clear ownership and deadline - Prioritised by impact on the service 04 ### Scenario testing Test resilience under severe but plausible conditions and validate your recovery strategies. - Plan and run scenarios - Results and findings fully documented - Evidence that tolerances are being met 05 ### Regulatory alignment Governance, regular reviews and documented processes that match supervisory expectations. - Self-assessment as a living document - Evidence stored audit ready - Analyses for supervisors and the board 06 ### Continuous improvement Insights from incidents, tests and assessments feed back into strategies and actions. - Findings turn into tracked actions - Tolerances and mapping stay current - Maturity raised measurably Built on **recognized standards and supervisory expectations** for operational resilience, from Switzerland through the EU to the United Kingdom. DORA FINMA 2023/1 Basel Principles ISO 22301 NIS2 Regulatory status 2026 ## Supervisors look closer, your evidence holds up Operational resilience has moved from a statement of intent to an audited obligation. These four developments shape 2026. EU DORA Applicable since January 2025. On 18 November 2025 the European Supervisory Authorities designated the first critical ICT third-party providers and placed them under direct oversight. Switzerland FINMA Circular 2023/1 In force since 1 January 2024. The transitional period of up to two years for the operational resilience chapter has expired. UK PRA and FCA operational resilience Since 31 March 2025 firms must remain within their impact tolerances. The FCA criticises incomplete third-party mapping and thin testing evidence above all. EU CER Directive Member States complete the designation of critical entities during 2026. Resilience requirements therefore reach organisations well beyond financial services. Standards and frameworks See which standards, laws and frameworks the platform covers in our overview. [View standards and frameworks](https://swissgrc.com/en/standards-frameworks/) Advantages and added value ## More resilience, fewer blind spots Comprehensive and simple at the same time. That drives adoption and makes resilience measurable. #### Part of one connected GRC system Operational resilience uses the same basis as BCM, ISMS, TPRM, ICS and risk management, with no duplicate data entry. #### Service substitutability Assess alternative channels and providers so that critical services stay available even during a major disruption. #### Data resilience Safeguard the confidentiality, integrity and availability of your most critical information, structured and unstructured. #### Recovery planning Recovery plans that bring critical services back within the defined impact tolerances. #### Regulatory self-assessment Review your own resilience practice regularly and evidence it as a living document. #### Continuous governance Keep important services, tolerances and responsibilities current as your risk landscape evolves. Contact and demo ## Experience the platform in a live demo In a personal live demo we walk you through the solution, from service mapping to evidence, and answer your questions. [Request a demo](https://swissgrc.com/en/demo) [Contact sales](https://swissgrc.com/en/sales) ## Frequently asked questions ### Was ist Operational Resilience Software? Die Software von Swiss GRC bildet wichtige Geschäftsservices mit allen Abhängigkeiten ab, legt Impact Tolerances fest und dokumentiert Tests. So lässt sich nachweisen, dass kritische Services innerhalb ihrer Toleranz bleiben. ### Welche Funktionen bietet die SwissGRC Platform für Operational Resilience? Sie bietet sechs Bausteine: Service Mapping, Impact-Tolerance-Management, Resilience Assessments, Szenariotests, Regulatory Alignment und kontinuierliche Verbesserung. Die Bausteine bauen aufeinander auf. ### Welche Regulierungen und Standards deckt die Lösung ab? Die Seite nennt DORA, FINMA 2023/1, die Basel Principles, ISO 22301 und NIS2. Eine Übersicht aller abgedeckten Standards und Frameworks bietet die separate Seite zu Standards und Frameworks. ### Wie hängt Operational Resilience mit BCM, ISMS und TPRM zusammen? Die Operational Resilience nutzt dieselbe Basis wie BCM, ISMS, TPRM, ICS und Risikomanagement. Dadurch entfällt doppelte Datenerfassung. ### Wie lässt sich die Lösung von Swiss GRC kennenlernen? Swiss GRC bietet eine persönliche Live-Demo an. Darin wird die Lösung vom Service Mapping bis zum Nachweis gezeigt, und Fragen werden beantwortet.