Operational Resilience Body of Knowledge (OR BoK) Series
Improve Lesson Learned

This blog explains the purpose and importance of improving and communicating lessons learned as the final stage of the Implement phase of the Operational Resilience (OR) Planning Methodology.
It demonstrates how organisations should systematically capture insights from scenario testing, operational disruptions, post-incident reviews, and industry events, and convert these findings into measurable improvement actions that strengthen operational resilience.
The blog emphasises the need to document vulnerabilities, assign ownership for remediation, communicate lessons across the organisation, and foster a culture of continuous learning and improvement.
For Operational Resilience practitioners and OR course participants, it provides a complete understanding of how lessons learned become a continuous feedback mechanism that enhances critical business services, strengthens resilience capabilities, and ensures the organisation is better prepared to anticipate, withstand, recover from, and adapt to future disruptions
Element
|
Description
|
|
Purpose
|
- To embed a culture of continuous improvement in Operational Resilience (OR) by systematically capturing, analysing, and communicating lessons learned from disruptions, scenario tests, and industry events.
- This ensures the OR framework remains adaptive and forward-looking.
|
| Objectives |
- Institutionalise a learning culture across the organisation.
- Capture lessons from internal disruptions, exercises, and scenario tests.
- Learn from external incidents (competitors, industry peers).
- Communicate findings clearly to stakeholders.
- Feed improvements back into OR strategies, policies, and plans.
- Stay ahead of emerging risks and threats.
|
|
Inputs
|
- Results of scenario testing and exercises.
- Post-incident/disruption reports.
- Industry reports, competitor case studies, and regulatory guidance.
- Feedback from employees, crisis teams, and stakeholders.
- Existing BCM, Crisis Management (CM), and ITDR lessons learned.
|
|
Activities
|
- Conduct structured post-incident and post-exercise reviews.
- Document and analyse lessons learned using standardised templates.
- Benchmark against industry incidents and external intelligence.
- Identify process, system, and governance gaps.
- Develop improvement actions and assign responsibilities.
- Communicate outcomes and updates across the organisation.
- Incorporate improvements into training, policies, and OR framework.
|
|
Outputs
|
- Lessons learned register.
- Improved and updated OR strategies, impact tolerances, and response plans.
- Documented recommendations and corrective actions.
- Communication briefs and knowledge-sharing sessions.
- Enhanced employee awareness and skills.
- Evidence of continuous improvement for regulators/auditors.
|
|
Linkages
|
- Phase 2 – Stage 3 (Scenario Testing): Lessons feed directly from test results.
- Phase 1 – Stage 1 (Assess Capability and Maturity): Updated maturity assessment incorporates improvements.
- Phase 3 – Sustain (All Stages): Continuous improvement supports governance, monitoring, and long-term sustainability.
- Linked to BCM, Crisis Management, ITDR, and Risk Management processes for integrated resilience.
|
"Implement" Phase of OR Planning Methodology
| Operational Resilience Body of Knowledge - Implement |
| BoK 6 S1 |
BoK 7 S2 |
BoK 8 S3 |
BoK 9 S4 |
BoK 10 S5 |
![[OR] [BOK] [6] [P2] [S1] Identify Critical Business Services](https://no-cache.hubspot.com/cta/default/3893111/a039c6e3-1574-476e-b922-932a3db0057d.png) |
![[OR] [BOK] [7] [P2] [S2] Map Processes and Resources](https://no-cache.hubspot.com/cta/default/3893111/bbf6bc20-b04b-4754-b1e1-ae7b128cfd16.png) |
![[OR] [BOK] [8] [P2] [S3] Set Impact Tolerance](https://no-cache.hubspot.com/cta/default/3893111/2a8e7e00-da4f-48d9-8ebf-384e838fa3ed.png) |
![[OR] [BOK] [9] [P2] [S4] Conduct Scenario Testing](https://no-cache.hubspot.com/cta/default/3893111/ad71fd8a-ced1-4e9b-96af-b4f6c8f3fbbf.png) |
![[OR] [BOK] [10] [P2] [S5] Improve Lesson Learnt](https://no-cache.hubspot.com/cta/default/3893111/56ef9e79-9d00-45b8-947f-9029325a2b6d.png) |
More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.