[OR] [MAS] [E3] [C10] Building a Resilience Culture

eBook 3: Chapter 10

 Building a Resilience Culture

Introduction

Operational resilience is not sustained by frameworks, tools, or policies alone—it is ultimately driven by people, behaviours, and organisational culture. A strong resilience culture ensures that every individual, from frontline staff to senior leadership, understands their role in maintaining the delivery of Critical Business Services (CBS), especially during disruptions.  

The Monetary Authority of Singapore emphasises that financial institutions must establish clear governance, accountability, and ongoing capability development, supported by training, testing, and continuous improvement.

This chapter explores three essential elements of building a resilience culture: leadership commitment, training and awareness, and embedding resilience into daily operations.

Leadership Commitment

The Role of Leadership in Driving Culture

Leadership commitment is the foundation of a resilience-driven organisation. Without active involvement from senior management and the Board, operational resilience risks becoming a compliance exercise rather than a strategic priority.

MAS guidance clearly states that the Board and senior management are ultimately responsible for the effectiveness of the business continuity and operational resilience framework, including oversight, resource allocation, and strategic direction.

Key Responsibilities of Leadership

Senior leadership must:

• Set the strategic direction for resilience
  Align resilience objectives with business strategy and risk appetite
• Establish governance and accountability
  Define clear roles, responsibilities, and reporting structures
• Allocate adequate resources
  Ensure sufficient investment in technology, people, and testing
• Promote a resilience mindset
  Reinforce that resilience is a business priority, not just a risk function

Leadership Behaviours that Shape Culture

Effective leaders demonstrate resilience by:

• Actively participating in scenario exercises and crisis simulations
• Reviewing performance metrics and audit findings
• Supporting cross-functional collaboration
• Driving continuous improvement initiatives

When leadership visibly prioritises resilience, it sends a clear signal across the organisation that resilience is embedded in decision-making and operations.

Training and Awareness

Building Organisational Capability

Training and awareness are essential to ensure that employees at all levels understand:

• Their roles during incidents and disruptions
• The importance of maintaining CBS
• How to execute recovery and response procedures

MAS emphasises the need for regular training, drills, and exercises to enhance staff readiness and ensure effective incident response.

Key Components of a Training Programme

1. Role-Based Training

• Tailored training for different functions (e.g., IT, operations, crisis management)
• Focus on specific responsibilities during disruptions

2. Scenario-Based Exercises

• Tabletop exercises and simulations
• Realistic scenarios to test decision-making and coordination

3. Crisis Leadership Training

• Training for senior management on crisis decision-making
• Focus on communication, prioritisation, and leadership under pressure

4. Continuous Learning and Updates

• Regular refreshers based on lessons learned from incidents and tests
• Updates reflecting new risks (e.g., cyber threats, third-party disruptions)

Awareness and Communication

Beyond formal training, organisations must ensure continuous awareness through:

• Internal communications and updates
• Sharing of lessons learned from incidents and testing
• Regular engagement sessions across business units

Common Challenges

• Training fatigue or lack of engagement
• Inconsistent participation across departments
• Limited understanding of cross-functional dependencies

To address these challenges, training must be interactive, relevant, and aligned with real operational scenarios.

Embedding Resilience into Daily Operations

From Framework to Practice

A resilience culture is fully realised only when resilience principles are integrated into business-as-usual (BAU) activities. This ensures that resilience is not treated as a separate initiative but as part of everyday operations.

MAS emphasises the importance of adopting an end-to-end, service-centric approach, ensuring that resilience considerations are embedded across processes, systems, and decision-making.

Key Areas of Integration

1. Operational Processes

• Incorporate resilience checks into daily workflows
• Ensure processes are designed with redundancy and failover capabilities

2. Change Management

• Assess resilience impact when introducing new systems, products, or vendors
• Ensure updates do not introduce new vulnerabilities

3. Risk Management

• Integrate resilience metrics into risk monitoring and reporting
• Align operational resilience with enterprise risk management

4. Performance Management

• Include resilience-related KPIs and KRIs in performance evaluation
• Reinforce accountability across functions

Embedding Through Testing and Feedback

Regular testing and feedback loops play a critical role in embedding resilience:

• Scenario testing validates operational readiness
• Lessons learned drive process improvements
• Continuous updates ensure alignment with evolving risks

MAS highlights that resilience frameworks must be continuously reviewed and enhanced, reflecting changes in the operating environment and emerging threats.

Creating a Resilience-Driven Organisation

An organisation with embedded resilience demonstrates:

• Proactive risk awareness
• Seamless cross-functional coordination
• Rapid and effective response to disruptions
• Continuous adaptation and improvement

Integrating Culture into the Resilience Lifecycle

Building a resilience culture is not a one-time initiative—it must be integrated into the entire lifecycle:

• Leadership sets direction and expectations

• Training builds capability and awareness

• Daily operations embed resilience practices

• Testing and incidents generate lessons learned

• Continuous improvement reinforces cultural maturity

This creates a self-reinforcing cycle, ensuring that resilience becomes an integral part of the organisation.

Building a resilience culture is essential for sustaining operational resilience in Singapore’s financial sector. Guided by the expectations of the Monetary Authority of Singapore, financial institutions must ensure strong leadership commitment, continuous training and awareness, and the integration of resilience into daily operations.

Ultimately, resilience is not defined by policies or frameworks—it is defined by how people think, act, and respond under pressure. Organisations that successfully embed a resilience culture will be better equipped to navigate disruptions, protect customers, and maintain trust in an increasingly complex and uncertain environment.

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.