Operational Resilience
What is Operational Resilience?
The ability of an organisation to continue to deliver critical operations through disruption. Operational resilience goes beyond business continuity to encompass prevention, adaptation, response, recovery, and learning.
Terms that appear alongside operational resilience
Each of these is named in at least one of the same controls as operational resilience. The number is how many controls name both.
- resilience 67 shared controls
- business continuity 18 shared controls
- governance 16 shared controls
- cybersecurity 12 shared controls
- disaster recovery 11 shared controls
- compliance 11 shared controls
- cyber incident 11 shared controls
- ransomware 10 shared controls
Frameworks that govern operational resilience
What the standards actually require on operational resilience
Requirements naming operational resilience across 6 standards, quoted from the control text.
Financial entities other than microenterprises set up, keep and periodically review a robust, comprehensive programme of digital operational resilience testing within the ICT risk management framework, applied proportionately under Article 4(2), to assess inci...
DORA-Art.24 · General requirements for the performance of digital operational resilience testing →HKMA TM-G-1 adjacent modules covered in this framework's scope. TM-G-2 BUSINESS CONTINUITY PLANNING: (a) Business Continuity Governance (TM-G-2.2.1) - Board oversight + BCP committee + crisis management + RACI + ownership;
HKMA-TMG1-Adjacent-TMG2-TME1-OR2-BCP-eBanking-Resilience · TM-G-2 BCP + TM-E-1 e-Banking + OR-2 Operational Resilience Adjacent Modules →Operational resilience is governed and overseen. Foundational: the managing agent's operational resilience is owned and overseen by senior management and the board, and is monitored through the control environment and the risk management framework;
lloyd-s-minimum-standards-cyber-security::P12.2 · 12.2 Maintain oversight of operational resilience through governance processes and the risk and control environment →Sets the supervisory approach to operational resilience and the principles for an operational resilience framework: the definition; the framework and the role of the board and senior management;
hkma-spm::OR-2 · OR-2 Operational Resilience →Operational resilience is overseen. Foundational: board and senior management ownership; monitoring through the risk framework and control environment;
principles-for-doing-business-at-lloyd-s::P12.2 · 12.2 Maintain oversight of operational resilience through governance and the risk and control environment →The bank has an operational risk management framework and operational resilience approach considering its risk profile, appetite, business environment, tolerance for disruption to critical operations and emerging risks, with strategies, policies, procedures, s...
basel-core-principles-for-effective-banking-supervision-2024::P25 · Principle 25: operational risk and operational resilience →Questions people ask about operational resilience
What is Operational Resilience?
Why is Operational Resilience important for compliance?
Which compliance frameworks address Operational Resilience?
Where can I learn more about Operational Resilience?
See how Operational Resilience applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.