What is Lesson Learnt?
The key in "Lesson Learnt" is for an organisation to promote a culture of continuous learning and improving from scenario testing and actual incidents.
It is essential to improve and communicate remediation and vulnerabilities after scenario testing.
What Should Organisation Be "Learning"?
Lesson Learnt in Operational Resilienceby an organisation before and after an operational disruption should include the following:
- Be able to anticipate disruptive events.
- Be constantly learning from adverse events affecting the organisation or the industry.
- Be able to form part of an organisation's incident and crisis management processes.
- Be able to provide feedback and define better controls or mitigation measures for its key processes and resources.
- Be conducted as part of a series of scenario testing exercises in preparation for the actual operational disruption.
After implementing the OR program, an organisation can still find itself in a situation where an important or critical business service can still experience a disruption or outage. This can be due to an unpredictable "black swan" event, such as the COVID-19 pandemic, unidentified interdependencies, or "black spots" within the organisation.
These may be some good documentation to refer to in your organisation:
- Post-incident report
- Lesson learned report
Continuous Learning
In addition to the learning as previously described, the business landscape will constantly shift, moving the threats and challenges, and impact tolerances need to be set each year; hence, there is a need to learn and ensure that operational resilience is continually improved continuously. This includes defining the current and desired positions, and steps should be identified to close the gap between the two.
How to Improve and Communicate Lessons Learned?
Improving and communicating lessons learned is critical for continuously enhancing operational resilience and fostering a learning culture.
The following steps should be taken:
Analyze Lessons Learned
Consolidate and analyze the lessons from scenario testing, real disruptions, and post-incident reviews. Identify common themes, recurring issues, and systemic vulnerabilities.
Develop Action Plans
Based on the analysis, develop action plans to address the identified areas for improvement. Prioritize actions and assign responsibilities to ensure accountability for implementing the necessary changes.
Implement Improvements
Execute the action plans and implement the recommended improvements. This may involve updating policies, procedures, technologies, training programs, or incident response plans.
Communicate Findings and Changes
Share the lessons learned and implemented improvements with relevant stakeholders. This includes internal teams, management, and external partners. Communicate the actions taken to address vulnerabilities and enhance operational resilience.
Continuous Improvement
Establish mechanisms for ongoing monitoring, evaluation, and enhancement of operational resilience. Foster a culture of continuous improvement by encouraging feedback, conducting regular reviews, and incorporating best practices.
"Implement" Phase of the OR Planning Methodology
Identify Important Business Services | Map Processes and Resources |
Set Impact Tolerance |
Conduct Scenario Testing | Improve Lesson Learnt | |
More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.