RISK: Enterprise-wide risk management strategies and effective controls for all risks including ‘catastrophic risks’, emerging threats and those related to third-party providers.
READINESS: A strategic approach to preparing for disruptions and ‘shocks’ through plans, systems, testing, training and awareness. Alignment of plans with critical suppliers and pre-developed stakeholder engagement strategies.
RESPONSE: A robust exercising and testing process that builds and maintains capability, highlights vulnerabilities and identify strengths within the organisation. Ensuring high-quality decision making is occurring at all levels of the organisation.
ASSURANCE: Governance frameworks, reporting and audit processes that provide confidence to the board, executives and external stakeholders that the organisation has the resilience capability to anticipate and successfully manage all risks and threats.