--- title: Operational Resilience Audit | audit (6) description: audit | Operational Resilience Audit (6) --- [![BCMI Logo.png](https://blog.bcm-institute.org/hs-fs/hubfs/BCMI%20Logo.png?width=137&height=134&name=BCMI%20Logo.png "BCMI Logo.png")](https://www.bcm-institute.org/) Open main menu Close main menu - [Home](https://www.bcm-institute.org/) - [About Us](https://www.bcm-institute.org/about-us-3/) Open the submenu - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/) - [Our History](https://www.bcm-institute.org/about-us/our-history/) - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/) - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/) - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/) - [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) Open the submenu - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses) - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses) - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses) - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses) - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses) - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses) - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses) - [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) Open the submenu - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification) - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification) - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification) - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification) - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification) - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification) - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit) - [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage) - [Store](https://www.bcm-institute.org/store-2/) - [Contact Us](http://www.bcm-institute.org/about-us/contact-us/) # Operational Resilience Audit Select Category audit BCCLA BCM BCM-200 BCM-8030 BCM-8530 BCM Planning Methodology Blended Learning Books - Specialist Series Business Continuity Management certification Course Examination FAQ Hong Kong Monetary Authority Hybrid Learning ISO22301 Monetary Authority of Singapore Operational Resilience Operational Resilience Audit Operational Resilience Roadmap OR-200 OR-300 OR-400 OR-5000 ORA-300 ORA-400 ORA-5000 ORAE ORAS ORCE ORCP ORCS Posts about: ## audit (6) ![Challenges Faced: Measuring Resilience Effectively](https://blog.bcm-institute.org/hubfs/Operational%20Resilience%20Audit/CTA%20ORA%20Morepost/ORA%20Challenged%20Morepost/CTA_ORA_Challenge_Measuring%20Resilience%20Effectively.png) [audit,](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit) [Operational Resilience](https://blog.bcm-institute.org/operational-resilience-audit/tag/operational-resilience) ### [ORA Challenges Faced: Measuring Resilience Effectively](https://blog.bcm-institute.org/operational-resilience-audit/challenges-faced-measuring-resilience-effectively) Jan 9, 2024 8:38:39 PM #### Challenges Faced by Auditors when Conducting an Operational Resilience Audit #### Measuring Resilience Effectively   | Measuring operational resilience effectively poses significant challenges for auditors due to the qualitative and multifaceted nature of resilience. Subjectivity in Resilience Definition Facing the reality that "Resilience" can mean different things to different organisations and stakeholders. Defining what constitutes resilience in the context of an organisation might involve subjective judgments and varying perspectives, making it challenging to create a universally applicable measurement framework. Quantification of Resilience Translating the qualitative aspects of resilience into quantitative metrics or measurable indicators is complex. Attributes like adaptability, agility, or robustness—integral to resilience—are challenging to quantify in concrete terms. Lack of Standardized Metrics More standardised metrics or benchmarks must be needed to assess operational resilience across industries or sectors. Each organisation might have unique factors influencing its resilience, making creating a one-size-fits-all measurement framework challenging. Dynamic Nature of Resilience Resilience is not static; it evolves based on changing risks, strategies, and organisational adaptations. Static measurements might need to capture the dynamic nature of resilience more effectively. Interconnectedness of Factors  Various factors contribute to resilience, including technology, human resources, supply chains, and regulatory compliance. Understanding the interplay between these factors and their collective impact on resilience requires a comprehensive and holistic approach. Effectiveness of Response and Recovery Strategies Evaluating the effectiveness of response and recovery strategies involves assessing their implementation and actual impact during real-life disruptions. Predicting how well strategies will perform in unforeseen scenarios can be challenging. To address these challenges in the measurement of Resilience: Develop a customized measurement framework  Tailor the measurement criteria to fit the organisation's specific context, risks, and priorities. This might involve collaboration with stakeholders to define and prioritize resilience indicators. Focus on Qualitative Assessments Instead of relying solely on quantitative metrics, incorporate qualitative assessments, such as scenario analysis, stress testing, and maturity assessments, to gauge the organiSation's resilience. Iterative and adaptive approach Recognise that resilience measurement is an ongoing process. Review and refine measurement methodologies regularly to adapt to changing risks and organisational dynamics. Utilize a combination of leading and lagging indicators Use a mix of predictive indicators (leading) and historical data (lagging) to assess the proactive measures taken and the organisation's past performance in managing disruptions. Measuring operational resilience effectively remains a challenge, but through a nuanced and adaptive approach, auditors can develop robust methodologies that provide valuable insights into an organisation's ability to withstand and recover from disruptions. Summing Up ... Addressing these challenges often requires a multidisciplinary approach involving collaboration across various departments, access to updated information, leveraging technological solutions for data analysis, and continuous adaptation to emerging threats. Flexibility and agility in audit methodologies are crucial to assess and enhance an organisation's operational resilience effectively. Types of Challenges Faced by OR Auditor and Reviewer   Find out more about Blended Learning ORA-5000 \[BL-ORA-5\] & ORA-300 \[BL-ORA-3\] | | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237) | [![Tell Me More About BCM- 8030](https://no-cache.hubspot.com/cta/default/3893111/4efea5b2-f209-48aa-b101-671debce9437.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4efea5b2-f209-48aa-b101-671debce9437) | [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82) | | --- | --- | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334) | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3) | Please feel free to send us a note if you have any of these questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41) | ![Moh Heng Goh](https://app.hubspot.com/settings/avatar/970b3fc77336e0347b69e316ba48751e) [Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience-audit/author/moh-heng-goh) [Read More](https://blog.bcm-institute.org/operational-resilience-audit/challenges-faced-measuring-resilience-effectively) ![ORA Challenges Faced: Regulatory Compliance](https://blog.bcm-institute.org/hubfs/Operational%20Resilience%20Audit/CTA%20ORA%20Morepost/ORA%20Challenged%20Morepost/CTA_ORA_Challenge_Regulatory%20Compliance.png) [audit,](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit) [Operational Resilience](https://blog.bcm-institute.org/operational-resilience-audit/tag/operational-resilience) ### [ORA Challenges Faced: Regulatory Compliance](https://blog.bcm-institute.org/operational-resilience-audit/challenges-faced-regulatory-compliance) Jan 9, 2024 8:14:38 PM #### Challenges Faced by Auditors when Conducting an Operational Resilience Audit #### Regulatory Compliance   | What challenges do auditors face when conducting an operational resilience audit in a "Regulatory Compliance"?  Auditors must ensure the organisation maintains resilience and adheres to legal and industry-specific regulations.  Navigating regulatory compliance during operational resilience audits presents several challenges for auditors. Diverse Regulatory Landscape Organisations often operate in multiple jurisdictions, each with regulations and compliance requirements. Auditors must navigate this diverse landscape, ensuring adherence to various legal frameworks, industry standards, and international regulations. Complexity of Regulatory Changes Regulatory requirements are subject to frequent updates and changes due to evolving threats, technological advancements, or geopolitical shifts. Keeping up with these changes and assessing their impact on operational resilience can be challenging. Interplay of Regulations Different regulations might overlap or conflict, adding complexity to compliance efforts. Balancing and aligning resilience strategies to meet the requirements of multiple regulations without compromising effectiveness can be intricate. Depth of Compliance Assessment Ensuring compliance is about more than just meeting regulatory checkboxes. Auditors must assess whether the organisation's resilience strategies effectively address the spirit and intent of regulations, which requires a nuanced understanding beyond surface-level compliance. Documentation and Reporting Burden Compliance often involves extensive documentation and reporting requirements. Auditors must ensure that the organisation maintains thorough records of resilience strategies, risk assessments, and compliance measures, which can be resource-intensive. Third-Party Compliance Assessing the compliance of third-party vendors, partners, or suppliers with regulatory standards adds complexity. The organisation is responsible for its compliance and ensuring its external entities adhere to relevant regulations. Strategy to Navigate These Challenges   Continuous Monitoring and Adaptation Stay updated on regulatory changes and their implications for operational resilience. Implement a system for continuous monitoring to ensure timely adjustments to compliance strategies. Holistic Compliance Approach Develop an integrated approach that aligns resilience strategies with various regulatory requirements. This approach should address current regulations and anticipate future compliance needs. Collaboration and Expertise Engage with legal experts, compliance officers, and industry specialists to gain insights into complex regulatory requirements and their implications on resilience strategies. Robust Documentation Practices Establish comprehensive documentation and reporting procedures that meet compliance requirements and serve as valuable records for auditing and improvement. Third-Party Due Diligence Implement stringent due diligence processes to ensure third-party compliance with relevant regulations, extending the compliance framework to external entities. Effectively managing regulatory compliance in operational resilience audits requires a proactive and comprehensive approach beyond mere adherence to regulations, focusing on building a resilient framework that aligns with regulatory expectations while safeguarding against disruptions. Summing Up ... Addressing these challenges often requires a multidisciplinary approach involving collaboration across various departments, access to updated information, leveraging technological solutions for data analysis, and continuous adaptation to emerging threats. Flexibility and agility in audit methodologies are crucial to assess and enhance an organisation's operational resilience effectively. Types of Challenges Faced by OR Auditor and Reviewer   Find out more about Blended Learning ORA-5000 \[BL-ORA-5\] & ORA-300 \[BL-ORA-3\] | | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237) | [![Tell Me More About BCM- 8030](https://no-cache.hubspot.com/cta/default/3893111/4efea5b2-f209-48aa-b101-671debce9437.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4efea5b2-f209-48aa-b101-671debce9437) | [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82) | | --- | --- | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334) | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3) | Please feel free to send us a note if you have any of these questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41) | ![Moh Heng Goh](https://app.hubspot.com/settings/avatar/970b3fc77336e0347b69e316ba48751e) [Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience-audit/author/moh-heng-goh) [Read More](https://blog.bcm-institute.org/operational-resilience-audit/challenges-faced-regulatory-compliance) ![Challenges Faced: Resource Constraints](https://blog.bcm-institute.org/hubfs/Operational%20Resilience%20Audit/CTA%20ORA%20Morepost/ORA%20Challenged%20Morepost/CTA_ORA_Challenge_Resources%20Constraints.png) [audit,](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit) [Operational Resilience](https://blog.bcm-institute.org/operational-resilience-audit/tag/operational-resilience) ### [ORA Challenges Faced: Resource Constraints](https://blog.bcm-institute.org/operational-resilience-audit/ora-challenges-faced-resource-constraints) Jan 8, 2024 9:18:16 PM #### Challenges Faced by Auditors when Conducting an Operational Resilience Audit #### Resource Constraints | Resource constraints can significantly impede auditors during operational resilience audits: Auditors affected by constraints in resources must take the following considerations when conducting the OR audit. Personnel Limitations Deliver a comprehensive audit demands skilled professionals with expertise in various domains, including risk management, technology, business processes, and compliance. Attempt to limit the number of personnel involved in the audit might restrict the breadth of expertise available for a thorough assessment. Time Constraints Auditors might face pressure to complete audits within tight timelines. Rushed assessments can compromise the depth of analysis, leading to oversight of critical vulnerabilities or inadequate exploration of resilience strategies. Access to Specialised Tools and Technology Effective audits often rely on specialised tools for data analysis, risk modelling, and scenario planning. Understand budget constraints might limit access to or investment in these tools, impacting the sophistication and accuracy of the audit process. Scope Limitations Result in narrowing the audit scope  because of resource limitations Necessitate and potentially leaving out certain critical areas from the assessment.   May compromise the comprehensiveness of the OR audit and might overlook significant risks. Training and Skill Development Maintain continuous training and skill development are essential for auditors to keep up with evolving risks and methodologies. Understand that resource constraints might limit opportunities for ongoing professional development, affecting the quality of audit practices. Strategy to Mitigate These Challenges Prioritisation Focus on the most critical business services or functions for business continuity. Prioritise critical business services based on risk impact can ensure limited resources are allocated to areas with the highest potential risk. Collaboration and Partnerships Collaborate with internal stakeholders, external experts, or other audit teams to leverage additional expertise or resources. Enhance partnerships to expand the depth of analysis and have access to specialised knowledge or tools. Efficiency and Optimization Streamline audit processes using automation, standardised templates, or efficient workflows. This can help optimize resource usage and maximize the effectiveness of available resources. Strategic Resource Allocation Allocate resources strategically by identifying high-impact areas that require more attention and dedicating resources accordingly. Deploy a risk-based approach will help prioritise resource allocation. Continuous Improvement Adopt the aim for continuous improvement in audit methodologies despite limitations. Encourage learning from each audit cycle and refine audit approaches can maximize the impact of available resources. While resource constraints pose challenges, strategic planning, collaboration, and focusing on critical areas can help auditors make the most of available resources and conduct effective operational resilience audits. Summing Up ... Addressing these challenges often requires a multidisciplinary approach involving collaboration across various departments, access to updated information, leveraging technological solutions for data analysis, and continuous adaptation to emerging threats. Flexibility and agility in audit methodologies are crucial to assess and enhance an organisation's operational resilience effectively. Types of Challenges Faced by OR Auditor and Reviewer     Find out more about Blended Learning ORA-5000 \[BL-ORA-5\] & ORA-300 \[BL-ORA-3\] | | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237) | [![Tell Me More About BCM- 8030](https://no-cache.hubspot.com/cta/default/3893111/4efea5b2-f209-48aa-b101-671debce9437.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4efea5b2-f209-48aa-b101-671debce9437) | [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82) | | --- | --- | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334) | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3) | Please feel free to send us a note if you have any of these questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41) | ![Moh Heng Goh](https://app.hubspot.com/settings/avatar/970b3fc77336e0347b69e316ba48751e) [Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience-audit/author/moh-heng-goh) [Read More](https://blog.bcm-institute.org/operational-resilience-audit/ora-challenges-faced-resource-constraints) ![](https://blog.bcm-institute.org/hubfs/Operational%20Resilience%20Audit/Operational%20Resilience%20Audit%20CTA%20Button/IC_ORA-300_Module%202.png) [certification,](https://blog.bcm-institute.org/operational-resilience-audit/tag/certification) [audit,](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit) [Course,](https://blog.bcm-institute.org/operational-resilience-audit/tag/course) [Blended Learning](https://blog.bcm-institute.org/operational-resilience-audit/tag/blended-learning) ### [\[ORA-3/5\] \[M2\] What is Needed to Complete Module 2 of the ORA-5000 Blended Learning Course?](https://blog.bcm-institute.org/operational-resilience-audit/ora-5-m2-what-is-needed-to-complete-module-2-of-the-ora-5000-blended-learning-course) Jan 7, 2024 11:12:23 PM ##### [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/5411be84-441a-42e0-8059-8136c82c4332.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/5411be84-441a-42e0-8059-8136c82c4332) #### What Are You Required to Complete for Module 2 of the ORA-300/ 5000 Programme? ##### Module 2: Facilitated Online Workshop [![\[BL-ORA\] \[3\] M2 What is ORA-300?](https://no-cache.hubspot.com/cta/default/3893111/73647d96-98df-4207-a85c-b9f80c790cff.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/73647d96-98df-4207-a85c-b9f80c790cff)To complete **Module 2** of the ORA-5000  (ORA-5) / ORA-300 (ORA-3) course, participants must attend a walk-through of the overview of the "Implement" phase and the five stages of the OR Implementation process.  These are: 1. Build an Operational Resilience Programme 2. Recognize and analyze types of operational disruptions The five stages are: 1. Identify critical business services 2. Set appropriate impact tolerances for critical business services 3. Map operational resilience across the organization 4. Perform scenario testing 5. Communicate operational resilience plans effectively [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/fb67a165-6c42-43e6-8187-3ada7b62db31.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb67a165-6c42-43e6-8187-3ada7b62db31)Click the "Course Content" button to find out more about the content for Module 2. Before attending each of the two facilitated online workshops, the typical activities to complete each phase are as appended below. #### The Sequence of A Typical Walkthrough of Each Module [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/a266b07d-fd3e-4748-b632-d044f442286b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a266b07d-fd3e-4748-b632-d044f442286b) - A typical walk-through of a Module 2 consists of the following: 1. Pre-reading ***\[Maximum of a half hour\]*** 2. Download and Complete the template ***\[Maximum of one hour\]*** 3. Attend a Facilitated Online Workshop ***\[Maximum of three hours\]*** | **\[1\] Pre-reading** | | --- |   ![IC_BL_PreReading](https://blog.bcm-institute.org/hs-fs/hubfs/Blended%20Learning/IC_BL_PreReading.png?width=100&name=IC_BL_PreReading.png) Pre-readings assigned are** blog articles.** Participants are recommended to complete them before the session as it serves as 'bite-sized' background information, allowing participants to familiarize themselves with the concepts to be discussed.  It would also assist participants in completing their assignment in the following 1-hour online session.   | Time Requirement | ###### Module 2 \[1\] | ###### Half Hour (Per phase) | | --- | --- | --- |   | **\[2\] Download and Complete Template** | | --- | Once the schedule for the specific phase is confirmed, you will be notified to proceed to download the assignment template and have your first attempt at completing the specific module. What if you are completing the form and do not understand the purpose or requirement of the field that you are completing? ###### Objectives of Session The objective is to fully understand the purpose and requirements of each entry in the assignment template before you attend the corresponding online workshop. You may wonder why you are doing the template when the lesson has not yet been conducted.  It will also allow you to contextualize your business environment and ask related questions with the help of the pre-reading material provided.   | \[2\] Time Requirement | ###### Module 2 \[2\] | ###### One Hour (Per Phase) | | --- | --- | --- |   | **\[3\] Attend Facilitated Online Workshop** | | --- | To complete Module 2, participants must attend two (2) online workshop sessions (three hours per session).  All sessions are compulsory and run on a pre-determined schedule. There would not be a repeat or substitute session for anyone who missed it. ##### Online Session 1 - Recognize and analyze types of operational disruptions - Identify important business services - Set appropriate impact tolerances for critical business services - Identify important business services - Set appropriate impact tolerances for critical business services. ##### Online Session 2 - Map operational resilience across the organization - Perform scenario testing - Communicate operational resilience plans effectively In addition, you are required to: - Submit your completed assignment template (via eCampus) to the facilitator within two days after the Facilitated Online session.  - Do note that you should have completed the template (do not submit it) before you attend the online session.   | Time Requirement | Module 2 \[3\] | Three Hour Per Online Session | | --- | --- | --- | #### Breakdown of Time Spent Here is a breakdown of the time spent for Module 2 for two 3-1/2 hours per session.   | **Module** | **Mode of Study** | **Hours** | | --- | --- | --- | | M2-S1 | **Web Training and Discussion Workshop** - 1-Hour Self Study (Pre-reading and review of the case study) - 3-Hour Schedule Online Classes | 4 | | M2-S2 | **Web Training and Discussion Workshop** - 1-Hour Self Study (Pre-reading and review of the case study) - 1-Hour Preparation Assignment to complete the Audit Questionnaires - 3-Hour Schedule Online Classes | 5 | |   | **Total Hours** | **9** | #### More Information About Blended Learning Operational Resilience Audit (ORA) Courses BCM Institute offers two levels of OR auditing courses: ORA-3 Blended Learning ORA-300 Operational Resilience Audit Specialist and the ORA-5 Blended Learning ORA-5000 Operational Resilience Audit Expert. | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334) | | --- | --- | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237) | [![Tell Me More About BCM- 8030](https://no-cache.hubspot.com/cta/default/3893111/4efea5b2-f209-48aa-b101-671debce9437.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4efea5b2-f209-48aa-b101-671debce9437) | [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82) | |   |   |   | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41) | Please feel free to send us a note if you have any questions. | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3) | | --- | --- | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/ad4d0913-dab5-4d4d-aa9d-2bcfd0ef58a7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ad4d0913-dab5-4d4d-aa9d-2bcfd0ef58a7) | [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![Operational Resilience Audit Specialist (ORAS) Certification](https://no-cache.hubspot.com/cta/default/3893111/88f2510f-d8b7-463b-b26c-fe648261123d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/88f2510f-d8b7-463b-b26c-fe648261123d) |       ![Rose Lam](https://blog.bcm-institute.org/hs-fs/hubfs/Photo%20Staff/Rose%20Lam.jpg?width=45&name=Rose%20Lam.jpg) [Rose Lam](https://blog.bcm-institute.org/operational-resilience-audit/author/rose-lam) [Read More](https://blog.bcm-institute.org/operational-resilience-audit/ora-5-m2-what-is-needed-to-complete-module-2-of-the-ora-5000-blended-learning-course) ![Challenges Faced: Dynamic Risk Landscape](https://blog.bcm-institute.org/hubfs/Operational%20Resilience%20OR/Operational%20Resilience%20Morepost/IC_OR_BCMPedia_Audit.png) [audit,](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit) [Operational Resilience](https://blog.bcm-institute.org/operational-resilience-audit/tag/operational-resilience) ### [ORA Challenges Faced: Dynamic Risk Landscape](https://blog.bcm-institute.org/operational-resilience-audit/challenges-faced-scope-definition-0) Jan 7, 2024 3:03:31 PM #### Challenges Faced by Auditors when Conducting an Operational Resilience Audit #### Dynamic Risk Landscape   | Navigating a dynamic risk landscape during an operational resilience audit presents auditors with several formidable challenges: Rapidly Evolving Threat Landscape The landscape of risks continually shifts due to emerging threats, technological advancements, and evolving tactics used by malicious actors. New risks like cyberattacks, data breaches, supply chain vulnerabilities, or geopolitical crises constantly emerge, requiring auditors to stay updated and anticipate potential disruptions. Unforeseen Threats and Black Swan Events Some disruptions, often termed "black swan events," are unforeseen or improbable. These events, such as pandemics, extreme weather incidents, or geopolitical conflicts, can have significant, far-reaching impacts that are challenging to predict or prepare for adequately. Complexity in Risk Assessment Assessing and quantifying these emerging and evolving risks is challenging. They might need historical data for analysis, making it hard to gauge their potential impact accurately. Understanding the interplay between various risks and their cascading effects further complicates the assessment. Regulatory and Compliance Changes Regulatory changes, shifts in industry standards, or geopolitical changes can introduce new compliance requirements or alter the risk landscape. Keeping abreast of these changes and assessing their impact on operational resilience adds another layer of complexity to the audit process. Balancing Proactivity and Reactivity Anticipating and preparing for all potential disruptions is an immense challenge. Auditors must balance proactive measures—such as scenario planning and stress testing—and reactive strategies to effectively address unforeseen disruptions. Resource Constraints Staying ahead of an ever-evolving risk landscape demands significant resources, including access to specialised expertise, tools for real-time monitoring, and continuous training to keep abreast of new threats. Navigating the Dynamic Risk Landscape as an OR Auditor ... Limited resources constrain the ability to proactively identify and mitigate emerging risks effectively. Auditors must adopt agile methodologies for continuous risk assessment and scenario planning to address these challenges. They must collaborate with industry experts, leverage predictive analytics and threat intelligence, and conduct robust stress tests that simulate disruptive scenarios. Also, fostering a resilient organisational culture can help adapt and respond. Summing Up ... Addressing these challenges often requires a multidisciplinary approach involving collaboration across various departments, access to updated information, leveraging technological solutions for data analysis, and continuous adaptation to emerging threats. Flexibility and agility in audit methodologies are crucial to assess and enhance an organisation's operational resilience effectively. Types of Challenges Faced by OR Auditor and Reviewer   Find out more about Blended Learning ORA-5000 \[BL-ORA-5\] & ORA-300 \[BL-ORA-3\] | | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237) | [![Tell Me More About BCM- 8030](https://no-cache.hubspot.com/cta/default/3893111/4efea5b2-f209-48aa-b101-671debce9437.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4efea5b2-f209-48aa-b101-671debce9437) | [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82) | | --- | --- | --- | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334) | | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3) | Please feel free to send us a note if you have any of these questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41) | ![Moh Heng Goh](https://app.hubspot.com/settings/avatar/970b3fc77336e0347b69e316ba48751e) [Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience-audit/author/moh-heng-goh) [Read More](https://blog.bcm-institute.org/operational-resilience-audit/challenges-faced-scope-definition-0) [4](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit/page/4) [5](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit/page/5) [6](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit/page/6) [7](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit/page/7) [8](https://blog.bcm-institute.org/operational-resilience-audit/tag/audit/page/8) #### More About Us - BCM Certification - BCM Institute Code of Ethic - Contact Us [Follow us on Facebook](https://www.facebook.com/people/Business-Continuity-Resiliency-Certification-Institute/100076077522073/?paipv=0&eav=AfadYlvGYlKFiAwSRhdWttoRma9-2SYiuD01qCq4BOIYcDs3bGuQ-Sj7eFTYWwmt7Uw&_rdr) [Follow us on LinkedIn](https://my.linkedin.com/school/business-continuity-management-institute-bcm-institute/people) [Follow us on Facebook](https://www.youtube.com/@BCMInstitute)