[OR] [P3-S4] [1-4] Prepare Self-Assessment: Gather Data & Evidence

[1-4] Gathering Data and Evidence?

In the Sustain phase of the Operational Resilience (OR) planning methodology, collecting relevant data and evidence is crucial for a comprehensive self-assessment. This data will support your evaluation of your organization's resilience performance against established criteria.

Key considerations for data collection include identifying appropriate sources, selecting suitable methods, ensuring data quality, and adhering to privacy regulations. Potential data sources may include internal documents, external data, and information gathered through interviews and surveys.

By carefully selecting data sources and employing effective collection methods, you can obtain the necessary information to support your analysis and identify areas for improvement. This data will provide a solid foundation for self-assessment and inform your decision-making regarding future actions to enhance operational resilience.

Collecting relevant data and evidence is crucial for the self-assessment process in the Sustain phase of the Operational Resilience (OR) planning methodology. This data will be used to evaluate your organization's resilience performance against the established criteria.

Key Considerations

Data Sources: Identify relevant data sources, including internal documents, records, databases, and external data if applicable.
Data Collection Methods: Determine the most appropriate methods for collecting data, such as interviews, surveys, document reviews, or performance metrics.
Data Quality: Ensure the data collected is accurate, reliable, and representative of your organization's operations.
Data Privacy: Consider data privacy regulations and ensure that data is collected and handled in compliance with legal requirements.

Potential Data Sources

Internal Documents
- Risk assessments
- Business continuity and disaster recovery plans
- Incident reports
- Audit reports
- Performance metrics
External Data
- Industry benchmarks
- Regulatory guidelines
- Benchmarking reports
Interviews and Surveys
- Interviews with key stakeholders
- Employee surveys
- Customer satisfaction surveys

Data Collection Techniques

Interviews: Conduct structured or semi-structured interviews with relevant personnel to gather their insights and experiences.
Surveys: Distribute surveys to collect data from a wider range of stakeholders.
Document Review: Analyze existing documents and records to identify relevant information.
Performance Metrics: Collect data on key performance indicators (KPIs) related to operational resilience, such as downtime, financial losses, or customer satisfaction.

By carefully gathering data and evidence, you can support your self-assessment and provide a solid foundation for identifying areas for improvement and demonstrating compliance with regulatory requirements.

Additional Explanatory Note

Definition	Explanation	Definition
Self-Assessment	is to capture and document the steps taken towards operational resilience. is to provide a comprehensive and objective evaluation of the organisation's strategy and ability to respond to disruptions.
Self-Assessment Document	is to demonstrate the organisation’s resilience journey and how they have achieved compliance with the regulations.
Important Business Service	is a service provided by an organisation, or by another person on behalf of the organisation, to one or more clients which, if disrupted, could: cause intolerable harm to any one or more of the organisation’s clients, or pose a risk to the soundness, stability or resilience of the financial system or the orderly operation of the financial markets.
Critical Business Service	is a business service that, if disrupted, is likely to significantly impact the FSI’s safety and soundness, its customers or other FSI that depend on the business service.
Critical Operations	is defined as a business output that, if interrupted during the operational period, will cause financial loss, damage, or interruption to the delivery of goods or services essential to the organization’s continued operation or success.

"Sustain" Phase of the OR Roadmap

Introduce Culture Change	Develop Communication Strategy	Implement Training and Awareness	Provide Self-assessment	Conduct Independent Quality Review

More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.