[OR] [PM] [P2] [Appendix] [O] Glossary of Operational Resilience Terms

Implement Phase Appendices

These appendices provide practical templates, checklists, registers, and implementation tools to support the five stages of the Implement Phase:

• Identify Critical Business Services
• Map Interconnections and Interdependencies
• Set Impact Tolerance
• Conduct Scenario Testing
• Improve Lessons Learned

The templates should be adapted to reflect the organisation’s size, complexity, regulatory environment, risk profile, governance structure, and operational resilience maturity.

Appendix O:  Glossary of Operational Resilience Terms

Business Service

An identifiable service or outcome delivered to a customer, stakeholder, market participant, or other recipient through a combination of organisational resources.

Critical Business Service

A business service whose disruption could result in unacceptable harm to customers, stakeholders, markets, the organisation, or the wider community.

Business Service Owner

The individual accountable for the end-to-end resilience of a business service.

Interconnection

A relationship or linkage between resources, systems, processes, organisations, or services.

Interdependency

A relationship in which the operation of one resource, process, service, or organisation depends upon another.

Dependency Mapping

The process of identifying and documenting the people, processes, technology, facilities, information, and third parties required to deliver a critical business service.

Shared Dependency

A resource relied upon by more than one critical business service.

Single Point of Failure

A dependency whose failure could materially disrupt a critical business service because no effective alternative exists.

Concentration Risk

Exposure arising from excessive reliance on a limited number of resources, suppliers, technologies, locations, or individuals.

Impact Tolerance

The maximum level of disruption to a critical business service that can be tolerated before unacceptable harm occurs.

Recovery Time Objective

The target time within which an activity, process, application, or resource should be restored following disruption.

Recovery Point Objective

The maximum acceptable amount of data loss measured in time.

Maximum Tolerable Period of Disruption

The maximum period after which the adverse effects of not providing a product, service, or performing an activity become unacceptable.

Service Degradation

A reduction in service capacity, quality, accessibility, or performance rather than a complete loss of service.

Severe but Plausible Scenario

A credible disruption scenario designed to significantly challenge the organisation’s operational resilience capability.

Scenario Testing

The structured testing of a critical business service under severe but plausible disruption to determine whether it can remain within its impact tolerance.

Scenario Inject

Information introduced during an exercise to advance the scenario requires participants to respond or make decisions.

End-to-End Testing

Testing that considers the complete delivery chain for a critical business service, including internal and external dependencies.

Vulnerability

A weakness that may reduce the organisation’s ability to maintain or recover a critical business service.

Resilience Gap

The difference between the required resilience capability and the current capability.

Lesson Identified

An observation, weakness, insight, or improvement opportunity identified through testing, incidents, near misses, audit, or review.

Lesson Learned

A lesson that has resulted in an implemented and validated improvement.

Corrective Action

An action designed to address the cause of an identified weakness.

Preventive Action

An action intended to prevent a similar weakness from occurring elsewhere or recurring in the future.

Remediation

The process of implementing actions to reduce or remove an identified resilience weakness.

Retesting

Testing conducted after remediation to verify that the improvement is effective.

Root Cause Analysis

A structured process for identifying the underlying causes of a weakness, failure, or incident.

Risk Appetite

The amount and type of risk an organisation is willing to accept in pursuit of its objectives.

Operational Resilience

The ability of an organisation to anticipate, prepare for, respond to, and adapt to, and recover and learn from operational disruption while continuing to deliver its critical business services within acceptable levels of impact.

Operational Resilience Planning Methodology

A structured methodology comprising the Plan, Implement, and Sustain phases for establishing, implementing, maintaining, and improving operational resilience.

"Implement" Phase of the OR Planning Methodology

Identify Critical Business Services	Map Interconnection and Interdependencies	Set Impact Tolerance	Conduct Scenario Testing	Improve Lesson Learned

More Information About Blended Learning OR-5000 [BL-OR-5] or OR-300 [BL-OR-3]

Contact our course consultant colleagues to learn more about our blended learning program and about the next course's schedule.  They are the BL-OR-3 Blended Learning OR-300 Operational Resilience Implementer and the BL-OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer.

 

	If you have any questions, click to contact us.