The appendices provide practical tools, templates, assessment structures, and implementation aids to support the Plan Phase of the Operational Resilience Planning Methodology.
They are designed to help practitioners translate the concepts described in Chapters 1 to 8 into structured organisational activities.
The appendices may be adapted to reflect:
organisational size
industry;
regulatory requirements;
risk profile;
existing governance;
existing resilience capabilities; and
internal terminology.
The templates should therefore be treated as practical starting points rather than rigid requirements.
The key objective is consistency, traceability, and evidence-based implementation.
This template provides a structured method for assessing the organisation's current operational resilience capability.
| Assessment Domain | Assessment Criteria | Evidence | Current Maturity | Key Strengths | Key Weaknesses |
| Leadership and Strategy | Executive sponsorship, strategic alignment | ||||
| Governance | Accountability, oversight, decision rights | ||||
| Risk Management | Risk appetite, KRIs, escalation | ||||
| Business Continuity | BIA, continuity strategies, plans, exercises | ||||
| Crisis Management | Escalation, command, coordination | ||||
| Technology Resilience | Recovery, redundancy, testing | ||||
| Cyber Resilience | Cyber response and recovery | ||||
| Third-Party Resilience | Supplier resilience, concentration risk | ||||
| Dependency Management | Mapping of people, process, technology, facilities, information, and third parties | ||||
| Scenario Testing | Severe but plausible testing | ||||
| Culture and Training | Awareness, capability, accountability | ||||
| Monitoring and Reporting | KPIs, KRIs, dashboards | ||||
| Assurance | Self-assessment and independent review | ||||
| Continuous Improvement | Lessons learned and remediation |
| Assess Capability and Maturity | Analyse Gap | Develop Strategy and Roadmap | Confirm Risk Appetite | Develop and Embed Governance | |
Contact our course consultant colleagues to learn more about our blended learning program and about the next course's schedule. They are the BL-OR-3 Blended Learning OR-300 Operational Resilience Implementer and the BL-OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer.
|
If you have any questions, click to contact us. |
||
|
|