[OR] [P3-S5] [2-1] Conduct IQR: On-Site Review

[2-1] Conducting On-Site Reviews for IQR

An on-site review provides the independent reviewer with a firsthand look at your organization's operational resilience practices.

The reviewer can gain a deeper understanding of your resilience posture by observing your facilities, interviewing staff, and examining processes.

Key considerations for conducting an on-site review include defining the scope, planning logistics, coordinating with your organization's staff, conducting observations and interviews, and reviewing relevant documents.

By carefully planning and executing the on-site review, you can provide the reviewer with valuable insights into your organization's day-to-day operations and identify areas for improvement.

Purpose

On-site reviews provide a valuable opportunity to observe your organization's operational resilience practices firsthand.

The reviewer can gain a deeper understanding of your organization's resilience posture by visiting your facilities, interviewing staff, and examining processes.

Key Considerations

Scope: Determine the specific areas of your organization that will be included in the on-site review. This may include facilities, departments, or specific processes.
Planning: Develop a detailed plan for the on-site review, including the schedule, locations to be visited, and key personnel to be interviewed.
Logistics: Arrange for travel, accommodations, and necessary access to facilities and information.
Coordination: Coordinate with your organization's staff to ensure that they are prepared for the review and have the necessary information available.
Observations: Observe your organization's day-to-day operations, paying attention to how staff respond to challenges, collaborate, and follow established procedures.
Interviews: Conduct interviews with key stakeholders to gather their perspectives on operational resilience practices and challenges.
Document Review: Review relevant documents and records on-site to verify information and identify areas for improvement.
Feedback: Provide the reviewer with any relevant feedback or observations that may be helpful in their assessment.

Additional Tips

Involve Key Stakeholders: Ensure that key personnel from relevant departments are available for interviews and observations
Prepare a Checklist: Develop a checklist of key areas to be reviewed during the on-site visit.
Take Notes: Document your observations and key findings during the review.
Follow Up: Follow up with the reviewer after the on-site visit to address any questions or provide additional information.

By conducting a thorough on-site review, you can provide the reviewer with valuable insights into your organization's operational resilience practices.

This will help them identify areas for improvement and provide recommendations for enhancing your resilience posture.

Additional Explanatory Note

Definition	Explanation	Definition
Self-Assessment	is to capture and document the steps taken towards operational resilience. is to provide a comprehensive and objective evaluation of the organisation's strategy and ability to respond to disruptions.
Self-Assessment Document	is to demonstrate the organisation’s resilience journey and how they have achieved compliance with the regulations.
Important Business Service	is a service provided by an organisation, or by another person on behalf of the organisation, to one or more clients which, if disrupted, could: cause intolerable harm to any one or more of the organisation’s clients, or pose a risk to the soundness, stability or resilience of the financial system or the orderly operation of the financial markets.
Critical Business Service	is a business service that, if disrupted, is likely to significantly impact the FSI’s safety and soundness, its customers or other FSI that depend on the business service.
Critical Operations	is defined as a business output that, if interrupted during the operational period, will cause financial loss, damage, or interruption to the delivery of goods or services essential to the organization’s continued operation or success.

"Sustain" Phase of the OR Roadmap

Introduce Culture Change	Develop Communication Strategy	Implement Training and Awareness	Provide Self-assessment	Conduct Independent Quality Review

More Information About Operational Resilience OR-5000 [BL-OR-5] or OR-300 [BL-OR-3] Course

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.