[OR] [BNS] [E3] [C1] Starting Your OR Implementation

eBook 3: Chapter 1

Starting Your Operational Resilience Implementation for Bank of Nova Scotia

Introduction

Developing an Operational Resilience (OR) programme requires more than understanding resilience concepts and establishing governance.

The greatest value is realised when these concepts are translated into practical implementation activities that enable business units to identify, analyse, and strengthen the resilience of the services they deliver.

For Bank of Nova Scotia (BNS), this implementation phase brings together business, operational, technology, and risk stakeholders to create a common understanding of how the bank's Critical Business Services are delivered and how they can continue to operate during severe but plausible disruptions.

This third eBook in the series serves as a practical implementation guide for organisations that intend to establish a new Operational Resilience programme or enhance an existing one using BCM Institute's training-led implementation methodology.

It complements the knowledge acquired through BCM Institute's certification and competency-based training courses by providing structured implementation guidance, templates, and examples that business units can use to develop Operational Resilience deliverables that are consistent across the enterprise.

Purpose of The Chapter

The purpose of this chapter is to explain how this third eBook supports the practical implementation of Operational Resilience at Bank of Nova Scotia and how it builds upon the foundation established in the previous two eBooks.

After reading this chapter, readers should be able to:

• Understand how the three eBooks collectively support the Operational Resilience journey.
• Recognise the purpose and scope of this implementation guide.
• Understand the implementation activities that business units are expected to complete.
• Identify the Critical Business Services included within the implementation scope.
• Appreciate how the outputs developed throughout this eBook contribute to an enterprise-wide Operational Resilience programme.

This chapter establishes the context for the detailed implementation activities presented throughout the remainder of this eBook.

The Operational Resilience implementation journey has been structured as a series of three complementary eBooks.

Together, they provide a logical progression from understanding the organisation, through planning the programme, to executing the implementation activities required to strengthen resilience across the enterprise.

eBook 1 – Understanding Your Organisation

The first eBook introduces the Bank of Nova Scotia as the case study organisation and establishes the organisational context for Operational Resilience. It explains the bank's operating environment, organisational characteristics, governance considerations, Critical Business Services, regulatory landscape, and resilience objectives.

This eBook answers the question:

"What must we understand about our organisation before implementing Operational Resilience?"

It provides the organisational knowledge necessary before any implementation work begins.

eBook 2 – Implementing Operational Resilience for Bank of Nova Scotia

The second eBook introduces the Operational Resilience Planning Methodology consisting of three phases—Plan, Implement, and Sustain—and the fifteen stages that guide an organisation through the complete Operational Resilience lifecycle.

Readers learn how to:

• Assess organisational capability.
• Develop a resilience strategy.
• Establish governance.
• Identify Critical Business Services.
• Map dependencies.
• Set impact tolerances.
• Conduct scenario testing.
• Embed Operational Resilience into organisational culture.

This eBook answers the question:

"How should Operational Resilience be implemented?"

It provides the methodology that guides the implementation programme.

eBook 3 – Starting Your Operational Resilience Implementation

This third and final eBook is the practical implementation guide.

It converts the methodology introduced in the previous eBooks into structured implementation activities that business units can complete as part of the Operational Resilience programme.

It enables project teams to produce consistent documentation, identify operational dependencies, establish resilience objectives, and prepare evidence that supports governance, regulatory reviews, and continual improvement.

This eBook answers the question:

"How do we perform the Operational Resilience implementation within our business units?"

Rather than explaining concepts, this implementation guide focuses on producing practical deliverables that support enterprise-wide Operational Resilience.

Focus on Phase 2 [P2]: Operational Resilience in Action

Phase 2 of the Operational Resilience Planning Methodology is the point at which resilience concepts are embedded in day-to-day operations.

This eBook addresses the six key requirements of Phase 2 as requested by regulators globally,  namely:

1. Outline Detailed Processes (Phase 2 – Stage 1) [DP]
   Translating high-level business services into detailed, end-to-end operational processes that enable service delivery.
2. Map Interconnections (Phase 2 – Stage 2) [MIC]
   Identifying internal and external dependencies, including people, technology, data, facilities, third parties, and suppliers.
3. Map Interdependencies (Phase 2 – Stage 2) [MID]
   Establishing clear linkages between processes and the resources required to support them under normal and disrupted conditions.
4. Establish Impact Tolerances (Phase 2 – Stage 2) [iTo]
   Defining the maximum tolerable level of disruption for each critical business service, aligned with client harm, market integrity, financial stability, and regulatory expectations.
5. Identify Severe but Plausible Scenarios (Phase 2 – Stage 4) [SbPS]
   Developing stress scenarios that meaningfully challenge the organisation’s ability to remain within its defined impact tolerances.
6. Perform Scenario Testing (Phase 2 – Stage 4) [ST]
   Testing the organisation’s capability to withstand disruption and identifying vulnerabilities, control gaps, and opportunities to enhance resilience.

Each of these requirements is explored in the context of the organisation’s operating model and service landscape.

This implementation guide focuses on the detailed analysis of the following proposed Critical Business Services for the Bank of Nova Scotia.

For each Critical Business Service, participating business units will complete the implementation activities described in this eBook, producing standardised deliverables that collectively form the Operational Resilience profile of the bank.

Each CBS is analysed through the lens of process mapping, dependency identification, and scenario testing, ensuring a comprehensive understanding of vulnerabilities and resilience capabilities.

Each CBS is examined through the lens of process resilience, resource dependencies, tolerance thresholds, and scenario-driven vulnerabilities, enabling readers to understand not only what needs to be done, but how to do it in a structured, regulator-ready manner.

This eBook is designed for practitioners—risk managers, BCM professionals, operations leaders, compliance teams, and senior management—who are responsible for building, enhancing, or validating operational resilience capabilities.

It serves as both a hands-on implementation guide and a reference artefact, supporting consistency, traceability, and continuous improvement across the OR lifecycle.

This eBook has been developed as a value-added implementation resource for organisations participating in BCM Institute's Operational Resilience training and certification programmes.

While classroom learning provides participants with the knowledge, methodologies, and recognised practices required to establish an Operational Resilience programme, successful implementation requires structured guidance that can be consistently applied across multiple business units.

For Bank of Nova Scotia, this eBook serves as a practical implementation companion, enabling project teams to produce consistent documentation using a common methodology.

It supports collaboration among Operational Risk Management, Business Continuity Management, Technology, Cybersecurity, Compliance, Internal Audit, business line representatives, and executive management by providing a structured framework for documenting Critical Business Services, dependencies, operational processes, impact tolerances, severe-but-plausible scenarios, and scenario-testing results.

The implementation outputs developed through this guide also support governance reporting, regulatory engagement, internal assurance activities, and continual improvement initiatives, enabling the Operational Resilience programme to mature over time.

Readers should view this eBook as a practical implementation workbook rather than a theoretical reference.

Each subsequent chapter will provide:

• A detailed explanation of the implementation objective for each activity.
• Step-by-step guidance for completing Operational Resilience deliverables.
• Recommended documentation structures and templates.
• Practical examples relevant to Bank of Nova Scotia's banking operations.
• Guidance on governance, validation, and approval processes.
• Common implementation challenges and recommended approaches.
• Expected outputs that support enterprise Operational Resilience governance and regulatory oversight.

Business unit representatives should expect to contribute detailed operational knowledge relating to their Critical Business Services, including supporting processes, technology, people, facilities, information, third-party providers, and operational risks. This information will form the foundation for resilience analysis, scenario testing, recovery planning, and continuous improvement.

This third eBook represents the transition from planning to execution within Bank of Nova Scotia's Operational Resilience journey.

Building upon the organisational understanding established in eBook 1: Understanding Your Organisation and the methodology presented in eBook 2: Implementing Operational Resilience for Bank of Nova Scotia, it provides the practical guidance required to develop consistent, business-unit-level Operational Resilience deliverables.

By systematically identifying Critical Business Services, mapping dependencies and resources, establishing impact tolerances, developing severe but plausible scenarios, and validating resilience through structured scenario testing, BNS can strengthen its ability to continue delivering essential banking services during operational disruptions.

The outputs produced throughout this eBook will form an integral part of the bank's Operational Resilience programme, supporting effective governance, regulatory compliance, informed decision-making, and the continual enhancement of organisational resilience across the enterprise.

Blogs marked [x] are under construction