This is the second phase [P2] in the operational resilience (OR) planning methodology, and each learning objective for the five stages is provided for the learners.
The program's constructs, such as policy, framework, and implementation strategy, are all finalized before embarking on the phase.
The approach is to implement its operational resilience program using the following phases.
If you need to know more about the technical terms, click the BCMPedia icon to learn more
These are the five stages of the "Implement" phase of your OR program.
|
OR Planning Methodology
Implement Phase
|
Key Activities [S1 to S5] and Learning Objectives for Implement Phase [P2] |
|
[S1] Identify Critical Business Services
|
Determine which business services are critical.
Note that these three terms: "Important Business Services," "Critical Business Services", and "Critical Operations", are different but synonymous for ease of explanation.
|
|
|
[S1] Learning Objectives
|
|
|
- Define and apply the concept of Critical Business Services (CBS) in the context of operational resilience.
- Identify the challenges and complexities in quantifying and prioritising CBS within an organisation.
- Evaluate different approaches and strategies for identifying CBS, including phased implementation and subject matter expert involvement.
- Develop a clear and consistent framework for CBS identification that can be adapted to local needs and regulations.
- Effectively communicate and present CBS information to stakeholders, including boards of directors, to gain buy-in and support.
|
|
[S2] Map Processes and Resources
|
Map the resources (people, processes, technology, facilities, and information) necessary to support the delivery of products and services. |
|
|
[S2] Learning Objectives |
|
|
- Understand the importance of mapping processes and resources for operational resilience.
- Identify the various elements that support CBS, including technology, people, processes, facilities, suppliers, and information.
- Recognize dependencies and connections between these internal and external elements to the organization (third and fourth parties).
- To identify critical connections, leverage business continuity principles, particularly upstream and downstream relationships.
|
|
[S3] Set Impact Tolerance
|
Assess how a disruptive event impacts business services and propose with justification the acceptable impact tolerances. |
|
|
[S3] Learning Objectives |
|
|
- Define and differentiate between impact tolerance, tolerable level of disruption (MTPD), and Recovery Time Objective (RTO).
- Explain the three categories of impact tolerance: intolerable harm, harm, and inconvenience.
- Describe the concept of "severe but possible" scenarios and the challenges associated with defining them.
- Identify methods for obtaining management approval for impact tolerance levels and scenarios.
- To establish impact tolerances, apply metrics like financial loss, reputational damage, and customer impact.
|
|
[S4] Conduct Scenario Testing
|
Test the organisation's ability to manage service delivery within impact tolerance in different scenarios. |
|
|
[S4] Learning Objectives |
|
|
- Differentiate operational resilience scenario testing from traditional BCM/crisis management testing.
- Design high-impact, significantly disruptive scenarios that align with regulatory expectations.
- Address "unlikely but impactful" scenarios in scenario design.
- Recognise the challenges and resource limitations of live testing.
- Explore alternative testing methods like tabletop exercises and simulations.
- Develop a phased approach to scenario testing based on organisational size and resources.
|
|
[S5] Improve Lesson Learnt
|
Improve and communicate remediation and vulnerabilities after scenario testing. |
|
|
[S5] Learning Objectives |
|
|
This module transforms experiences into actionable insights to strengthen your organisation's operational resilience. By the end of this session, you will be able to:
- Extract valuable learnings: Analyse past disruptions, scenario testing results, and incident reports to identify key takeaways that can enhance your operational resilience posture.
- Develop improvement plans: Translate identified learnings into concrete action plans with clear ownership, timelines, and measurable goals for improvement.
- Foster a learning culture: Champion open communication and encourage reporting of potential risks and near misses to create a continuous learning environment.
- Communicate effectively: Tailor communication strategies to diverse stakeholders (internal teams, regulators, clients) to ensure understanding and buy-in for improvement initiatives.
- Measure and evaluate: Track progress towards improvement goals and analyze data to refine action plans for greater operational resilience.
|
OR Planning Methodology [Roadmap] |
Plan [P1] |
Implement [P2] |
Sustain [P3] |
|
|
|
|
|
|
|
|
|
|
|
|
|
Learn more about Blended Learning OR-300 [BL-OR-3] and OR-5000 [BL-OR-5]
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.