[OR] [BOK] [1] [P1] [S1] Assess Capability and Maturity

Element

Description

Purpose

• To evaluate the organisation’s current level of resilience maturity, capability, and readiness to embark on the Operational Resilience (OR) journey.
• This establishes a baseline that informs strategy, resource allocation, and leadership buy-in.

• Identify the current state of resilience maturity across critical business services, functions, and dependencies.
• Benchmark against industry standards, regulations, and best practices (e.g., ISO 22316, supervisory requirements).
• Highlight strengths, gaps, and areas requiring urgent improvement.
• Develop a maturity roadmap that guides subsequent OR implementation stages.

Inputs

• Existing BCM, crisis management, IT disaster recovery, and risk management frameworks.
• Regulatory requirements and supervisory guidelines (e.g., financial regulators, sectoral authorities).
• Organisational policies, governance structures, and resilience-related audits or assessments.
• Stakeholder expectations and tolerance levels.

Activities

• Conduct a maturity assessment using structured frameworks (e.g., maturity models, diagnostic tools).
• Review existing resilience practices (BCM, cyber resilience, outsourcing/vendor management, operational risk management).
• Assess governance, accountability, and ownership structures for resilience.
• Identify critical business services and supporting dependencies already recognised within the organisation.
• Compare current practices with regulatory expectations and industry benchmarks.
• Document capability levels, gaps, and required resources.

Outputs

• OR Capability and Maturity Assessment Report.
• Gap analysis highlighting weaknesses and strengths.
• Maturity roadmap aligned with regulatory requirements and business priorities.
• Recommendations for building leadership awareness and securing resources.

Linkages

• Forms the foundation for P1-S2: Define Scope and Governance by identifying the current state and setting boundaries.
• Provides baseline metrics for P2 (Implement phase) activities, ensuring initiatives target real capability gaps.
• Links to BCMBoK 2 (Risk Analysis and Review) and BCMBoK 7 (Program Management) as part of an integrated resilience assessment.
• Supports alignment with external regulators and industry standards for compliance.