[OR] [P2] [S4] [ST] [C13] Case Studies & Practical Workshops

Chapter 13

Case Studies & Practical Workshops

Introduction

While frameworks, methodologies, and testing strategies provide the structure for Business Continuity Management (BCM), Crisis Management (CM), and Operational Resilience (OR), true capability is built through practical application.

Case studies and workshops bridge the gap between theory and execution by:

• Demonstrating how resilience concepts are applied in real-world scenarios
• Providing hands-on experience in designing and executing exercises
• Enabling organisations to test assumptions, refine processes, and build confidence

In an Operational Resilience context, these activities must focus on:

• Critical Business Services (CBS)
• End-to-end service delivery
• Realistic disruption scenarios
• Cross-functional coordination

Purpose of the Chapter

This chapter aims to:

• Present practical case studies across BCM, Crisis Management, and OR
• Provide structured workshop approaches for hands-on learning
• Demonstrate how to apply testing and exercising methodologies
• Enable organisations to translate concepts into actionable practices

Role of Case Studies in Resilience

Why Case Studies Matter

Case studies:

• Provide real-world context
• Highlight common challenges and solutions
• Demonstrate best practices and lessons learned
• Enhance understanding of complex scenarios

Learning Outcomes

Participants can:

• Understand how disruptions evolve
• Analyse response effectiveness
• Identify gaps and improvement opportunities

Case Study 1: Testing Deposit & Account Services (CBS-1)

Scenario Overview

A major bank experiences a core banking system outage during peak transaction hours.

Impact

• Customers are unable to access their accounts
• ATM and digital channels disrupted
• High transaction backlog

BCM Response

• Activation of Disaster Recovery (DR) systems
• Manual processing of critical transactions

Crisis Management Response

• Crisis Management Team activated
• Communication with customers and regulators
• Media handling

Operational Resilience Focus

• Can the bank maintain CBS within impact tolerance?

Key Lessons

• Importance of end-to-end service testing
• Need for integrated BCM and CM response
• Critical role of communication

Case Study 2: Payment System Failure

Scenario Overview

A payment processing system fails due to a software defect.

Impact

• Delayed transactions
• Financial and reputational risk
• Regulatory scrutiny

Testing Focus

• System recovery and failover
• Coordination between IT and operations
• Communication with stakeholders

Key Lessons

• Importance of rapid detection and response
• Need for clear escalation protocols
• Dependency on technology resilience

Case Study 3: Cyberattack with Crisis Escalation

Scenario Overview

A ransomware attack encrypts critical systems and threatens data exposure.

Impact

• System unavailability
• Data integrity concerns
• Media attention

Integrated Response

• BCM: Recovery from backups
• CM: Crisis communication and regulatory reporting
• OR: Maintaining critical services

Key Lessons

• Importance of backup integrity
• Need for coordinated response
• Role of leadership in crisis

Case Study 4: Third-Party Cloud Outage

Scenario Overview

A major cloud provider experiences a regional outage.

Impact

• Multiple systems unavailable
• Dependency risk exposed
• Customer impact

Testing Focus

• Alternate arrangements
• Vendor coordination
• Service continuity

Key Lessons

• Importance of third-party resilience
• Need for diversification of providers
• Visibility of dependencies

Designing Practical Workshops

Workshop Objectives

Workshops should:

• Provide hands-on experience
• Encourage collaboration
• Simulate real-world conditions

Types of Workshops

• Scenario design workshops
• Tabletop exercise workshops
• Crisis communication workshops
• CBS mapping and testing workshops

Workshop 1: Scenario Design Workshop

Objective

Develop severe but plausible scenarios.

Activities

• Identify Critical Business Services
• Map risks and dependencies
• Design multi-layered scenarios

Outcome

• Practical understanding of scenario development

Workshop 2: Crisis Tabletop Exercise

Objective

Test the Crisis Management Team's effectiveness.

Activities

• Simulate a crisis scenario
• Introduce injects
• Facilitate decision-making

Outcome

• Improved leadership and communication

Workshop 3: CBS Mapping and Testing

Objective

Understand end-to-end service delivery.

Activities

• Identify sub-CBS
• Map dependencies
• Design testing approach

Outcome

• Enhanced service-centric perspective

Workshop 4: Post-Exercise Evaluation

Objective

Learn how to evaluate exercises and drive improvement.

Activities

• Review exercise outcomes
• Identify gaps
• Develop improvement plans

Outcome

• Strengthened continuous improvement capability

Facilitating Effective Workshops

Key Success Factors

• Clear objectives
• Skilled facilitators
• Realistic scenarios
• Active participation

Engagement Techniques

• Role-playing
• Group discussions
• Real-time decision-making
• Debrief sessions

Common Challenges in Workshops

Lack of Engagement

Participants may not fully engage without realistic scenarios.

Over-Complexity

Too much detail can overwhelm participants.

Limited Follow-Through

Lessons learned may not be implemented.

Best Practices

• Align workshops with Critical Business Services
• Use realistic and relevant scenarios
• Encourage cross-functional participation
• Focus on learning and improvement
• Capture and implement lessons learned

Case studies and practical workshops are essential for transforming resilience concepts into real-world capability. They provide a safe environment to:

• Test assumptions
• Build skills
• Strengthen coordination
• Enhance decision-making

By integrating BCM, Crisis Management, and Operational Resilience, organisations can ensure that their teams are not only prepared in theory but capable of executing effectively under pressure.

Ultimately, resilience is built through experience, and case studies and workshops provide the foundation for that experience.

C1	C2	C3	C4	C5	C6	C7
C8	C9	C10	C11	C12	C13

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.