Element
|
Description
|
|
Purpose
|
- To evaluate the organisation’s current resilience maturity, capability, and readiness to embark on the Operational Resilience (OR) journey.
- This provides a baseline for strategy, governance, and resource allocation.
|
| Objectives |
- Determine the current maturity of resilience across critical business services, functions, and dependencies.
- Benchmark resilience capability against regulations, supervisory requirements, and best practices (e.g., ISO 22316).
- Identify strengths, weaknesses, and areas requiring improvement.
- Establish a roadmap to guide the organisation’s OR journey.
|
|
Inputs
|
- Existing BCM, IT disaster recovery, crisis management, and risk management documentation.
- Regulatory and supervisory guidelines.
- Organisational policies, governance frameworks, and internal audit reports.
- Stakeholder expectations, customer outcomes, and defined risk tolerances.
|
|
Activities
|
- Conduct a maturity assessment using structured frameworks or diagnostic tools.
- Review existing resilience practices (e.g., BCM, cyber resilience, vendor management, operational risk).
- Evaluate governance structures, accountabilities, and ownership for resilience.
- Identify critical business services and their dependencies.
- Benchmark current practices against regulatory expectations and industry norms.
- Document current capabilities, gaps, and resourcing needs.
|
|
Outputs
|
- OR Capability and Maturity Assessment Report.
- Gap analysis report identifying resilience strengths and weaknesses.
- A maturity roadmap aligned to regulatory and business requirements.
- Recommendations for leadership awareness and resource prioritisation.
|
|
Linkages
|
- Provides baseline for P1-S2: Define Scope and Governance.
- Informs P2: Implement phase by identifying capability gaps.
- Links with BCMBoK 2 (Risk Analysis & Review) and BCMBoK 7 (Program Management).
- Aligns with regulatory and industry standards to support compliance and supervisory expectations.
|
"Implement" Phase of OR Planning Methodology
| Identify Important Business Services |
Map Processes and Resources |
Set Impact Tolerance
|
Conduct Scenario Testing |
Improve Lesson Learnt |
|
|
|
|
|
|
|
|
More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.
|
|
|
|
|
|
|
|
If you have any questions, click to contact us.
|
|
|
|
|
|