Operational resilience is the ability to deliver operations, including critical operations and core
business function, through a disruption from any hazard. It is the outcome of effective operational risk management combined with sufficient financial and operational resources to prepare, adapt,
withstand, and recover from disruptions.
Any organisation that operates in a safe and sound manner is able to identify threats, respond and adapt to incidents, and recover and learn from such threats and incidents so that it can prioritise and deliver critical operations and core business lines, along with other operations, services and functions identified by the organisation, through a disruption.
Effective governance grounds operational resilience. Robust operational risk and business continuity
management anchor the good operational resilience practices, which are informed by rigorous scenario analyses and consideration of third-party risks. Secure and resilient information systems underpin the approach to operational resilience, which is supported by thorough audit, monitoring, review and reporting.