---
title: [Plan] [OR] [P1] [S4] Confirming Risk Appetite
description: [OR] [P1] [S4] Confirming Risk Appetite
image: https://blog.bcm-institute.org/hubfs/Operational%20Resilience%20OR/Operational%20Resilience%20Morepost/OR%20Blog%20New%20Morepost/OR_Blog_Confirming%20Risk%20Appetite.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
###### Operational Resilience Planning Methodology: "Your Guide To" Series
![BB OR \[B\] 13](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/OR%20Pictures%20A/BB%20OR%20Folder%20B/BB%20OR%20%5BB%5D%2013.jpg?width=2000&height=1333&name=BB%20OR%20%5BB%5D%2013.jpg "BB OR [B] 13")
# \[Plan\] \[OR\] \[P1\] \[S4\] Confirming Risk Appetite
[![\[E2\] \[C6\] \[P1\] \[S4\] Confirming Risk Appetite](https://no-cache.hubspot.com/cta/default/3893111/36bc08e8-54f0-4b0b-b402-6d96c72dc3bb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/36bc08e8-54f0-4b0b-b402-6d96c72dc3bb)[](https://cta-redirect.hubspot.com/cta/redirect/3893111/e79920b1-f011-4156-8426-7a6b98530511)Operational resilience is the ability of an organisation to withstand, adapt to, and quickly recover from disruptive events.
Management must identify, develop, measure, and confirm the organisation's risk appetite to achieve operational resilience.
This blog will discuss how management can carry out these activities and outline the steps to confirm the risk appetite for operational resilience.
[![\[OR\] \[Banner\] \[Guide\] \[P1\] \[S4\] Confirm Risk Appetite](https://no-cache.hubspot.com/cta/default/3893111/f73d0c10-e7cb-41a8-a6d9-3285e575b81a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f73d0c10-e7cb-41a8-a6d9-3285e575b81a)
[Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience/author/moh-heng-goh) May 15, 2023
###### Operational Resilience Certified Planner-Specialist-Expert
### [![\[E2\] \[C6\] \[P1\] \[S4\] Confirming Risk Appetite](https://no-cache.hubspot.com/cta/default/3893111/36bc08e8-54f0-4b0b-b402-6d96c72dc3bb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/36bc08e8-54f0-4b0b-b402-6d96c72dc3bb)Confirming Risk Appetite
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/75653343-ef0d-4799-83cc-96914a06ca14)
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/0bbba9e2-d8f3-4406-8a30-9f94cda9ad99)For an organisation to achieve an acceptable level of operational resilience, management must identify, develop, measure, and confirm the organisation's risk appetite.
This blog will discuss how management can carry out these activities and outline the steps to confirm the risk appetite for operational resilience.
#### [![\[OR\] \[Banner\] \[Guide\] \[P1\] \[S4\] Confirm Risk Appetite](https://no-cache.hubspot.com/cta/default/3893111/f73d0c10-e7cb-41a8-a6d9-3285e575b81a.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f73d0c10-e7cb-41a8-a6d9-3285e575b81a)
#### Identifying the Organisation's Overall Risk Appetite
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1b620a23-ced7-40ac-a175-b9d412cf8f3a)
The first step in developing the risk appetite for operational resilience is to identify the organisation's overall risk appetite.
This involves considering the organisation's strategic goals, values, and culture, as well as stakeholders' expectations, such as investors, customers, and regulators.
Management should also consider the potential impact of disruptive events on the organisation's reputation, financial performance, and ability to meet its obligations.
#### Developing Risk Appetite for Operational Resilience
Once the overall risk appetite is identified, management can develop the risk appetite for operational resilience.
This involves defining the organisation's tolerance for disruption and setting targets for recovery time objectives (RTOs) and recovery point objectives (RPOs).
Management should also consider the organisation's critical business services and prioritise the resources and investments needed to maintain operational resilience.
#### Measuring Risk Appetite
To measure the risk appetite for operational resilience, management should establish key performance indicators (KPIs) and metrics to track the organisation's performance against the risk appetite.
KPIs should be aligned with the organisation's strategic goals and easily measurable and understandable.
Management should also consider the frequency and intensity of scenario testing and simulation exercises to validate the organisation's ability to meet the risk appetite.
#### Confirming Risk Appetite
The final step in confirming the risk appetite for operational resilience is to conduct periodic reviews and updates.
This involves monitoring changes in the organisation's strategic goals, the external environment, and stakeholder expectations.
Management should also consider the results of testing and simulation exercises and adjust the risk appetite as needed to reflect the organisation's evolving needs.
#### Steps for Confirming Risk Appetite
- Define the risk appetite for operational resilience, considering the organisation's strategic goals, values, culture, and stakeholders' expectations.
- Set targets for RTOs and RPOs, prioritise resources and investments, and establish KPIs and metrics to measure performance.
- Conduct periodic testing and simulation exercises to validate the organisation's ability to meet the risk appetite.
- Monitor changes in the organisation's strategic goals, the external environment, and stakeholder expectations and adjust the risk appetite as needed.
[![\[Banner\] \[Summing\] \[OR\] \[E2\] \[C6\] Confirming Risk Appetite](https://no-cache.hubspot.com/cta/default/3893111/c13a1d8c-3234-4a1a-a30b-393e264dd957.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c13a1d8c-3234-4a1a-a30b-393e264dd957)
Confirming the risk appetite for operational resilience is an ongoing process that requires management to continuously monitor and adjust it to reflect the organisation's evolving needs.
By following the steps outlined in this report, organisations can develop a risk appetite that aligns with their strategic goals and helps to ensure their ability to withstand, adapt to, and recover from disruptive events.
#### "Plan" Phase of the OR Planning Methodology
| **Assess Capability and Maturity** | **Analyse Gap** | **Develop Strategy and Roadmap** | **Confirm Risk Appetite** | **Develop and Embed Governance** | |
| --- | --- | --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a5acb961-f2ec-4567-b636-874e365c892e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/48ad32d4-5765-4202-bcfd-4842c25cb2e2) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/891c6c74-ae2a-4b88-8389-9bd88e49e284) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/75653343-ef0d-4799-83cc-96914a06ca14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7cf54cf9-f96e-45a7-aa4c-0ae5c3c9a24a) | |
#### More Information About Blended Learning OR-5000 \[BL-OR-5\] or OR-300 \[BL-OR-3\]
Contact our course consultant colleagues to learn more about our blended learning program and about the next course's schedule. They are the BL-OR-3 Blended Learning OR-300 Operational Resilience Implementer and the BL-OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/32739296-1993-4215-8dbf-5b3e1caa8f40) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |
#### **Comments**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/d41714c9-8019-4282-95bf-08d62ddc4710)
All rights reserved. Copyright 2026