The ASIS Foundation has published a new research-based report, Operational Resilience: The Critical Contribution of Security to Operational Resilience.
The document provides guidance and a framework for developing an operational resilience programme. It explains why operational resilience is different from business continuity and emergency management but is complementary to these disciplines.
The operational resilience framework is structured around four phases: reduce, prepare, respond, and recover.
The document also positions security professionals as ‘boundary spanners’ within organizations, “making them ideal (yet often underutilised) players in vital business continuity efforts.” It outlines how security contributes at each phase of the operational resilience framework. This includes proactive risk detection and mitigation, robust crisis coordination and training, agile response mechanisms, and adaptation to new norms post-disruption.
An executive summary can be read here (PDF), and the full version is available here. This is free to ASIS members and costs $195.00 for non-members.
