BGBann_OR_Certified Planner-Specialist-Expert

What is Mapping of Processes and Resources in Operational Resilience?

To move toward operational resilience (OR), an organisation must understand its business and identify inter-dependencies and inter-connectivity to learn its weaknesses.

Only when weaknesses have been identified and understood can potential risks be determined together with each risk's associated likelihood and impact.

Moh Heng Goh

New call-to-action[Implement] What is the Mapping of Processes and Resources?

Mapping is identifying, documenting and understanding the activities involved in delivering important or critical business services.

BCMPedia Operational ResilienceAn organisation should identify, document and map the necessary people, processes, information, technology, facilities, and third parties service providers required to deliver each of its important or critical business services. This exercise should be undertaken collaboratively across the business to ensure comprehensive mapping.

Why Do We Map Processes and Resources?

New call-to-action

Organisations must capture the key resources and dependencies that contribute to providing each important or critical business service to understand the possible threats to operational resilience.

Mapping incorporates identifying interdependencies and interconnections, including people, processes, information, technology, facilities, and third parties service providers.  

OR Critical_Information Business Function_Critical Operation

The mapping process enables an organisation to have sufficient details to:

  • test against the scenario
  • test vulnerabilities
  • test remediation

When mapping the "Processes," the relationship with key resources should be considered:

  • people
  • technology
  • facilities
  • information

How to Map Operational Resilience Dependencies and Connections Across the Organization?

Mapping operational resilience dependencies and connections is essential for understanding the interdependencies between business units, systems, processes, and external stakeholders.  The following actions are involved:

Identify Key Stakeholders

Engage with business unit leaders, IT managers, risk management teams, and other relevant stakeholders to identify and involve the key departments and individuals responsible for critical business functions.

Conduct Dependency Analysis
  • Analyze the dependencies between business units, systems, applications, processes, and external entities (suppliers, partners, regulatory bodies).
  • This analysis helps identify the critical links and potential vulnerabilities.
Identify Internal Interdependencies
  • identify the interdependencies between different systems, processes, and functions.
  • Analyze how one area's failures or disruptions can impact others. 
  • Consider dependencies on IT infrastructure, data centres, communication networks, and personnel. 
  • Document these interdependencies to understand internal dependencies comprehensively.
Identify External Interdependencies
  • Assess the external interdependencies with third-party vendors, service providers, and other external entities. 
  • Identify critical relationships and dependencies the institution relies on to deliver its services. 
            ○ includes outsourced processes, cloud service providers, regulatory reporting systems, and other external dependencies. 
  • Evaluate the potential impact of disruptions in these relationships on the institution's operations.


Document Interconnectivity and Interdependencies
  • Create a comprehensive inventory that documents the identified dependencies and connections.
  • Include information such as criticality, dependencies, contact persons, and relevant documentation.
  • Document the identified interconnectivity and interdependencies in a structured manner. 
  • Visual representations such as diagrams or flowcharts illustrate the relationships and dependencies. 
  • Includes information on the relationship's nature, data flows, communication channels, and any contractual or legal obligations. 
  • This documentation will serve as a reference for future analysis and planning.
Establish Communication Channels

Establish effective communication channels to facilitate ongoing collaboration and information sharing among stakeholders. This ensures a common understanding of dependencies and enables efficient coordination during disruptions.

Regularly Review and Update

Continuously review and update the dependency mapping to reflect the organisational structure, processes, or external relationship changes. This ensures the accuracy and relevance of the mapping information.

  Definition Explanation Definition  

is identifying, documenting and understanding the activities involved in delivering critical or important business services. 

  • Do not map all processes at once or at a detailed level.
  • Start by identifying and agreeing upon the critical processes, assign ownership, and map these processes according to a predefined template.
OR Mapping Interconnections and Interdependencies BCMPedia  
  Processes and Resources This includes the processes and their relationship with key resources:
  • people
  • technology
  • facilities
  • information
New call-to-action


  Inter-dependencies are the internal and external dependencies on people, processes, technology, and other resources (including those involving third parties) for each important or critical business service. New call-to-action  

are the linking of an organisation's network with products, services, equipment or facilities not belonging to the originating organisation's network.

The term may refer to a connection between the organisation's facilities and the equipment belonging to its customer or a connection between two or more parties.

New call-to-action  
  Mapping Inter-connections and Inter-dependencies This is the steps for the mapping process for operational resilience involves identifying dependencies and connections between people, processes, information, technology, facilities, and third-party service providers required to deliver each critical business service. OR Blog Mapping Interconnections and Interdependencies  
"Implement" Phase of the OR Planning Methodology
Identify Important Business Services Map Processes and Resources

Set Impact Tolerance

Conduct Scenario Testing Improve Lesson Learnt  
New call-to-action New call-to-action

New call-to-action

New call-to-action New call-to-action  

More Information About Blended Learning OR-5000 [BL-OR-5] or OR-300 [BL-OR-3]

To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.

BL-OR-3 Register Now BL-OR-3_Tell Me More BL-OR-3_View Schedule
BL-OR-5_Register Now BL-OR-5_Tell Me More  [BL-OR] [3-4-5] View Schedule
[BL-OR] [3] FAQ OR-300

If you have any questions, click to contact us.Email to Sales Team [BCM Institute]

FAQ BL-OR-5 OR-5000
[BL-OR] [3] What is BL-OR-3 Course?

New call-to-action

[BL-OR] [3-4-5] What is BL-OR-5 Course?



More Posts

New Call-to-action