Bastion Ops-IT&Resilienz

Bastion Ops is the control room for IT leads, administrators, service owners and continuity managers. A status board shows services, open incidents, running changes, expiring certificates, missing restore evidence and what is due today. A command palette opens every action and searches all eight areas. SERVICE CATALOG • Owner, deputy, criticality, RTO, RPO, SLA target and support hours • Dependency graph with impact analysis and cycle protection • Resilience chain per service: nine checks from backup evidence through BIA and continuity plan to access review INCIDENTS AND CRISIS TEAM • Severity suggestion, live timeline, roles and status updates from templates with an update timer • Crisis mode with checklist and decision log, postmortem with 5 Whys CHANGES • Risk questionnaire, four-eyes approval, checks against maintenance windows and freezes • Go/no-go, live execution with timer and rollback countdown RUNBOOKS • Branches, variables, copyable commands, immutable versions and execution log EXPIRY RADAR • Certificates via PEM/DER import with SANs, fingerprint and technical checks – private keys are rejected • Domains, licenses and contracts with notice periods • Escalation stages with acknowledgement, renewals with history BACKUP AND RESTORE EVIDENCE • Backup jobs with a 3-2-1-1-0 check and comparison against RPO and RTO • Restore tests with duration, data verification and checklist; a failure creates a task • Evidence rate per service BUSINESS CONTINUITY • BIA with MTPD, RTO, RPO and impact, gaps against the service catalog • Continuity plans from templates for six scenarios, approval with versions, call tree with call or SMS via the Phone app • Exercises with scoring, activation with steps to tick off ACCESS REVIEW • Import entitlements from CSV or JSON, risks such as privileged or long unused are flagged • Decisions with justification under the four-eyes principle, revocation list with reference ACROSS ALL AREAS • Cross-links, central deadlines and local reminders • History of every record as a SHA-256 hash chain • Attachments and backup encrypted with AES-GCM, CSV export per area • Overall report as PDF, ZIP export with manifest, encrypted exchange packages as a file or QR code • Biometric app lock, dark and light design, three-column tablet layout, 7 languages, demo organization LOCAL All data stays on the device. No account, no server, no analytics. SUBSCRIPTION The free version covers up to 5 services, 10 incidents and 10 changes, without PDF, ZIP export and exchange packages. Bastion Pro (monthly or yearly) removes the limits and unlocks reports, ZIP export and exchange packages. The subscription renews automatically unless cancelled in your account settings at least 24 hours before the end of the period. A free trial is shown when the store offers one. Bastion Ops is guidance and not legal, audit or compliance advice.