Operational Resilience Audit

Posts by:

Rose Lam

Rose was the Vice President for DBS Bank and JPMorgan Chase Bank, responsible for the management and delivery of their Business Continuity Management (BCM) programs. She has more than 10 years of BCM experience including regional BCM planning and program implementation for the banks’ offices in Asia: Singapore, Australia, Hong Kong, Japan, India, Korea and South-East Asia. Her BCM experience includes Business Impact Analysis, recovery strategies development, alternate sites implementation and business continuity/crisis management exercises. Her other BCM involvement include risk mitigation planning for DBS Bank for the S2006 event (IMF/World Bank meetings), planning and conduct of the Financial Industry-wide Business Continuity Exercise as well as Avian Flu pandemic response planning. Besides being in the banking industry, Rose had held several IT and Engineering roles at Apple Computer, with responsibilities in Computer Integrated Manufacturing and IT.

[ORA-3/5] Module (Day) 2 of ORA-5000 Operational Resilience Audit Expert

[ORA-3/5] Module (Day) 2 of ORA-300/5000 Operational Resilience Audit Expert

New call-to-action

[Back to] What is [BL-ORA] [3]?ORA-300/ 5000 Operational Resilience Audit Specialist (ORAS) Training Roadmap [Module 2

ORA Learning Roadmap Know-Do-Manage

Module (Day) 2 Course Content

BCMPedia Operational Resiliencethe participants on the audit application. The participants will be provided access to the audit terminology via the ISO standard document and the electronic Wikipedia (www.bcmpedia.org).

New call-to-action

 

Detailed Course Content

Session

Detailed Description

Module 2 Session 1

Understanding Operational Resilience (OR) and Its Importance


  • Understanding operational resilience and its importance
  • Exploring the global regulatory landscape and industry standards
  • Overview of operational resilience planning methodology
Understanding OR Concepts and Process

Introduction to Audit Terminology

  • Have a good understanding of audit definitions and concepts relating to OR concepts.
  • Understand the four strategic OR audit processes and the content (requirement) of the global and national OR standards.
  • Able to explain the OR concepts and their interlink as explained in greater detail from the context of an auditor's perspective.
Audit Planning and Preparation
  • Defining audit objectives and scope
  • Developing an audit plan and checklist
  • Gathering relevant information and documentation
  • Evaluating Control Environment and Governance Structures
Understand the OR Framework and OR Program
  • Understand the concept of a management system implemented under the International Organisation for Standardisation (ISO).
  • Apply the ISO process of Plan-Do-Check-Act (PDCA.
  • Walkthrough of the content of the OR standard
  • Be able to compare a country-level OR implementation with one that has.
Aligning to OR Standard
  • Have hands-on experience in reviewing international OR standards.
  • Learn how to process, analyse and interpret the OR requirement specified in the standard.
  • Align OR fundamentals to your specific OR requirement

Module 2 Session 2

Planning and Preparing the OR Audit

Understand the Structure of an OR Program,  Handling of the Auditees and Stakeholders and Develop a Standardise Audit Program

  • Understand the scope of the key OR components and requirements.
  • Develop and present their standardised audit program.
  • Have hands-on experience using customised templates for auditing the standardised audit program.

Deliverables

New call-to-action
Course Content for BL-A-5
New call-to-action New call-to-action New call-to-action New call-to-action

 


More Information About Blended Learning Operational Resilience Audit (ORA) Courses

BCM Institute offers two levels of OR auditing courses ORA-3 Blended Learning ORA-300 Operational Resilience Audit Specialist and the ORA-5 Blended Learning ORA-5000 Operational Resilience Audit Expert.

New call-to-action New call-to-action New call-to-action
New call-to-action Tell Me More About BCM- 8030 New Call-to-action
ORAE Operational Resilience Audit Expert Certification Email to Sales Team [BCM Institute] ORAS Operational Resilience Audit Specialist Certification
New call-to-action Please feel free to send us a note if you have any questions. New call-to-action
 
Read More
[ORA-3] What is an ORA-300 Operational Resilience Auditor Course?

[ORA-3] What is an ORA-300 Operational Resilience Auditor Course?

BG Bann_ORA_ORA-300 General Banner

Overview of ORA-300 Blended Learning Course

In BCM Institute’s ORA-300 Blended Learning course, the onsite ORA-300 Operational Resilience Auditor two-day course is now conducted in 2 modules (or four compulsory 3-hour sessions) across four weeks.

This course allows potential OR auditors and appointed reviewers of the OR initiative to be grounded on the fundamentals of operational resilience.

[BL-OR] [3] What is BL-OR-3 Course? This two-module course is offered as the "OR Implementer" or OR-300 in the OR-5000 course.  This OR audit specialist track was the foundation for auditors to advance to OR audit modules 3 and 4.  Note that attending Module 1 and 2 for ORA-5000 is mandatory. ORA-300

This protracted time frame allows one to understand the concepts taught in digestible bite sizes with targeted online interactions. Care and consideration have been implemented to ensure the content and syllabus are of the same standard and rigour as our onsite classes.

You will learn the same syllabus taught by the same industry practitioners you would have onsite. However, the same practitioner and many OR experts from other regions will be available during the scheduled online classes. 

We have catered for the two-time zone.  One course starts at 2 pm (GMT+8) and the other at 9 pm (GMT+8).  Google your city time versus Singapore to find your start time from where you are.

Below is a snapshot of what you can expect from the program. Each module's syllabus [Course Content] has been carefully crafted to ensure that the outcome [Course Requirement] matches each day of the OR-300 Operational Resilience Implementer competency level.

 

  Module (Day) Course Content Course Requirement  
  New call-to-action New call-to-action New call-to-action  
  [BL-ORA] [3] M2 What is ORA-300? New call-to-action New call-to-action  

Operational Resilience Audit for Financial Institutions

An array of regulatory developments impacting the financial services industry, such as refining the managing of disruptions, increasing interconnectedness and third-party/ outsourcing dependencies and dependencies on IT and rapid digitalisation, means operational resilience will remain a significant area of concern for the board, regulators, policymakers, investors and customers.

The challenge is organisations' approaches to dealing with differing regulations globally. In terms of resilience structure, organisations have looked at their governance frameworks and ensured they are fit for purpose, as well as utilising stress and scenario testing to assess their capabilities, which is more than their existing business continuity and crisis management programs.

What are the Differences and Concerns?

Concerns: The primary concern with blended learning is that it will be another eLearning training over video channels. After more than two years of continuous improvement, the entire blended learning (100% online) process is designed such that the content will provide the same outcome or, in fact, better.

Instructors: Note that instructors delivering the modules remain the same as the onsite training.  They are involved in risk management with solid business continuity and crisis management backgrounds and have worked or are still working at a financial institution.

International Participation: Another significant change will be the participation of more international delegates compared to the traditional majority of Asian participants.  Be expected to discuss and work as teams from around the world.  Feedback from past participants highlights that they have learnt many practices from Asia-Pacific and other regions.

Readings: Be expected to have more pre-readings as the objective is to ensure that knowledge that could be acquired via reading should be done outside the training session.  More time is allocated to sharing experiences with the participants and facilitators.

Onsite Versus Remote Learning

The "brick-and-mortar" operational resilience courses are available in the capital cities, such as Singapore and Kuala Lumpur, Malaysia. The good news is that you can attend the course via our 100% online version.

ZOOM Screenshot MTE 26 Nov 2020 COVID-19  (2)

New call-to-actionDuring the last three years of conducting blended learning (online), the participants felt that our re-engineered online learning is not another 2-days of continuous training but rather a package of self-paced, self-directed.

Also, most face-to-face exposure is to learning directly from experts and fellow international participants. 

We hope to see you at our next session.

 


 
Find out more about ORA-5000 [ORA-5] & ORA-300 [ORA-3]
 
New call-to-action Tell Me More About BCM- 8030 New Call-to-action
New call-to-action New call-to-action New call-to-action
New call-to-action

Please feel free to send us a note if you have any of these questions.

Email to Sales Team [BCM Institute]

New call-to-action
New call-to-action

New call-to-action

New call-to-action

 

 
Read More

Module (Day) 2 of ORA-5000 Operational Resilience Audit Expert [ORA-5]

[Back to] What is [BL-ORA] [3]?New call-to-action

 

BL-OR-3-5 Blog Under Construction

ORA-5000 Operational Resilience Audit Expert (ORAE) Training Roadmap

[Module 2

ORA Learning Roadmap Know-Do-Manage

Description of Module (Day) 2 Course

BCMPedia Operational ResilienceModule 2 aims to provide the participants with an operational resilience framework that involves identifying essential business services, setting impact tolerances, and mapping and testing to respond to operational disruptions.

Participants will better understand the regulatory environment and what it means regarding operational resilience.  The key clauses of some of the regulations will also be discussed, especially on how to comply with these requirements.

New call-to-actionCourse Requirement to learn more about what is expected from you as a participant when attending Module 2.

 

 

Detailed Course Content

 

Topic Description
Module 2 Session 1
Build an Operational Resilience Programme
  • Align Operational Resilience (OR) initiatives to Executive Management and the Board's goals.
  • Walkthrough OR Planning Methodology
  • Identify steps to building an Operational Resilience Programme
  • Understand the components of an OR Framework
Recognize and analyze types of operational disruptions
  • Identify types of operational disruptions
  • Analyze and identify the types of operational disruptions relevant to an organisation.
  • Identify the operational disruptions that relate to operational resilience.
Identify critical business services
  • Analyse and Identify critical business services.
  • Recognise and differentiate what is not part of critical business services.
Module 2 Session 2
Set appropriate impact tolerances for critical business services
  • Set appropriate impact tolerances for critical business services.
  • Identify impact types and set impact tolerances for each type.
Map operational resilience across the organization
  • Map operational resilience across the organization.
  • Understand and be able to document the process/ value chain.
  • Map the value chains across multiple business units.
Perform scenario testing
  • Perform scenario testing
  • Create a scenario testing library.
  • Identify types and frequency and develop categories of testing scenarios.
  • Be prepared for the expectations of the regulators.
Improve and Communicate Lesson Learnt
  • Learnt the strategy to promote a culture of continuous learning.
  • Communicate and improve from scenario testing and actual incidents. 
  • Update operational resilience plans effectively.

Deliverables

New call-to-actionParticipants should be able to understand the details of an audit application: the planning, preparation, deployment, and implementation of an audit assignment.


Course Content for BL-ORA-5
New call-to-action New call-to-action New call-to-action New call-to-action

 


More Information About Blended Learning Operational Resilience Audit (ORA) Courses

BCM Institute offers two levels of OR auditing courses: ORA-3 Blended Learning ORA-300 Operational Resilience Audit Specialist and the ORA-5 Blended Learning ORA-5000 Operational Resilience Audit Expert.

New call-to-action New call-to-action New call-to-action
New call-to-action Tell Me More About BCM- 8030 New Call-to-action
     
New call-to-action New call-to-action Please feel free to send us a note if you have any questions.Email to Sales Team [BCM Institute] Operational Resilience Audit Specialist (ORAS) Certification New call-to-action
Read More

[ORA-3/5] [M2] What is Needed to Complete Module 2 of the ORA-5000 Blended Learning Course?

 
New call-to-action

What Are You Required to Complete for Module 2 of the ORA-300/ 5000 Programme?

Module 2: Facilitated Online Workshop

[BL-ORA] [3] M2 What is ORA-300?To complete Module 2 of the ORA-5000  (ORA-5) / ORA-300 (ORA-3) course, participants must attend a walk-through of the overview of the "Implement" phase and the five stages of the OR Implementation process. 

These are:

  1. Build an Operational Resilience Programme
  2. Recognize and analyze types of operational disruptions

The five stages are:

  1. Identify critical business services
  2. Set appropriate impact tolerances for critical business services
  3. Map operational resilience across the organization
  4. Perform scenario testing
  5. Communicate operational resilience plans effectively

New call-to-actionClick the "Course Content" button to find out more about the content for Module 2.

Before attending each of the two facilitated online workshops, the typical activities to complete each phase are as appended below.

The Sequence of A Typical Walkthrough of Each Module

New call-to-action

  • A typical walk-through of a Module 2 consists of the following:

    1. Pre-reading [Maximum of a half hour]
    2. Download and Complete the template [Maximum of one hour]
    3. Attend a Facilitated Online Workshop [Maximum of three hours]
[1] Pre-reading

 

IC_BL_PreReading

Pre-readings assigned are blog articles. Participants are recommended to complete them before the session as it serves as 'bite-sized' background information, allowing participants to familiarize themselves with the concepts to be discussed. 

It would also assist participants in completing their assignment in the following 1-hour online session.

 

Time Requirement
Module 2 [1]
Half Hour
(Per phase)

 

[2] Download and Complete Template

Once the schedule for the specific phase is confirmed, you will be notified to proceed to download the assignment template and have your first attempt at completing the specific module.

What if you are completing the form and do not understand the purpose or requirement of the field that you are completing?

Objectives of Session

The objective is to fully understand the purpose and requirements of each entry in the assignment template before you attend the corresponding online workshop.

You may wonder why you are doing the template when the lesson has not yet been conducted.  It will also allow you to contextualize your business environment and ask related questions with the help of the pre-reading material provided.

 

[2] Time Requirement
Module 2 [2]
One Hour
(Per Phase)

 

[3] Attend Facilitated Online Workshop

To complete Module 2, participants must attend two (2) online workshop sessions (three hours per session).  All sessions are compulsory and run on a pre-determined schedule. There would not be a repeat or substitute session for anyone who missed it.

Online Session 1
  • Recognize and analyze types of operational disruptions
  • Identify important business services
  • Set appropriate impact tolerances for critical business services
  • Identify important business services
  • Set appropriate impact tolerances for critical business services.
Online Session 2
  • Map operational resilience across the organization
  • Perform scenario testing
  • Communicate operational resilience plans effectively

In addition, you are required to:

  • Submit your completed assignment template (via eCampus) to the facilitator within two days after the Facilitated Online session. 
  • Do note that you should have completed the template (do not submit it) before you attend the online session.

 

Time Requirement Module 2 [3] Three Hour
Per Online Session

Breakdown of Time Spent

Here is a breakdown of the time spent for Module 2 for two 3-1/2 hours per session.

 

Module Mode of Study Hours
M2-S1

Web Training and Discussion Workshop

  • 1-Hour Self Study (Pre-reading and review of the case study)
  • 3-Hour Schedule Online Classes
4
M2-S2

Web Training and Discussion Workshop

  • 1-Hour Self Study (Pre-reading and review of the case study)
  • 1-Hour Preparation Assignment to complete the Audit Questionnaires
  • 3-Hour Schedule Online Classes
5
  Total Hours 9

 

More Information About Blended Learning Operational Resilience Audit (ORA) Courses

BCM Institute offers two levels of OR auditing courses: ORA-3 Blended Learning ORA-300 Operational Resilience Audit Specialist and the ORA-5 Blended Learning ORA-5000 Operational Resilience Audit Expert.

New call-to-action New call-to-action New call-to-action
New call-to-action Tell Me More About BCM- 8030 New Call-to-action
     
New call-to-action Please feel free to send us a note if you have any questions. New call-to-action
New call-to-action Email to Sales Team [BCM Institute] Operational Resilience Audit Specialist (ORAS) Certification
 
 
 
Read More
[ORA-5] Module (Day) 3 of ORA-5000 Operational Resilience Audit Expert

[ORA-5] Module (Day) 3 of ORA-5000 Operational Resilience Audit Expert

 

New call-to-actionOperational Resilience Expert Auditor (ORA-5000) Training Roadmap [Module 3

ORA Learning Roadmap Know-Do-Manage

Description of Module [Day] 3 Course 

New call-to-action

Detailed Course Content

The participants should understand the key areas and considerations when auditing the operational resilience project and program. By understanding the OR framework and requirements aligned to international and local OR standards and the audit process, the participants can develop the audit and compliance strategy.

This is followed by the implementation of an audit checklist with an audit programme that is aligned with the specific industry and business requirements with

The participant should, at a minimum, attain a basic grasp of OR concepts and principles:

In summary, participants should be able to:

 

 Introducing Operational Resilience Auditing
  • What is Operational Resilience and OR Audit? 
  • What is the difference between BCM and CM audit?
  • Evolution of Operational Resilience Auditing
  • Key regulatory drivers and frameworks
  • Audit methodologies and techniques
  • Roles and responsibilities of operational resilience auditors
  • Internal vs External OR Auditing
Planning for the OR Audit [Audit Planning]
  • Establish the scope and objectives of the OR audit.
  • Identify key stakeholders and their roles.
  • Develop a comprehensive audit plan outlining timelines, resources, and methodologies.
Determine the Data to be Collected [Data Collection]
  • Identify relevant data sources related to operational resilience.
  • Define data collection methods and tools.
  • Ensure that the data collected aligns with the audit objectives and scope.
Analyse the Data Collected from the Auditees [Data Analysis]
  • Employ analytical techniques to examine the collected data.
  • Identify patterns, trends, and potential areas of concern.
  • Collaborate with auditees to clarify and validate data points.

The Standardised Audit Program or Audit Checklist will be developed in Module 3. The participant will be orientated to the content of the operational resilience before the practicum starts.

New call-to-action

Deliverables

  • Able to have a good understanding of Operational Resilience Audit
  • Able to conduct audit fieldwork on an organisation
  • Able to perform an audit interview and present findings of the audit

 

Course Content for ORA-5
New call-to-action New call-to-action New call-to-action New call-to-action

More Information About Blended Learning Operational Resilience Audit (ORA) Courses

BCM Institute offers two levels of OR auditing courses: ORA-3 Blended Learning ORA-300 Operational Resilience Audit Specialist and the ORA-5 Blended Learning ORA-5000 Operational Resilience Audit Expert.

New call-to-action New call-to-action New call-to-action
New call-to-action Tell Me More About BCM- 8030 New Call-to-action
ORAE Operational Resilience Audit Expert Certification Email to Sales Team [BCM Institute] ORAS Operational Resilience Audit Specialist Certification
New call-to-action Please feel free to send us a note if you have any questions. New call-to-action
 
 
Read More