Appearance
Operational Resilience
If something important stops working: what happens, how quickly can we recover, and have we ever actually proved it?
Pages in this area
| Page | Route | What it does |
|---|---|---|
| BCM & Resilience | /bcm | BIAs, plans, exercises and resilience assessments |
| Assets & Inventory | /inventory | The technology inventory, under Regulatory Compliance |
| Scope Registry | /scope-registry | Declared scopes, under Regulatory Compliance |
Documentation for this area
| Article | What it covers |
|---|---|
| Operational Resilience overview | The chain and the truthfulness rule |
| Assets & Inventory | The asset boundary and why it is defended |
| Scope Registry | Scope before assurance, and effective dating |
| Business Impact Analysis | RTO, RPO, MTD and MBCO |
| Continuity Plans | Activation criteria and governed approval |
| Exercises | Target versus actual, and breach handling |
| Resilience Assessments | Six dimensions and the critical-failure override |
The truthfulness chain
Plan exists, is not plan approved, is not exercise scheduled, is not exercise completed, is not exercise passed, is not service resilient.
A service that has not been exercised reports not tested. It is never assumed resilient.
Permissions and entitlement
BIA, plans, exercises and resilience assessment require the Business Continuity & Operational Resilience entitlement. Assets and the Scope Registry are core infrastructure and are not separately licensed.