Operational Resilience

Service Design: The Foundation of Business Resilience

Resilience cannot simply be added after a service goes live. Good service design makes the dependencies, ownership, controls and recovery needs behind business services visible from the outset.

Good service design is not simply about introducing new technology into an organisation. It is about understanding how a business needs to operate, what it depends upon, and what must be in place for its services to remain reliable when circumstances change or things go wrong.

That distinction matters.

Resilience should be designed in, not added afterwards

Too often, resilience, continuity, crisis management and regulatory compliance are treated as separate activities. Teams create plans, policies and governance structures around services that have already been designed and implemented.

The problem is that resilience cannot simply be added afterwards. If the underlying service has unclear ownership, poorly understood dependencies, weak supplier arrangements or inadequate recovery capability, no amount of governance documentation will make it genuinely resilient.

Service design addresses the problem at source.

A well-designed service starts with the business outcome and considers what must be in place to keep delivering it when technology, suppliers or operating conditions change.

A well-designed service begins with the business outcome, not the technology. It considers how people, processes, applications, infrastructure, data and suppliers combine to deliver that outcome. It asks what the service depends upon, where it is vulnerable, who is accountable for it and what needs to happen when part of the operating model fails.

Making the dependencies behind Important Business Services visible

This creates something every resilient organisation needs: visibility.

An Important Business Service, for example, may appear simple from the customer's perspective while depending upon multiple applications, cloud services, third parties, data sources, support teams and operational processes behind the scenes. Until those relationships are understood, it is difficult to assess the real impact of disruption or decide where resilience investment should be focused.

Good service design makes those relationships explicit. Ownership, support arrangements, recovery expectations, supplier responsibilities, monitoring and potential points of failure can be considered before they become problems during a live incident.

Where service design supports DORA and operational resilience

This is why service design has an increasingly important role in areas such as operational resilience and DORA. Regulatory requirements may drive the need to identify critical functions, ICT dependencies, third-party risks and recovery arrangements, but good service design should already be exposing many of those relationships.

Service design does not replace resilience, risk or regulatory disciplines. It provides much of the operational information and structure those disciplines rely upon. When the connection between a business service and its supporting technology, people and suppliers is understood, resilience testing and recovery planning can be based on how the service actually operates rather than on isolated technical components.

Better service design supports better crisis decisions

The same principle applies during a crisis.

Knowing that a server, application or supplier has failed is useful technical information. Knowing which business service is affected, who relies upon it, what other services depend upon it, how long disruption can reasonably be tolerated and what recovery options exist is business information.

That is what enables better decisions.

When ownership, escalation routes and dependencies have already been established, technical teams, suppliers, service owners and business stakeholders also have a much clearer basis for communication. The organisation can respond according to business impact rather than simply reacting to the loudest technical symptom.

The operational architecture behind resilient services

At ServiceDriven, I see service design as the operational architecture behind the technology-enabled organisation. It is not about imposing a framework or creating documentation for its own sake. It is about making sure there is a clear connection between what the business needs to deliver and the technology, suppliers, people and controls required to make that possible.

Done properly, this strengthens resilience before a crisis happens. It improves accountability, exposes hidden dependencies, clarifies supplier responsibilities and gives decision-makers a clearer understanding of the consequences of failure.

Organisations do not become resilient simply by having recovery plans. They become resilient by understanding how their services actually work.

That understanding starts with good service design.

Continue reading

Related ServiceDriven resources

Turn insight into action

Could the way your business works be simpler and clearer?

I provide an independent view of roles, workflows, systems, external partners and the structural issues that make a growing business harder to run than it should be.