Skip to content
Risk ManagementUnited States

US Interagency Sound Practices to Strengthen Operational Resilience

What is US Interagency Sound Practices to Strengthen Operational Resilience?

The US federal banking agencies' sound practices for operational resilience at the largest and most complex firms: board-set tolerance for disruption and governance, operational risk management with tested controls including at third parties, business continuity management with alternate sites and remote-access contingencies, third-party risk management with substitutability, severe but plausible scenario analysis, secure and resilient information systems with immutable offline backup, surveillance and reporting, and the Appendix A cyber risk management practices from governance to third-party risk. It comprises 49 controls organised across 8 domains, and applies in the United States.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where US Interagency Sound Practices to Strengthen Operational Resilience overlaps with the standards you already hold

What US Interagency Sound Practices to Strengthen Operational Resilience means in your sector

What US Interagency Sound Practices to Strengthen Operational Resilience means for your job

Questions people ask about US Interagency Sound Practices to Strengthen Operational Resilience

What is US Interagency Sound Practices to Strengthen Operational Resilience?
The US federal banking agencies' sound practices for operational resilience at the largest and most complex firms: board-set tolerance for disruption and governance, operational risk management with tested controls including at third parties, business continuity management with alternate sites and remote-access contingencies, third-party risk management with substitutability, severe but plausible scenario analysis, secure and resilient information systems with immutable offline backup, surveillance and reporting, and the Appendix A cyber risk management practices from governance to third-party risk.
How many controls does US Interagency Sound Practices to Strengthen Operational Resilience have?
US Interagency Sound Practices to Strengthen Operational Resilience contains 49 controls organized across 8 domains.
Where does US Interagency Sound Practices to Strengthen Operational Resilience apply?
US Interagency Sound Practices to Strengthen Operational Resilience applies in United States. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of US Interagency Sound Practices to Strengthen Operational Resilience is covered here?
This page covers October 2020 interagency paper, revised June 2026 (references to reputational risk removed).

Query US Interagency Sound Practices to Strengthen Operational Resilience programmatically

US Interagency Sound Practices to Strengthen Operational Resilience, its 49 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

US Interagency Sound Practices to Strengthen Operational Resilience API reference and MCP config →

How ready are you for US Interagency Sound Practices to Strengthen Operational Resilience?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .