ST1 Plans are not exercised or tested to a sufficient level Plans are rigorously tested to confirm capability with adequate resources to validate adequacy and actual capability available to implement plans and make continuous improvements in line with organisational changes 3.4 ST2 Exercises are designed to tick the box for compliance Exercises are designed to identify weaknesses and opportunities for Stress purposes improvement, as part of quality assurance and continuous improvement Testing ST3 Testing of address typical disruption scenarios are regularly stress-tested against a variety of scenarios relevant to Plans changing contexts and environments ST4 Plans are exercised or tested in isolation, without Plans are exercised and tested with other business areas and involving other business areas or organisations organisations on a regular basis Total = /16 Likely Inhibitor Possible Treatment Action Ensure the Leadership Team actively participate as part of the exercise rather than only Lack of executive buy in, sponsorship and active participation observing or facilitating it Leaders are not visible and do not the talk’ ‘walk Conduct workshops with risk disciplines to try and identify potential threats and risks to Complacency won't happen to us, we will be all right’ – ‘it the business objectives and explore the impacts of possible Black Swan events Barrier of distance between different business operational locations Identify all critical processes, their dependencies and interdependencies, impacts of business disruption and any potential single points of failure in the processes, infrastructure, people, assets, ITC, data sets etc. Identify the required minimum service levels and potential tipping points where your response plans will be inadequate/exceeded by an adverse event’s impacts and potential alternative solutions Identify tipping points that change the community’s and key stakeholders expectations or attitudes to your organisation Develop and conduct resource adversity management exercises that stretch existing resource capabilities and require participants to look at new and innovative
3.4 Stress Testing Plans ST1 Plans are not exercised or tested to a sufficient level to validate adequacy and actual capability Plans are rigorously tested to confirm capability with adequate resources available to implement plans and make continuous improvements in line with organisational changes ST2 Exercises are designed to tick the box for compliance purposes Exercises are designed to identify weaknesses and opportunities for improvement, as part of quality assurance and continuous improvement ST3 Testing of address typical disruption scenarios are regularly stress-tested against a variety of scenarios relevant to changing contexts and environments ST4 Plans are exercised or tested in isolation, without involving other business areas or organisations Plans are exercised and tested with other business areas and organisations on a regular basis Total = /16 Possible Treatment Action Likely Inhibitor Ensure the Leadership Team actively participate as part of the exercise rather than only observing or facilitating it Conduct workshops with risk disciplines to try and identify potential threats and risks to the business objectives and explore the impacts of possible Black Swan events Identify all critical processes, their dependencies and interdependencies, impacts of business disruption and any potential single points of failure in the processes, infrastructure, people, assets, ITC, data sets etc. Identify the required minimum service levels and potential tipping points where your response plans will be inadequate/exceeded by an adverse event’s impacts and potential alternative solutions Identify tipping points that change the community’s and key stakeholders expectations or attitudes to your organisation Develop and conduct resource adversity management exercises that stretch existing resource capabilities and require participants to look at new and innovative Lack of executive buy in, sponsorship and active participation Leaders are not visible and do not ‘walk the talk’ Complacency – ‘it won't happen to us, we will be all right’ Barrier of distance between different business operational locations
Organisational-Resilience-Good-Business-Guide.DOCX