[OR] [PM] [P3] [T] [Z] Glossary of Key Operational Resilience Terms

Sustain Phase Appendices

:

• Introduce Change Management
• Develop Communication Strategy 
• Implement Training and Awareness
• Provide Self-Assessment
  
• Conduct an Independent Quality Review

The templates should be adapted to reflect the organisation’s size, complexity, regulatory environment, risk profile, governance structure, and operational resilience maturity.

Appendix Z: Glossary of Key Operational Resilience Terms

Critical Business Service
A service whose disruption could result in intolerable harm to customers, the organisation, the market, or other relevant stakeholders.

Operational Resilience
The ability of an organisation to prevent, adapt to, respond to, recover from, and learn from operational disruption while continuing to deliver critical business services.

Impact Tolerance
The maximum level of disruption to a critical business service that the organisation is prepared to tolerate before intolerable harm occurs.

Interconnection
A relationship or linkage between components involved in delivering a business service.

Interdependency
A dependency between people, processes, technology, facilities, information, data, third parties, or other services where failure of one may affect another.

Scenario Testing
A structured process for evaluating whether the organisation can continue delivering critical business services under severe but plausible disruption.

Cultural Change
The process of embedding resilience behaviours, attitudes, accountability, and decision-making into normal organisational practice.

Training and Awareness
Activities designed to develop knowledge, capability, competency, and preparedness for operational resilience responsibilities.

Self-assessment
A structured internal evaluation of the design, implementation, effectiveness, and maturity of operational resilience arrangements.

Independent Quality Review
An objective assessment conducted by a sufficiently independent and competent party to provide assurance over operational resilience.

Residual Risk
The remaining level of risk after controls and mitigation measures have been applied.

Remediation
Actions taken to address weaknesses, findings, vulnerabilities, or control deficiencies.

Retesting
Testing conducted after remediation to determine whether the corrective action is effective.

Continuous Improvement
The ongoing process of monitoring, assessing, challenging, improving, and revalidating operational resilience capability.

"Plan" Phase of the OR Planning Methodology