[OR] [WFP] [E2] [P1 to P3] [C1] OR Planning Methodology

Operational Resilience Planning Methodology for Wells Fargo Philippines

Introduction

The organisation to be discussed in this chapter is Wells Fargo Philippines, a key offshore hub of Wells Fargo & Company. 

Operating within a highly interconnected global banking environment, Wells Fargo Philippines supports critical functions such as technology services, operations processing, risk management, and customer servicing across multiple regions.

In this context, operational resilience is not merely a regulatory expectation but a strategic necessity. Disruptions—whether from cyber incidents, system failures, third-party outages, or geopolitical events—can have cascading effects across the global enterprise. 

To address this complexity, Wells Fargo Philippines adopts a structured Operational Resilience Planning Methodology comprising three key phases: Plan, Implement, and Sustain. 

Each phase consists of five stages designed to progressively build, operationalise, and embed resilience across the organisation.

Purpose of the Chapter

The purpose of this chapter is to provide readers with a clear and structured understanding of the three phases of the Operational Resilience Planning Methodology adopted by Wells Fargo Philippines.

By the end of this chapter, readers are expected to:

• Understand the end-to-end lifecycle of operational resilience implementation
• Recognise the objectives and outcomes of each phase and stage
• Appreciate how resilience evolves from planning to execution and long-term sustainability
• Be prepared to apply this methodology within their own organisational context

This chapter serves as a roadmap, guiding readers through the logical progression of resilience development before diving into detailed implementation activities in subsequent chapters.

Overview of the Three Phases

The Operational Resilience Planning Methodology for Wells Fargo Philippines is structured into three integrated phases:

• Phase 1: Plan – Establish the strategic and governance foundation
• Phase 2: Implement – Execute resilience activities and validate capabilities
• Phase 3: Sustain – Embed resilience into organisational culture and continuous improvement

Each phase builds upon the previous one, ensuring that resilience is not only designed effectively but also operationalised and continuously enhanced.

Phase 1: Plan - Establishing the Foundation for Operational Resilience

The Plan phase focuses on understanding the organisation’s current state, identifying gaps, and defining a structured roadmap for resilience.

Stages in Phase 1: Plan 

• Assess Capability and Maturity [Plan Phase – Stage 1]
  Evaluate existing resilience capabilities across business continuity, IT disaster recovery, risk management, and crisis management. This stage establishes a baseline maturity level.

• Analyse Gap [Plan Phase – Stage 2]
  Identify gaps between current capabilities and desired resilience outcomes, including regulatory expectations and global standards.

• Develop Strategy and Roadmap [Plan Phase – Stage 3]
  Formulate a comprehensive resilience strategy aligned with business objectives, supported by a phased implementation roadmap.

• Confirm Risk Appetite [Plan Phase – Stage 4]
  Define the organisation’s tolerance for disruption, ensuring alignment with enterprise risk management frameworks and stakeholder expectations.

• Develop and Embed Governance [Plan Phase – Stage 5]
  Establish governance structures, roles, responsibilities, and reporting mechanisms to oversee resilience initiatives.

Outcome of Phase 1:

A clearly defined resilience strategy, governance framework, and implementation roadmap.

Phase 2: Implement - Operationalising Resilience Capabilities

The Implement phase translates strategy into actionable steps, focusing on identifying critical services, mapping dependencies, and validating resilience through testing.

Stages in Phase 2: Implement 

• Identify Critical Business Services [Implement Phase – Stage 1]
  Determine services that are essential to customers and the financial system, prioritising them for resilience planning.

• Map Processes and Resources [Implement Phase – Stage 2]
  Document end-to-end processes and identify dependencies, including people, technology, facilities, and third parties.

• Set Impact Tolerance [Implement Phase – Stage 3]
  Define acceptable levels of disruption (e.g., maximum tolerable downtime and data loss) for each critical business service.

• Conduct Scenario Testing [Implement Phase – Stage 4]
  Test resilience capabilities using severe but plausible scenarios, such as cyberattacks, system outages, or third-party failures.

• Improve Lesson Learnt [Implement Phase – Stage 5]
  Analyse test results, identify weaknesses, and implement improvements to strengthen resilience.

Outcome of Phase 2:

Validated operational resilience capabilities, supported by tested plans and improved response mechanisms.

Phase 3: Sustain - Embedding and Enhancing Resilience

The Sustain phase ensures that operational resilience becomes an integral part of the organisation’s culture and ongoing operations.

Stages in Phase 3: Sustain 

• Introduce Cultural Change [Sustain Phase – Stage 1]
  Promote a resilience-focused mindset across all levels of the organisation, ensuring shared ownership.

• Develop Communication Strategy [Sustain Phase – Stage 2]
  Establish clear communication channels for resilience awareness, incident response, and stakeholder engagement.

• Implement Training and Awareness [Sustain Phase – Stage 3]
  Conduct regular training programmes to ensure staff are equipped to respond effectively to disruptions.

• Provide Self-assessment [Sustain Phase – Stage 4]
  Enable business units to periodically assess their own resilience capabilities and identify improvement areas.

• Conduct Independent Quality Review [Sustain Phase – Stage 5]
  Perform independent reviews or audits to validate the effectiveness of the resilience framework.

Outcome of Phase 3:

A sustainable and continuously improving resilience capability, embedded into the organisation’s culture and operations.

The three-phase Operational Resilience Planning Methodology—Plan, Implement, and Sustain—provides Wells Fargo Philippines with a structured and comprehensive approach to managing disruption risks in a complex global environment.

By progressing from strategic planning to practical implementation, and ultimately to continuous improvement, the organisation ensures that resilience is not a one-time initiative but an enduring capability.

This methodology enables Wells Fargo Philippines to maintain critical operations, protect stakeholders, and adapt effectively to an evolving risk landscape.

Blogs marked [x] are under construction

ebook 2: Implementing Operational Resilience
C1	C2 [x]	C8 [x]	C14 [x]

	ebook 2: Implementing Operational Resilience
	BSP OR Policy	eBook 1	eBook 2	eBook 3	C20 [x]	C21 [x]
	"Plan" Phase of the Operational Resilience Planning Methodology
	C2 [x]	C3 [x]	C4 [x]	C5 [x]	C6 [x]	C7 [x]
	"Implement" Phase of the Operational Resilience Planning Methodology
	C8 [x]	C9 [x]	C10 [x]	C11 [x]	C12 [x]	C13 [x]
	"Sustain" Phase of the Operational Resilience Planning Methodology
	C14 [x]	C15 [x]	C16 [x]	C17 [x]	C18 [x]	C19 [x]

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

Gain Competency: For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.