[OR] [PM] [P2] [Appendix] [I] Severe but Plausible Scenario Library

Implement Phase Appendices

These appendices provide practical templates, checklists, registers, and implementation tools to support the five stages of the Implement Phase:

Identify Critical Business Services
Map Interconnections and Interdependencies
Set Impact Tolerance
Conduct Scenario Testing
Improve Lessons Learned

The templates should be adapted to reflect the organisation’s size, complexity, regulatory environment, risk profile, governance structure, and operational resilience maturity.

Appendix I: Severe but Plausible Scenario Library

Scenario Ref	Scenario	Primary Threat	Resources Affected	Suitable CBS	Testing Objective
SC-01	Ransomware affecting production systems	Cyber	Technology / Information		Validate cyber recovery
SC-02	Primary application outage	Technology	Technology		Validate system resilience
SC-03	Cloud region failure	Technology	Technology / Third Party		Validate cloud failover
SC-04	Telecommunications outage	Infrastructure	Technology / Third Party		Validate alternate connectivity
SC-05	Loss of primary facility	Physical	Facility / People		Validate alternate working
SC-06	Workforce unavailability	People	People / Process		Validate staffing resilience
SC-07	Critical supplier failure	Third Party	Third Party		Validate supplier contingency
SC-08	Data corruption	Information	Information / Technology		Validate integrity and recovery
SC-09	Utility outage	Infrastructure	Facility / Technology		Validate facility resilience
SC-10	Peak-volume technology failure	Compound	Technology / Process		Test capacity under stress
SC-11	Cloud outage and cyberattack	Compound	Technology / Third Party		Test concurrent disruptions
SC-12	Facility loss with workforce shortage	Compound	Facility / People		Test multi-resource failure
SC-13	Major third-party insolvency	Third Party	Third Party / Process		Test replacement capability
SC-14	Loss of the authentication platform	Technology	Shared Technology		Test cross-service dependency
SC-15	Critical data provider outage	Third Party	Information / Third Party		Test alternate data sources

The scenario library should be expanded as new threats, technologies, suppliers, and operating models emerge.

"Implement" Phase of the OR Planning Methodology

Identify Critical Business Services	Map Inter-connection and Inter-dependencies	Set Impact Tolerance	Conduct Scenario Testing	Improve Lessons Learned

More Information About Blended Learning OR-5000 [BL-OR-5] or OR-300 [BL-OR-3]

Contact our course consultant colleagues to learn more about our blended learning program and about the next course's schedule. They are the BL-OR-3 Blended Learning OR-300 Operational Resilience Implementer and the BL-OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer.