resilience and organisational resilience standards

Resilience&

OR StandardsIan Charters FBCI

1

2

Resilience standards

• BS 65000 (2014) – Guidance on organizational resilience• Be informed• Set direction• Bring coherence (using appropriate standards)• Develop adaptive capacity• Strengthen the organisation• Validate and review

• ISO 22316 (Draft)- Guidelines for organizational resilience • 8 Principles• 12 Strategic objectives

3

Resilience Definitions

• Ability to return to the original form after being bent… - Dictionary.com• An ability to recover from or adjust easily to misfortune or change -

Webster• Ability of an organization to anticipate, prepare for and respond and

adapt to change and sudden disruption in order to survive and prosper - BS 65000• Outcome of an organization’s capability to anticipate and respond to

disruption related risks and its capacity to adapt to complex or changing circumstances under conditions of uncertainty – ISO 22316 (draft)

4

Resilience Definitions

• Some features from the definitions• Prepare for and respond to sudden disruption (BS) /

disruption related risks (ISO)• Anticipate (horizon scanning)• Adapt to change (BS) / complex and changing

circumstances (ISO)• In order to [survive and] prosper

Q1. Is resilience = BCM, BCM+, RM+ or something else?

5

Resilience Theory

• ISO 22316:• Mentions ‘Risk’ 44 times : ‘Business Continuity’ once!

• Then invents terms – ‘organizational continuity’ and ‘continuity risk’

• ‘Anticipation and incident response’ objective• … is achieved by “initiating immediate actions to

evaluate, plan, and respond to identified threats”

Q2. Is resilience a predictive/risk-based discipline

6

Resilience Practicality

• Top management should: use horizon scanning to provide insights into likely changes to key stakeholder requirements ….. to determine short, medium and long term innovation requirements

Q3. Will it work?

7

Resilience Practicality

• A. Do you rate yourself as an above average driver? Y/N• B. Will you accept this bet? Tails=Lose £100 ; Heads=Win

£200• C. There are fires in about 1;100 business premises each

year. What is the probability of a fire in this building next year? • D. What do you see below?

Q4. How good are we at scanning the horizon?

Resilience skills

Possible attributes of Resilience manager• Understanding of organisation’s objectives and values• Ear of the Board• Deep knowledge of operation and interconnectedness• Promote flexibility of staff – training and cross-training• Training and exercising for both change and response• Communication with all levels• Maintain Incident recovery capability• Drive and manage change and innovation• Curiosity and scepticism • Pragmatic and generalist 8

Q5. Can we do the job?

Resilience measurement

• employ existing monitoring processes to evaluate factors that contribute to resilience

• monitor the effectiveness of initiatives established for management of risk

• consider the use of employee and customer surveys that provide indicators of the organizations progress against resilience objectives; and

• create new data management information systems to fill the gap where there is no data available.

9

Q6. How do we measure resilience?

48⁰

Resilience&

OR StandardsIan Charters FBCI

ianc@continuity.co.uk

10

This presentation was delivered at a BCI forum event. For details of upcoming events please click here.

For details of BCI membership please click here.