The templates should be adapted to reflect the organisation’s size, complexity, regulatory environment, risk profile, governance structure, and operational resilience maturity.
|
Scenario Ref |
Scenario |
Primary Threat |
Resources Affected |
Suitable CBS |
Testing Objective |
|
SC-01 |
Ransomware affecting production systems |
Cyber |
Technology / Information |
Validate cyber recovery |
|
|
SC-02 |
Primary application outage |
Technology |
Technology |
Validate system resilience |
|
|
SC-03 |
Cloud region failure |
Technology |
Technology / Third Party |
Validate cloud failover |
|
|
SC-04 |
Telecommunications outage |
Infrastructure |
Technology / Third Party |
Validate alternate connectivity |
|
|
SC-05 |
Loss of primary facility |
Physical |
Facility / People |
Validate alternate working |
|
|
SC-06 |
Workforce unavailability |
People |
People / Process |
Validate staffing resilience |
|
|
SC-07 |
Critical supplier failure |
Third Party |
Third Party |
Validate supplier contingency |
|
|
SC-08 |
Data corruption |
Information |
Information / Technology |
Validate integrity and recovery |
|
|
SC-09 |
Utility outage |
Infrastructure |
Facility / Technology |
Validate facility resilience |
|
|
SC-10 |
Peak-volume technology failure |
Compound |
Technology / Process |
Test capacity under stress |
|
|
SC-11 |
Cloud outage and cyberattack |
Compound |
Technology / Third Party |
Test concurrent disruptions |
|
|
SC-12 |
Facility loss with workforce shortage |
Compound |
Facility / People |
Test multi-resource failure |
|
|
SC-13 |
Major third-party insolvency |
Third Party |
Third Party / Process |
Test replacement capability |
|
|
SC-14 |
Loss of the authentication platform |
Technology |
Shared Technology |
Test cross-service dependency |
|
|
SC-15 |
Critical data provider outage |
Third Party |
Information / Third Party |
Test alternate data sources |
The scenario library should be expanded as new threats, technologies, suppliers, and operating models emerge.
| Identify Critical Business Services | Map Inter-connection and Inter-dependencies | Set Impact Tolerance | Conduct Scenario Testing | Improve Lessons Learned | |
Contact our course consultant colleagues to learn more about our blended learning program and about the next course's schedule. They are the BL-OR-3 Blended Learning OR-300 Operational Resilience Implementer and the BL-OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer.
|
If you have any questions, click to contact us. |
||
|
|