---
title: [OR] [Pillar] [E1] [C4] Interdependency Between Operational Risk Management and Operational Resilience
description: [OR] [Pillar] [E1] [C4] Interdependency Between Operational Risk Management and Operational Resilience
image: https://blog.bcm-institute.org/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20A/BB%20OR%20%5BA%5D%2013.jpg
---
. .
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Operational Risk Management: The Foundation of Operational Resilience
![BB OR \[D\] 6](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20D/BB%20OR%20%5BD%5D%206.jpg?width=2000&height=1333&name=BB%20OR%20%5BD%5D%206.jpg "BB OR [D] 6")
# \[OR\] \[Pillar\] \[E1\] \[C4\] Interdependency Between Operational Risk Management and Operational Resilience
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/ceb997af-948a-472e-aaff-7e81ed1f971c)
While resilience focuses on the organisation’s ability to **withstand, adapt to, and recover from disruptions**, this capability does not exist in isolation. It is built upon a foundation of well-established risk management disciplines.
At the core of this foundation lies **Operational Risk Management (ORM)**—a structured and systematic approach to identifying, assessing, managing, and monitoring risks arising from internal processes, people, systems, and external events.
Understanding the role of ORM within operational resilience is essential, as it provides the **risk intelligence and control environment** necessary to support resilience outcomes.
[![\[OR\] \[Pillar\] \[E1\] Operational Risk Management](https://no-cache.hubspot.com/cta/default/3893111/0e7e1e23-cd19-4496-855a-acc7434c06e7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0e7e1e23-cd19-4496-855a-acc7434c06e7)
[![\[Pillar\] \[3_4\] \[Banner\] \[C1\] Operational Risk Management](https://no-cache.hubspot.com/cta/default/3893111/5a27b1a6-eb14-48e1-9fa8-dc1cda1172a3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5a27b1a6-eb14-48e1-9fa8-dc1cda1172a3)
[Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) Apr 17, 2026
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[Pillar\] \[Banner\] \[C1\] Operational Risk Management](https://no-cache.hubspot.com/cta/default/3893111/a6e6c30d-49d9-41de-bd14-917e0be4ae88.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a6e6c30d-49d9-41de-bd14-917e0be4ae88)
### eBook 1: Chapter 4
### **The Interdependency Between Operational Risk Management and Operational Resilience**
**[![\[OR\] \[Pillar\] \[E1\] Operational Risk Management](https://no-cache.hubspot.com/cta/default/3893111/0e7e1e23-cd19-4496-855a-acc7434c06e7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0e7e1e23-cd19-4496-855a-acc7434c06e7)**
#### **Introduction**
[![\[OR\] \[Pillar\] \[E1\] \[C4\] Interdependency Between ORM and OR](https://no-cache.hubspot.com/cta/default/3893111/d9b2b903-838a-41ad-9e63-9aacd24603e9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d9b2b903-838a-41ad-9e63-9aacd24603e9)Operational Risk Management (ORM) and Operational Resilience (OR) are often discussed as separate disciplines within an organisation. However, in practice, they are **deeply interconnected and mutually reinforcing**.
While ORM focuses on **identifying, assessing, and mitigating risks**, operational resilience ensures that the organisation can **continue to deliver its critical business services even when those risks materialise**.
This chapter explores the interdependency between ORM and operational resilience, demonstrating how both disciplines must work together to create a robust and sustainable operating environment.
#### **Understanding the Relationship**
The relationship between ORM and operational resilience can be summarised as follows:
- **Operational Risk Management reduces the likelihood of disruption**
- **Operational Resilience reduces the impact of disruption**
These two disciplines address different aspects of uncertainty:
- ORM is **preventative and control-focused**
- OR is **adaptive and recovery-focused**
Despite these differences, they are not independent. Instead, operational resilience **depends on the outputs of ORM**, while ORM gains context and direction from resilience objectives.
#### **ORM as an Input to Operational Resilience**
Operational resilience relies heavily on the outputs generated by ORM processes. These include:
##### **Risk Identification**
ORM identifies potential sources of disruption, including:
- Process failures
- Human errors
- System outages
- External threats
These identified risks form the basis for resilience planning.
##### **Risk Assessment**
ORM evaluates the likelihood and impact of risks, enabling organisations to:
- Prioritise high-risk areas
- Allocate resources effectively
- Focus resilience efforts on critical exposures
##### **Control Effectiveness**
ORM assesses the strength of controls, helping organisations understand:
- Where controls are robust
- Where gaps or weaknesses exist
This informs the design of resilience strategies, particularly in areas where controls may fail.
##### **Incident Data and Lessons Learned**
ORM frameworks capture and analyse incidents and near misses, providing:
- Insights into past failures
- Trends in operational risk
- Opportunities for improvement
These insights are essential for developing realistic and effective resilience scenarios.
##### **Operational Resilience Enhancing ORM**
The interdependency is not one-directional. Operational resilience also strengthens ORM by expanding its perspective.
##### **Focus on End-to-End Services**
ORM traditionally focuses on risks within processes or functions. Operational resilience introduces a broader view by:
- Focusing on **end-to-end critical business services**
- Considering cross-functional dependencies
- Highlighting systemic risks
This encourages ORM to adopt a more holistic approach.
##### **Emphasis on Impact Tolerance**
Operational resilience requires organisations to define **impact tolerances**—the maximum level of disruption they can tolerate.
This concept enhances ORM by:
- Linking risk assessments to business outcomes
- Encouraging quantification of impact
- Aligning risk appetite with operational capabilities
##### **Scenario-Based Thinking**
Operational resilience emphasises **severe but plausible scenarios**, which:
- Challenge existing assumptions about risk
- Expose hidden vulnerabilities
- Test the effectiveness of controls
This strengthens ORM by introducing more forward-looking and stress-based analysis.
#### **A Complementary Relationship**
ORM and operational resilience are best understood as **complementary disciplines** that address different but related objectives.
| Dimension | Operational Risk Management | Operational Resilience |
| --- | --- | --- |
| Primary Objective | Reduce risk occurrence | Ensure continuity of services |
| Focus | Risks, controls, and processes | Services, outcomes, and impact |
| Approach | Preventative | Adaptive and responsive |
| Time Horizon | Pre-event | During and post-event |
| Key Question | What can go wrong? | What happens if it does? |
This complementary relationship ensures that organisations are both:
- **Risk-aware** (through ORM)
- **Disruption-ready** (through operational resilience)
#### **Integration Across the Organisation**
For ORM and operational resilience to be effective, they must be **integrated rather than siloed**.
Key areas of integration include:
##### **Governance**
- Shared oversight at the board and senior management levels
- Alignment of risk appetite and resilience objectives
- Integrated policies and frameworks
##### **Processes and Methodologies**
- Alignment between risk assessments and resilience planning
- Integration of RCSA with resilience mapping
- Use of common data sources and metrics
##### **Data and Reporting**
- Shared risk and resilience dashboards
- Integrated reporting on risk exposure and resilience performance
- Consistent use of indicators (e.g., KRIs and resilience metrics)
##### **Culture and Awareness**
- Promoting a culture of both risk management and resilience
- Training staff to understand both disciplines
- Encouraging proactive identification and escalation of risks
#### **The Lifecycle of Interdependency**
The interdependency between ORM and operational resilience can also be viewed as a continuous lifecycle:
- **Risk Identification (ORM)**
Identify potential threats and vulnerabilities
- **Risk Assessment (ORM)**
Evaluate likelihood and impact
- **Control Implementation (ORM)**
Mitigate and manage risks
- **Resilience Planning (OR)**
Prepare for disruption scenarios
- **Response and Recovery (OR)**
Maintain service continuity during disruption
- **Review and Improvement (ORM & OR)**
Learn from incidents and refine both frameworks
This lifecycle demonstrates that ORM and operational resilience are not sequential but **iterative and interdependent processes**.
#### **Risks of Treating ORM and OR Separately**
Organisations that treat ORM and operational resilience as separate or disconnected functions may face several challenges:
- Duplication of effort and resources
- Inconsistent risk and resilience assessments
- Gaps in coverage of critical services
- Ineffective response to disruptions
- Misalignment between risk appetite and resilience capability
Such fragmentation can weaken both disciplines and leave the organisation exposed to unforeseen risks.
#### **Key Takeaways**
The interdependency between ORM and operational resilience can be summarised as follows:
- **Mutual Reinforcement**
ORM informs resilience, while resilience enhances ORM
- **Complementary Objectives**
ORM reduces likelihood; resilience reduces impact
- **Shared Inputs and Outputs**
Both disciplines rely on common data, assessments, and insights
- **Need for Integration**
Effective implementation requires alignment across governance, processes, and culture
- **Continuous Lifecycle**
ORM and operational resilience operate in an ongoing, iterative cycle
**[](https://cta-redirect.hubspot.com/cta/redirect/3893111/a87f934a-0808-4f9a-a6cf-dc1c897d31d4)**
Operational Risk Management and Operational Resilience are not standalone capabilities—they are **interdependent elements of a unified approach to managing uncertainty**.
ORM provides the structured framework for understanding and managing risks, while operational resilience ensures that organisations can continue to function even when those risks materialise.
Together, they enable organisations to move beyond simply avoiding failure to **withstanding and thriving in the face of disruption**.
##### ***True resilience is achieved not by eliminating risk, but by integrating risk management with the capability to endure and recover from disruption***
***[![\[Pillar\] \[3_4\] \[Banner\] \[C1\] Operational Risk Management](https://no-cache.hubspot.com/cta/default/3893111/5a27b1a6-eb14-48e1-9fa8-dc1cda1172a3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5a27b1a6-eb14-48e1-9fa8-dc1cda1172a3)***
| **eBook 1** | **C1** | **C2** | **C3** | **C4** |
| --- | --- | --- | --- | --- |
| [![Book Cover \[OR\] \[Pillar Series\] \[C1\] Operational Risk Management_ The Foundation of Operational Resilience](https://no-cache.hubspot.com/cta/default/3893111/a41e3020-4a05-49b8-8331-d53366379e3a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a41e3020-4a05-49b8-8331-d53366379e3a) | [![\[OR\] \[Pillar\] \[E1\] \[C1\] Core Component of the Resilience Framework](https://no-cache.hubspot.com/cta/default/3893111/5f80a05f-3009-44ae-bb93-b7170713b0ba.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5f80a05f-3009-44ae-bb93-b7170713b0ba) | [![\[OR\] \[Pillar\] \[E1\] \[C2\] Understanding the Role of ORM in Operational Resilience](https://no-cache.hubspot.com/cta/default/3893111/4219690e-2581-4ced-ab6e-c45310896df1.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4219690e-2581-4ced-ab6e-c45310896df1) | [![\[OR\] \[Pillar\] \[E1\] \[C3\] ORM as the Foundation of Resilience](https://no-cache.hubspot.com/cta/default/3893111/ce873399-c195-45c9-96a7-ac1fcc35c436.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ce873399-c195-45c9-96a7-ac1fcc35c436) | [![\[OR\] \[Pillar\] \[E1\] \[C4\] Interdependency Between ORM and OR](https://no-cache.hubspot.com/cta/default/3893111/d9b2b903-838a-41ad-9e63-9aacd24603e9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d9b2b903-838a-41ad-9e63-9aacd24603e9) |
#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]
To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/74b1e556-8cd2-4a74-8821-db1804534955) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments:**
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh"
},
"dateModified" : "2026-08-02T07:23:17.892Z",
"datePublished" : "2026-04-17T06:40:58.000Z",
"headline" : "[OR] [Pillar] [E1] [C4] Interdependency Between Operational Risk Management and Operational Resilience",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/ebook-or/or-pillar-e1-c4-interdependency-between-operational-risk-management-and-operational-resilience",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```