[OR] [BOK] [9] [P2] [S4] Conduct Scenario Testing

Capability and maturity are models against which an organisation’s operational resilience performance can be measured and improved.

These capability and maturity models describe the essential elements of effective operational resilience processes and work to be executed in the organisation. The rigour and quality of the process used to develop them highly influence the assurance of continuing business services.

This blog [OR-P2-S4] elaborates on the content for Stage 4 of the "IMPLEMENT" phase or P2 of the OR Planning Methodology.

Course Participants: This blog is a pre-reading for the Operational Resilience Expert Implementer course participants.

Certification Application: The "How To" section is designed to assist successful participants in completing their Certification Application Form or CAF.

Moh Heng Goh Aug 22, 2025

Element	Description
Purpose	To evaluate the organisation’s current resilience maturity, capability, and readiness to embark on the Operational Resilience (OR) journey. This provides a baseline for strategy, governance, and resource allocation.
Objectives	Determine the current maturity of resilience across critical business services, functions, and dependencies. Benchmark resilience capability against regulations, supervisory requirements, and best practices (e.g., ISO 22316). Identify strengths, weaknesses, and areas requiring improvement. Establish a roadmap to guide the organisation’s OR journey.
Inputs	Existing BCM, IT disaster recovery, crisis management, and risk management documentation. Regulatory and supervisory guidelines. Organisational policies, governance frameworks, and internal audit reports. Stakeholder expectations, customer outcomes, and defined risk tolerances.
Activities	Conduct a maturity assessment using structured frameworks or diagnostic tools. Review existing resilience practices (e.g., BCM, cyber resilience, vendor management, operational risk). Evaluate governance structures, accountabilities, and ownership for resilience. Identify critical business services and their dependencies. Benchmark current practices against regulatory expectations and industry norms. Document current capabilities, gaps, and resourcing needs.
Outputs	OR Capability and Maturity Assessment Report. Gap analysis report identifying resilience strengths and weaknesses. A maturity roadmap aligned to regulatory and business requirements. Recommendations for leadership awareness and resource prioritisation.
Linkages	Provides baseline for P1-S2: Define Scope and Governance. Informs P2: Implement phase by identifying capability gaps. Links with BCMBoK 2 (Risk Analysis & Review) and BCMBoK 7 (Program Management). Aligns with regulatory and industry standards to support compliance and supervisory expectations.

"Implement" Phase of OR Planning Methodology

Identify Important Business Services	Map Processes and Resources	Set Impact Tolerance	Conduct Scenario Testing	Improve Lesson Learnt

Operational Resilience Body of Knowledge - Implement
BoK 6 S1	BoK 7 S2	BoK 8 S3	BoK 9 S4	BoK 10 S5

More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.



	If you have any questions, click to contact us.