---
title: "[OR] [P3-S5] [1-3] Prepare IQR: Review Criteria"
description: "[OR] [P3-S5] [1-3] Prepare IQR: Review Criteria"
image: https://blog.bcm-institute.org/hubfs/ORPM%20Morepost/IC_ORPM_1_Review%20Criteria.png
---

[![BCMIWhiteLogo.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogo.png?width=556&name=BCMIWhiteLogo.png "BCMIWhiteLogo.png")](http://www.bcm-institute.org/)

- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/) 
    - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
    - [Our History](https://www.bcm-institute.org/about-us/our-history/)
    - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
    - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
    - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) 
    - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
    - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
    - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
    - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
    - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
    - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
    - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) 
    - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
    - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
    - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
    - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
    - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
    - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
    - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)

- <https://www.facebook.com/BCMInstitute/>
- <https://www.linkedin.com/company/business-continuity-management-institute-bcm-institute>

###### \[OR\] \[P3-S5\] Conduct Independant Quality & Assurance Review

![Ai Gen Photo 7_OR_Best Practices_with Cert Logo](https://blog.bcm-institute.org/hs-fs/hubfs/BB%20OR%20%5BAi%20Gen%20Blog%20Photo%5D/Ai%20Gen%20Photo%207_OR_Best%20Practices_with%20Cert%20Logo.jpg?width=2000&height=1333&name=Ai%20Gen%20Photo%207_OR_Best%20Practices_with%20Cert%20Logo.jpg "Ai Gen Photo 7_OR_Best Practices_with Cert Logo")

# \[OR\] \[P3-S5\] \[1-3\] Prepare IQR: Review Criteria

Developing clear and measurable review criteria is essential for a successful IQR. These criteria will guide the reviewer in assessing your organization's operational resilience program and identifying areas for improvement.

Key considerations for developing review criteria include alignment with organizational objectives, relevance to your specific industry and regulatory requirements, measurability, objectivity, and comprehensiveness. By carefully selecting criteria that address all key aspects of your operational resilience program, you can ensure that the IQR provides a thorough and objective assessment.

The review criteria should be designed to evaluate the effectiveness of your OR strategy, risk management practices, business continuity planning, technology resilience, employee awareness, and regulatory compliance. By focusing on these areas, you can identify strengths, weaknesses, and opportunities for improvement, supporting your organization's ongoing efforts to enhance operational resilience.

This is the introductory blog \[OR-P3-S5\] to Stage 5 of the "SUSTAIN" phase of the OR Planning Methodology.  It is a pre-reading for participants attending the Operational Resilience Expert Implementer course.

[Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience/author/moh-heng-goh) Sep 17, 2024

###### Operational Resilience Certified Planner-Specialist-Expert

#### [![OR PM Sustaining Your Operational Resilience Program](https://no-cache.hubspot.com/cta/default/3893111/3627c18f-0db3-470b-930d-bfa2b4c47020.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3627c18f-0db3-470b-930d-bfa2b4c47020)

### \[1-3\] Developing Review Criteria for IQR

[![ORPM Review Criteria](https://no-cache.hubspot.com/cta/default/3893111/63b778bd-3e8b-4c80-a1d6-0ef46ddfe491.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/63b778bd-3e8b-4c80-a1d6-0ef46ddfe491)Developing clear and measurable review criteria is essential for a successful IQR. These criteria will guide the reviewer in assessing your organization's operational resilience program and identifying areas for improvement.

Key considerations for developing review criteria include alignment with organizational objectives, relevance to your specific industry and regulatory requirements, measurability, objectivity, and comprehensiveness. By carefully selecting criteria that address all critical aspects of your operational resilience program, you can ensure that the IQR provides a thorough and objective assessment.

#### **Purpose**

Clear and measurable review criteria are essential for a successful IQR. These criteria will guide the reviewer in assessing your organization's operational resilience program and identifying areas for improvement.

#### **Key Considerations**

- **Alignment with Organizational Objectives:** Ensure the review criteria align with your organization's overall OR strategy and objectives.
- **Relevance:** Select criteria relevant to your specific industry, regulatory requirements, and the scope of the IQR.
- **Measurability:** Choose criteria that can be quantified or measured to provide tangible evidence of performance.
- **Objectivity:** Avoid criteria that are subjective or difficult to interpret.
- **Completeness:** Ensure that the criteria cover all key aspects of your operational resilience program, including risk management, business continuity planning, incident response, and technology resilience.

#### **Potential Review Criteria**

- **OR Strategy and Governance** 
    - Alignment of the OR strategy with organizational objectives
    - Effectiveness of governance structures
    - Clarity of roles and responsibilities
- **Risk Management** 
    - Adequacy of risk identification, assessment, and mitigation practices
    - Effectiveness of risk management framework
    - Compliance with regulatory requirements
- **Business Continuity Planning** 
    - Completeness and comprehensiveness of BCPs and DRPs
    - Regularity of testing and updating plans
    - Effectiveness of incident response procedures
- **Technology Resilience** 
    - Security posture of IT infrastructure and systems
    - Data backup and recovery capabilities
    - Business continuity planning for IT systems
- **Employee Awareness and Preparedness** 
    - Level of employee understanding and preparedness for OR-related activities
    - Participation in training and exercises
- **Regulatory Compliance** 
    - Adherence to relevant industry regulations and standards
    - Effectiveness of compliance monitoring and reporting
- **Continuous Improvement** 
    - Evidence of a culture of continuous improvement
    - Implementation of lessons learned from past incidents or exercises

By carefully developing review criteria, you can ensure that the IQR provides a thorough and objective assessment of your organization's operational resilience program, identifying areas for improvement and supporting your ongoing efforts to enhance resilience.

##### Additional Explanatory Note 

|   | **Definition** | **Explanation** | **Definition** |   |
| --- | --- | --- | --- | --- |
|   | **Self-Assessment** | is to capture and document the steps taken towards operational resilience. is to provide a comprehensive and objective evaluation of the organisation's strategy and ability to respond to disruptions. | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/2176d9f1-f7d6-486b-b71e-87a09943a555.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2176d9f1-f7d6-486b-b71e-87a09943a555) |   |
|   | **Self-Assessment Document** | is to demonstrate the organisation’s resilience journey and how they have achieved compliance with the regulations. | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/75d57436-1373-4542-8563-948d72ad619e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/75d57436-1373-4542-8563-948d72ad619e) |   |
|   | **Important Business Service** | is a service provided by an organisation, or by another person on behalf of the organisation, to one or more clients which, if disrupted, could: - cause intolerable harm to any one or more of the organisation’s clients, or - pose a risk to the soundness, stability or resilience of the financial system or the orderly operation of the financial markets. | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/64cc4834-c078-4a9e-b033-304eee06ce70.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/64cc4834-c078-4a9e-b033-304eee06ce70) |   |
|   | **Critical Business Service** | is a business service that, if disrupted, is likely to significantly impact the FSI’s safety and soundness, its customers or other FSI that depend on the business service. | [![OR Critical Business Services BCMPedia](https://no-cache.hubspot.com/cta/default/3893111/9f906ebc-f9d2-4053-9e6f-586799079049.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9f906ebc-f9d2-4053-9e6f-586799079049) |   |
|   | **Critical Operations** | is defined as a business output that, if interrupted during the operational period, will cause financial loss, damage, or interruption to the delivery of goods or services essential to the organization’s continued operation or success. | [![OR Critical Operations](https://no-cache.hubspot.com/cta/default/3893111/85335fc5-5334-4da8-a18f-502da7524ca8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/85335fc5-5334-4da8-a18f-502da7524ca8) |   |
|   |  |   |  |   |

##### "Sustain" Phase of the OR Roadmap

| **Introduce Culture Change** | **Develop Communication Strategy** | **Implement Training and Awareness** | **Provide Self-assessment** | **Conduct Independent Quality Review** |   |
| --- | --- | --- | --- | --- | --- |
| [![OR PM Sustain Introduce Cultural Change Management](https://no-cache.hubspot.com/cta/default/3893111/3668f599-8d2a-44e3-882d-b1219d30cdd7.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3668f599-8d2a-44e3-882d-b1219d30cdd7) | [![OR PM Develop Communication Strategy](https://no-cache.hubspot.com/cta/default/3893111/9e169987-fcde-4b09-afd3-aa01a6ebe9b3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/9e169987-fcde-4b09-afd3-aa01a6ebe9b3) | [![OR PM Implement Training and Awareness](https://no-cache.hubspot.com/cta/default/3893111/c1f2028b-0c55-4571-81b2-54220525cb6b.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c1f2028b-0c55-4571-81b2-54220525cb6b) | [![OR PM Sustain Provide Self-assessment](https://no-cache.hubspot.com/cta/default/3893111/02aa5bbf-4770-457a-abc2-ea8ae897fb1f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/02aa5bbf-4770-457a-abc2-ea8ae897fb1f) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/b655b64d-a554-4981-b9e5-5b839ac2d451.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b655b64d-a554-4981-b9e5-5b839ac2d451) |   |

#### More Information About Operational Resilience OR-5000 \[BL-OR-5\] or OR-300 \[BL-OR-3\] Course

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.

| [![BL-OR-3 Register Now](https://no-cache.hubspot.com/cta/default/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3530eccb-515d-401e-afc2-3469e26d7fbf) | [![BL-OR-3_Tell Me More](https://no-cache.hubspot.com/cta/default/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdd4fa9c-ed69-40c1-925f-4eb6a1c5c255) | [![BL-OR-3_View Schedule](https://no-cache.hubspot.com/cta/default/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/77a34b84-0a6d-44f8-b8d6-6ab04cdf5edd) |
| --- | --- | --- |
| [![BL-OR-5_Register Now](https://no-cache.hubspot.com/cta/default/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6e5c0cda-39b9-4bbd-b3d4-4cf46a790b14) | [![BL-OR-5_Tell Me More](https://no-cache.hubspot.com/cta/default/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a68a08aa-36d3-4216-9551-202c9fde06ea) | [![ \[BL-OR\] \[3-4-5\] View Schedule](https://no-cache.hubspot.com/cta/default/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0d733a1-16c0-4b68-a26d-adbfd4fc6069) |
| [![\[BL-OR\] \[3\] FAQ OR-300](https://no-cache.hubspot.com/cta/default/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f20c71b4-f5e8-4aa5-8056-c374ca33a091) | If you have any questions, click to contact us.[![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![FAQ BL-OR-5 OR-5000](https://no-cache.hubspot.com/cta/default/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7f2718a4-ea80-4f84-a319-dc2d4df37a46) |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/32739296-1993-4215-8dbf-5b3e1caa8f40.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/32739296-1993-4215-8dbf-5b3e1caa8f40) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f2bd8eb1-32d2-4732-9267-ea53223cf58f) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/084e620a-46c5-419a-82ed-6a681d15c0b6) |

#### **Comments**

 

### More Posts

[![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d41714c9-8019-4282-95bf-08d62ddc4710.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d41714c9-8019-4282-95bf-08d62ddc4710)

![BCMIWhiteLogoSmall.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogoSmall.png?width=72&name=BCMIWhiteLogoSmall.png "BCMIWhiteLogoSmall.png")

All rights reserved. Copyright 2026