Element
|
Description
|
Purpose
|
- To create a detailed mapping of critical processes, supporting resources, and their interdependencies that enable the delivery of Important Business Services (IBS).
- This ensures clarity on how each component contributes to resilience and provides a foundation for identifying vulnerabilities, dependencies, and potential failure points.
|
Objectives |
- Document and visualise end-to-end processes that underpin IBS.
- Identify and link resources (people, technology, facilities, third parties) that support these processes.
- Establish clear dependencies across internal functions, external vendors, and infrastructure.
- Enable impact analysis and prioritisation for resilience measures.
- Build a structured basis for scenario testing and disruption management.
|
Inputs
|
- Outcomes of P2-S1: Identify Critical Business Services (list and prioritisation of IBS).
- Existing process documentation, workflows, SOPs.
- Technology architecture maps and infrastructure diagrams.
- Resource inventories (human, physical, digital, third-party).
- Vendor and supply chain contracts/SLAs.
- Risk assessments and BIA data.
|
Activities
|
- Process Identification – Document end-to-end workflows supporting IBS delivery, and validate with owners.
- Resource Mapping – Catalogue people, technology, data, facilities, and third parties linked to each process.
- Dependency Analysis – Identify critical dependencies (internal/external), highlight single points of failure.
- Visualisation and Documentation – Develop flowcharts, dependency maps, and layered views.
- Validation and Sign-Off – Review with stakeholders and align with governance/compliance.
|
Outputs
|
- Process and resource maps for each IBS.
- Documented inventory of critical dependencies (internal and external).
- Identification of gaps, vulnerabilities, and single points of failure.
- Foundational dataset for resilience scenario testing, response planning, and impact tolerance assessments.
|
Linkages
|
- Upstream: P2-S1 (Identify Critical Business Services).
- Downstream: P2-S3 (Assess Vulnerabilities and Dependencies); P2-S4 (Implement Resilience Strategies); P3 (Sustain phase monitoring and assurance).
- Related BCMBoK: Risk Analysis & Review (BCMBoK 2), Business Impact Analysis (BCMBoK 3).
|
"Implement" Phase of OR Planning Methodology
Identify Important Business Services |
Map Processes and Resources |
Set Impact Tolerance
|
Conduct Scenario Testing |
Improve Lesson Learnt |
|
|
|
|
|
|
|
More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.
|
|
|
|
|
|
|
If you have any questions, click to contact us.
|
|
|
|
|