Appendix: toolkit and guide

Nita Kohli

The core principles of operational resilience are:

•  

  • senior-level buy-in and participation;

•  

  • establishing a team with a complementary skillset that comes from a variety of disciplines (technology, third party and cyber);

•  

  • a foundational understanding of BCM/ITDR and risk management;

•  

  • critical thinkers who can connect the dots to help understand the end-to-end;

•  

  • influencers are needed to work with leadership and agree outcomes, with cross-functional collaboration being key;

•  

  • regulatory engagement and monitoring to help understand the landscape, influence rule-making, and the interpretation and applicability of regulations;

•  

  • adaptability as regulations and the business environment are continually evolving; and

•  

  • provide opportunity for training and development within the teams and internal mobility to break down silos.

MATURITY ASSESSMENT TEMPLATE

This tool can assess the status and maturity level of a resilience programme, showcasing risk reduction through enhanced maturity levels and informing investment requirements. It provides clarity on the organisation’s current capabilities and its trajectory (see Figure A.1).