4.1 Governance Structure
- An effective governance structure with clearly defined roles and responsibilities and agreed frequency and reporting metrics for the executive and board.
- A formal process to raise issues, resolve conflicts, enable collaboration and ensure a consistent application of the overarching policy across the enterprise.
- Resilience embedded within operating businesses, business units and subsidiaries to ensure the ownership and responsibility for managing these risks and preparing resilience strategies lies with the areas who ‘own the risk’.
4.2 Resilience Reporting
Integrated and agreed resilience reporting metrics designed for the Executive and board include the most up to date information on the internal and external threat environment for all strategic, operational and financial risks. Reporting includes:
- Consistent and integrated reporting on all strategic, operational and financial risks; catastrophic risks; emerging threats and critical suppliers/third parties.
- Readiness reporting includes currency of plans; alignment of plans; usability of plans; training and development.
- Response capability reporting including current skills of team/s; past and proposed exercising program; current capabilities to respond to specific known risks and emerging threats; crisis leadership and critical thinking capabilities.
4.3 Surveys
- Surveys provide insight into current levels of confidence, following simulations or events.
- Feedback informs future training and exercising programs and provides assurance to key stakeholders.
4.4 Benchmarking and Scorecards
Benchmarking and scorecards highlight key areas of competency or vulnerabilities by:
- Aggregating data on areas of focus and measuring that information over time.
- Comparing key indicators with those from another business unit within your organisation.
- Comparisons with similar groups in similar industries.
- Comparisons with similar groups in different industries.
- International benchmarking.
4.5 Audits
- Internal and external independent audits provide an assessment of risk management controls and performance against international standards and frameworks.
- Audits cover all aspects of organisational resilience.
Our Sites
