Lead Operational Resilience Manager flashcards
Lead Operational Resilience Manager · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Impact tolerance
- The maximum tolerable level of disruption to an important business service, expressed as a time limit plus qualitative harm criteria for customers, markets, or the firm itself.
- Important business service
- A service whose disruption would cause intolerable harm to consumers, market integrity, or firm soundness; identified by harm assessment rather than by revenue contribution or size.
- Severe but plausible scenario
- A disruption scenario judged credible yet extreme enough to stress the organization beyond routine events, used to test whether services stay within their impact tolerances.
- Recovery time objective
- The target time to restore a system or process after disruption. It is a technical target and must sit inside, never outside, the business impact tolerance it supports.
- Resilience versus risk management
- Risk management weights events by likelihood and seeks loss reduction; resilience assumes disruption occurs and focuses on preserving critical outcomes throughout the event and recovery.
- Resilience maturity progression
- Typical stages: awareness, ad hoc response, defined processes, integrated management across functions, and adaptive continuous improvement driven by testing evidence and real incidents.
- Dependency mapping
- Documenting the people, processes, technology, data, premises, utilities, and third parties a service relies on, including fourth parties, to reveal single points of failure.
- Service owner accountability
- A named business executive accountable for a service's resilience, including tolerance setting, dependency oversight, test participation, and remediation of identified weaknesses.
- Resilience risk appetite
- A board-approved statement of acceptable disruption, expressed in tolerance terms such as the permitted frequency or duration of breaches for important business services.
- Policy hierarchy
- Board-approved policy sets principles; standards define minimum requirements; procedures and playbooks give operational steps; records provide evidence of compliance and testing.
- Executive resilience committee
- A senior forum that owns delivery of the resilience framework, prioritizes remediation funding, reviews tolerance breaches, and escalates material issues to the board.
- Change-triggered framework review
- A review of the resilience framework prompted by material change such as mergers, new critical systems, new outsourcing arrangements, or significant regulatory updates.
- Resilience reporting metrics
- Defined measures such as tolerance breaches, test coverage percentage, age of open remediation items, and dependency concentration, with pre-agreed escalation thresholds.
- Business impact analysis
- An assessment ranking services by harm over time from disruption; outputs set tolerances, recovery priorities, and resource allocation for continuity investment.
- Assume-compromise posture
- A cyber resilience stance that presumes attackers may already be inside, prioritizing detection, containment, and recovery over reliance on perimeter prevention alone.
- Incident response lifecycle
- Phases of preparation, detection and analysis, containment, eradication, recovery, and post-incident review, with corrective actions tracked to closure.
- Backup restore testing
- Periodically proving that backups are complete, immutable or offline where needed, and can actually be restored within recovery targets, rather than assuming backup success.
- Ransomware continuity planning
- Planning to operate critical services without primary systems for extended periods, including manual workarounds, degraded modes, and prioritized restoration sequences.
- Privileged access as resilience control
- Restricting and monitoring high-privilege accounts because compromised credentials are a leading cause of severe, fast-spreading operational disruption.
- Crisis communication protocol
- Pre-approved holding statements, a single source of truth for status updates, and defined notification timelines for customers, regulators, and other stakeholders.
- Third-party lifecycle
- Stages of due diligence, contracting, onboarding, ongoing monitoring, exit planning, and offboarding applied to providers supporting important business services.
- Concentration risk
- Risk that multiple services depend on the same provider, region, or technology stack, so a single failure disrupts many services simultaneously across the portfolio.
- Exit plan
- A documented and where feasible tested route to migrate or substitute a provider, with a maximum transition time that fits inside the affected service's impact tolerance.
- Fourth-party visibility
- Knowledge of sub-outsourcers used by critical providers, supported by contractual flow-down obligations for resilience, audit, and incident notification requirements.
- Termination assistance clause
- A contract provision requiring a provider to continue service and support orderly migration for a defined period after termination notice, preventing abrupt disruption.
- Blameless post-incident review
- A structured review focused on systemic causes rather than individual blame, intended to surface honest information and produce durable corrective actions.
- Psychological safety in resilience
- A culture where staff can report near misses and raise concerns without fear, preventing the suppression of bad news that precedes many severe disruptions.
- Role-based resilience training
- Training tailored by role: executives for crisis decision-making, technical staff for recovery procedures, and all staff for incident reporting and escalation paths.
- End-to-end service test
- A test exercising the full chain of people, processes, technology, data, premises, and third parties supporting a service, unlike isolated component failover tests.
- Tabletop exercise
- A discussion-based simulation in which participants work through a severe scenario, testing decision-making, escalation, and communication without disrupting live systems.
- Remediation log
- A register of test and incident findings with owners, severity ratings, deadlines, and executive visibility; unresolved items are reported as residual tolerance risk.
- Independent resilience assurance
- Review by internal audit or an external party confirming that the testing programme is credible and that reported resilience reflects actual capability.