[OR] [PM] [P1] [T] [P] Key Risk Indicator Register

A Practitioner’s Guide to the “Plan” Phase

Practical Tools for the Plan Phase

A Practitioner’s Guide to the “Plan” Phase into practical application.

The appendices provide practical tools, templates, assessment structures, and implementation aids to support the Plan Phase of the Operational Resilience Planning Methodology.

They are designed to help practitioners translate the concepts described in Chapters 1 to 8 into structured organisational activities.

The appendices may be adapted to reflect:

• organisational size

• industry;
  

• regulatory requirements;
  

• risk profile;
  

• existing governance;
  

• existing resilience capabilities; and
  

• internal terminology.
  

The templates should therefore be treated as practical starting points rather than rigid requirements.

The key objective is consistency, traceability, and evidence-based implementation.

Appendix P:  Key Risk Indicator Register

Potential KRIs include:

• critical systems with overdue recovery tests;
• overdue high-risk remediation;
• unresolved critical cyber vulnerabilities;
• critical suppliers without contingency;
• single points of failure;
• failed recovery exercises.

"Plan" Phase of the OR Planning Methodology