---
title: [OR] [P2] [S2] [MII] [C10] Step 7 – Analyse Mapping Outputs
description: [OR] [P2] [S2] [MII] [C10] Step 7 – Analyse Mapping Outputs
image: https://blog.bcm-institute.org/hubfs/OR%20P2%20S2%20Mapping%20Interconnections%20and%20Interdependencies/%5BOR%5D%20%5BP2%5D%20%5BS2%5D%20%5BMII%5D%20%5BC10%5D%20Step%207%20%E2%80%93%20Analyse%20Mapping%20Outputs.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### From Complexity to Clarity: Mapping Interconnections and Interdependencies for Operational Resilience
# \[OR\] \[P2\] \[S2\] \[MII\] \[C10\] Step 7 – Analyse Mapping Outputs
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/0b279667-64c6-44b6-9618-1127feb5334f)
Once interconnections and interdependencies have been mapped and validated, the next step is to **analyse the mapping outputs**. This step is where operational resilience moves from documentation to **decision-making**.
Mapping on its own provides visibility—but analysis transforms that visibility into **insight, prioritisation, and action**. It enables organisations to identify vulnerabilities, understand systemic risks, and determine where resilience investments should be focused.
This chapter outlines how to analyse mapping outputs by identifying:
- **Single points of failure**
- **Critical dependencies**
- **Concentration risks**
It also explains how these insights are linked to **impact tolerance setting** and **scenario design**, ultimately transforming mapping into **actionable resilience intelligence**.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/dbcad25a-5ca0-4bd8-ae1b-7906de022d85)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) May 4, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6072e46a-8b7a-441a-9257-0c17043af1f5)
### \[P2\] \[S2\] Chapter 10
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/0b279667-64c6-44b6-9618-1127feb5334f)
### **Step 7 – Analyse Mapping Outputs**
#### **Introduction**
Once interconnections and interdependencies have been mapped and validated, the next step is to **analyse the mapping outputs**. This step is where operational resilience moves from documentation to **decision-making**.[![\[OR\] \[P2\] \[S2\] \[MII\] \[C10\] Step 7 – Analyse Mapping Outputs](https://no-cache.hubspot.com/cta/default/3893111/44bbb252-fdf5-4026-90ba-cbbdbe9c099a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/44bbb252-fdf5-4026-90ba-cbbdbe9c099a)
Mapping on its own provides visibility—but analysis transforms that visibility into **insight, prioritisation, and action**. It enables organisations to identify vulnerabilities, understand systemic risks, and determine where resilience investments should be focused.
This chapter outlines how to analyse mapping outputs by identifying:
- **Single points of failure**
- **Critical dependencies**
- **Concentration risks**
It also explains how these insights are linked to **impact tolerance setting** and **scenario design**, ultimately transforming mapping into **actionable resilience intelligence**.
#### **Purpose of the Chapter**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/b5438182-f1e5-4248-bea5-2d5044665d8d)
The purpose of this chapter is to:
- Provide a structured approach to analysing mapping outputs
- Identify key risk indicators within interconnections and dependencies
- Link mapping insights to operational resilience activities
- Enable organisations to derive **actionable outcomes** from mapping
#### **From Mapping to Insight**
##### **The Value of Analysis**
Mapping answers the question:
*“What are the components and how are they connected?”*
Analysis answers the more critical question:
*“Where are the risks, and what should we do about them?”*
Without analysis:
- Mapping remains descriptive
- Risks remain unidentified
- Resilience actions lack focus
##### **Analytical Objectives**
The primary objectives of analysing mapping outputs are to:
- Identify **vulnerabilities and weak points**
- Understand **dependency criticality**
- Detect **systemic and concentration risks**
- Support **risk-based prioritisation**
#### **Identifying Single Points of Failure (SPOF)**
##### **Definition**
A **Single Point of Failure (SPOF)** is a component whose failure would result in:
- Complete disruption of a CBS
- Inability to deliver service outcomes
##### **Examples**
- A single authentication system supporting all digital channels
- A key individual with unique expertise and no backup
- A single data centre hosting critical systems
##### **Identification Approach**
Using mapping outputs, organisations should:
- Trace dependencies for each CBS
- Identify components with **no redundancy or fallback**
- Assess impact if the component becomes unavailable
##### **Risk Implications**
SPOFs represent:
- High vulnerability
- Immediate disruption risk
- Priority areas for mitigation
##### **Mitigation Considerations**
- Introduce redundancy (systems, personnel, locations)
- Diversify dependencies
- Strengthen controls and monitoring
#### **Identifying Critical Dependencies**
##### **Definition**
Critical dependencies are components that are **essential to the delivery of a CBS**, even if alternatives exist.
##### **Characteristics**
A dependency is considered critical if:
- Its failure significantly impacts service delivery
- It has a direct link to customer outcomes
- It affects regulatory or financial obligations
##### **Identification Approach**
Organisations should:
- Assess dependency strength and criticality (from mapping outputs)
- Identify components with **high operational importance**
- Prioritise dependencies supporting multiple CBS
##### **Examples**
- Core banking systems
- Payment processing engines
- Critical third-party service providers
##### **Risk Implications**
Critical dependencies:
- Require enhanced resilience measures
- Must be prioritised in recovery planning
- Should be included in scenario testing
#### **Identifying Concentration Risks**
##### **Definition**
Concentration risk occurs when multiple services or processes depend on a **single resource, provider, or location**.
##### **Types of Concentration Risk**
**Technology Concentration**
- Multiple CBS relying on a single system or platform
**Vendor Concentration**
- Heavy reliance on one third-party provider
**Geographic Concentration**
- Critical operations located in a single site or region
**People Concentration**
- Dependence on a limited number of individuals
##### **Identification Approach**
Using mapping outputs, organisations should:
- Identify shared dependencies across CBS
- Analyse clustering of dependencies
- Evaluate redundancy and diversification
##### **Risk Implications**
Concentration risks:
- Amplify the impact of disruptions
- Increase systemic vulnerability
- Limit recovery options
##### **Mitigation Considerations**
- Diversify vendors and service providers
- Implement geographic redundancy
- Distribute workloads across systems
- Strengthen third-party risk management
#### **Linking Analysis to Impact Tolerance**
##### **Role of Mapping Insights**
Analysis of dependencies provides critical inputs for defining **impact tolerance**, including:
- Maximum tolerable downtime
- Acceptable level of service degradation
- Data loss thresholds
##### **Using Insights to Refine Impact Tolerance**
Organisations should:
- Align tolerance levels with identified vulnerabilities
- Adjust thresholds based on dependency criticality
- Ensure tolerances are **realistic and achievable**
##### **Outcome**
Impact tolerances become:
- Evidence-based
- Aligned with actual operational capabilities
- Defensible to regulators
#### **Linking Analysis to Scenario Design**
##### **Importance of Scenario Design**
Scenario testing is only effective if it reflects:
- Real-world dependencies
- Actual vulnerabilities
- Plausible disruption pathways
##### **Using Mapping Insights for Scenario Development**
Analysis enables organisations to:
- Design scenarios targeting:
- Simulate cascading failures across interconnected components
##### **Example Scenarios**
- Failure of a shared technology platform impacting multiple CBS
- Outage of a key third-party provider
- Loss of critical personnel during a crisis
##### **Outcome**
Scenario testing becomes:
- Realistic
- Comprehensive
- Aligned with actual risk exposure
#### **From Analysis to Action**
##### **Translating Insights into Actions**
Organisations must convert analytical findings into:
- Risk mitigation strategies
- Resilience enhancement initiatives
- Investment priorities
##### **Example Actions**
- Implement redundancy for SPOFs
- Strengthen controls for critical dependencies
- Diversify vendors to reduce concentration risk
- Enhance monitoring of high-risk components
##### **Integration with Operational Resilience Framework**
Analysis outputs should feed into:
- Business Continuity Management (BCM)
- Crisis Management (CM)
- Third-Party Risk Management (TPRM)
- Technology Risk Management (TRM)
#### **Outcome of Step 7**
The outcome of analysing mapping outputs is:
**The transformation of mapping data into actionable resilience insights that enable informed decision-making, risk prioritisation, and targeted resilience improvements.**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/2dbf77a9-2b10-4a06-b39b-ac8f1611e999)
Analysing mapping outputs is a **critical step in operational resilience implementation**, bridging the gap between visibility and action.
By identifying:
- **Single points of failure**
- **Critical dependencies**
- **Concentration risks**
organisations gain a deep understanding of where vulnerabilities exist and how disruptions may propagate.
Linking these insights to:
- **Impact tolerance**
- **Scenario design**
ensures that resilience strategies are:
- Realistic
- Targeted
- Effective
Ultimately, this step enables organisations to move from **mapping what exists** to **strengthening what matters**, ensuring that Critical Business Services can be sustained even under severe disruption.
In the next chapter, we will explore how to **operationalise these insights through tools, templates, and practical implementation approaches**, enabling organisations to embed interconnection mapping into their day-to-day resilience practices.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/90d1498f-0cc7-4057-bec0-aca399cc07aa)
| **C1** | **C2** | **C3** | **C4** | **C5** | **C6** |
| --- | --- | --- | --- | --- | --- |
| [![\[OR\] \[P2\] \[S2\] \[MII\] \[C1\] Introduction to Interconnections and Interdependencies](https://no-cache.hubspot.com/cta/default/3893111/8cbaf41b-9671-404d-83b3-9a20c9fd69f7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8cbaf41b-9671-404d-83b3-9a20c9fd69f7) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C2\] Why Mapping is Critical for Operational Resilience](https://no-cache.hubspot.com/cta/default/3893111/a7625fb5-1205-4fc5-97d4-4b7492c2b25f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a7625fb5-1205-4fc5-97d4-4b7492c2b25f) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C3\] Core Components of Interconnections and Dependencies](https://no-cache.hubspot.com/cta/default/3893111/38a3cbd4-322a-41bd-974f-5090a2ce52aa.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/38a3cbd4-322a-41bd-974f-5090a2ce52aa) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C4\] Step 1 – Define Scope of Mapping](https://no-cache.hubspot.com/cta/default/3893111/69cc922b-c86c-4242-b85b-315a3f941e12.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/69cc922b-c86c-4242-b85b-315a3f941e12) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C5\] Step 2- Identify Data Sources](https://no-cache.hubspot.com/cta/default/3893111/622d0fcc-71bf-4c3b-a569-213cb48bd1db.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/622d0fcc-71bf-4c3b-a569-213cb48bd1db) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C6\] Step 3 – Develop Mapping Framework](https://no-cache.hubspot.com/cta/default/3893111/95581d69-3824-4acd-accf-03c2cab43765.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/95581d69-3824-4acd-accf-03c2cab43765) |
| **C7** | **C8** | **C9** | **C10** | **C11** | ** C12** |
| [![\[OR\] \[P2\] \[S2\] \[MII\] \[C7\] Step 4 – Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/a4ffedf2-c795-41e9-9a8b-c5e24eea7159.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a4ffedf2-c795-41e9-9a8b-c5e24eea7159) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C8\] Step 5 – Map Interconnections and Interdependencies](https://no-cache.hubspot.com/cta/default/3893111/10f06848-f21f-457d-aa80-ca4e3b20ce9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/10f06848-f21f-457d-aa80-ca4e3b20ce9e) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C9\] Step 6 – Validate Mapping](https://no-cache.hubspot.com/cta/default/3893111/57d7a65a-a462-4919-9324-53e0bb207f3e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/57d7a65a-a462-4919-9324-53e0bb207f3e) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C10\] Step 7 – Analyse Mapping Outputs](https://no-cache.hubspot.com/cta/default/3893111/44bbb252-fdf5-4026-90ba-cbbdbe9c099a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/44bbb252-fdf5-4026-90ba-cbbdbe9c099a) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C11\] Mapping Tools and Techniques](https://no-cache.hubspot.com/cta/default/3893111/d2fab757-0d78-42dd-8553-044eead7390e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d2fab757-0d78-42dd-8553-044eead7390e) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C12\] Standard Templates and Data Structures](https://no-cache.hubspot.com/cta/default/3893111/4f04214c-3a0f-4bed-b2f8-6352c6d3cda0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4f04214c-3a0f-4bed-b2f8-6352c6d3cda0) |
| **C13** | **C14** | **C15** | **C16** | **C17** | ** C18** |
| [![\[OR\] \[P2\] \[S2\] \[MII\] \[C13\] Integration with Operational Resilience Framework](https://no-cache.hubspot.com/cta/default/3893111/c9628dd2-bbcb-4b54-b5b5-490066640d6d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c9628dd2-bbcb-4b54-b5b5-490066640d6d) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C14\] Mapping Third-Party and Supply Chain Dependencies](https://no-cache.hubspot.com/cta/default/3893111/0c13b720-3d3e-4452-91e4-b9533260b3a4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0c13b720-3d3e-4452-91e4-b9533260b3a4) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C15\] Mapping for Digital and Cloud Environments](https://no-cache.hubspot.com/cta/default/3893111/1c90de74-af6b-44d3-ae4f-26d01eac3cf7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/1c90de74-af6b-44d3-ae4f-26d01eac3cf7) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C16\] Common Challenges and Pitfalls](https://no-cache.hubspot.com/cta/default/3893111/32bbd8d7-f947-42ac-9db9-b88b0b156813.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/32bbd8d7-f947-42ac-9db9-b88b0b156813) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C17\] Case Study – Banking Sector CBS Mapping](https://no-cache.hubspot.com/cta/default/3893111/5a846fed-f810-4f6b-a1d8-0c2100f0eeac.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5a846fed-f810-4f6b-a1d8-0c2100f0eeac) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C18\] Governance and Ownership of Mapping](https://no-cache.hubspot.com/cta/default/3893111/44ed11f0-5263-4485-98db-725a423c5fd6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/44ed11f0-5263-4485-98db-725a423c5fd6) |
| **C19** | **C20** | **C21** | **C22** | | |
| [![\[OR\] \[P2\] \[S2\] \[MII\] \[C19\] Using Mapping for Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/b7bf0bc8-b382-4892-821d-c7c867303f14.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b7bf0bc8-b382-4892-821d-c7c867303f14) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C20\] Maintaining and Updating Mapping](https://no-cache.hubspot.com/cta/default/3893111/41d34d1f-78bd-4346-845e-b0b86232cfa6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/41d34d1f-78bd-4346-845e-b0b86232cfa6) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C21\] Key Takeaways and Future Direction](https://no-cache.hubspot.com/cta/default/3893111/d8414f6b-4b4e-4a50-adb3-963546f13951.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d8414f6b-4b4e-4a50-adb3-963546f13951) | [![\[OR\] \[P2\] \[S2\] \[MII\] \[C22\] Back Cover](https://no-cache.hubspot.com/cta/default/3893111/0f96fecf-9a98-4404-8377-d37c1233df10.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0f96fecf-9a98-4404-8377-d37c1233df10) | | |
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-05-15T14:11:46.209Z",
"datePublished" : "2026-05-04T14:05:21.000Z",
"headline" : "[OR] [P2] [S2] [MII] [C10] Step 7 – Analyse Mapping Outputs",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-p2-s2-mii-c10-step-7-analyse-mapping-outputs",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```