[OR] [P3-S4] [2-1] Perform Assessment: Review Documentation

[2-1] Reviewing Documentation

Document review is a critical component of the self-assessment process in the Sustain phase of the Operational Resilience (OR) planning methodology.

By examining relevant documents, you can gather evidence to support your evaluation of your organization's resilience performance.

Key considerations for document review include selecting the most relevant documents, carefully analyzing their content, extracting key data points, comparing information with established criteria, and assessing the completeness and accuracy of the documentation.

Purpose

Document review is a critical component of the self-assessment process in the Sustain phase of the Operational Resilience (OR) planning methodology.

By examining relevant documents, you can gather evidence to support your evaluation of your organization's resilience performance.

Key Considerations

• Document Selection: Identify the most relevant documents that provide insights into your organization's OR practices. This may include:
  • Risk assessments
  • Business continuity and disaster recovery plans
  • Incident reports
  • Audit reports
  • Policy and procedure manuals
  • Training records
  • Performance metrics
    
    
• Document Analysis: Carefully review the selected documents to extract relevant information and assess their alignment with your OR strategy and objectives.
  
  
• Data Extraction: Identify and extract key data points from the documents, such as dates, events, outcomes, and lessons learned.
  
  
• Comparison with Criteria: Compare the information extracted from the documents with your established assessment criteria.
  
  
• Document Completeness: Evaluate the completeness and accuracy of the documentation. Identify any gaps or inconsistencies that may need to be addressed.

Additional Tips

• Use a structured approach: Develop a checklist or template to guide your document review process.
  
  
• Consider the time frame: Review documents from the past year or longer to assess trends and changes in your organization's resilience practices.
  
  
• Involve relevant stakeholders: Seek expert input in different areas to ensure a comprehensive review.
  
  
• Document findings: Record your findings and observations for future reference and analysis.

By thoroughly reviewing relevant documentation, you can gather valuable evidence to support your self-assessment and identify areas for improvement in your organization's operational resilience.

[ORPM]  Operational Resilience Planning Methodology
[P3] Sustain Phase [S4] Perform Assessment
2-1	2-2	2-3	2-4

Additional Explanatory Note 

	Definition	Explanation	Definition
	Self-Assessment	is to capture and document the steps taken towards operational resilience. is to provide a comprehensive and objective evaluation of the organisation's strategy and ability to respond to disruptions.
	Self-Assessment Document	is to demonstrate the organisation’s resilience journey and how they have achieved compliance with the regulations.
	Important Business Service	is a service provided by an organisation, or by another person on behalf of the organisation, to one or more clients which, if disrupted, could: cause intolerable harm to any one or more of the organisation’s clients, or pose a risk to the soundness, stability or resilience of the financial system or the orderly operation of the financial markets.
	Critical Business Service	is a business service that, if disrupted, is likely to significantly impact the FSI’s safety and soundness, its customers or other FSI that depend on the business service.
	Critical Operations	is defined as a business output that, if interrupted during the operational period, will cause financial loss, damage, or interruption to the delivery of goods or services essential to the organization’s continued operation or success.

"Sustain" Phase of the OR Roadmap

Introduce Culture Change	Develop Communication Strategy	Implement Training and Awareness	Provide Self-assessment	Conduct Independent Quality Review

More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.