Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Operational Resilience Policy
1. Purpose and Scope: Defines the purpose of the policy and its application scope within the organization
2. Definitions: Defines key terms used throughout the policy, including technical and operational resilience terminology
3. Governance Framework: Outlines the governance structure, roles, and responsibilities for operational resilience
4. Risk Assessment and Management: Details the approach to identifying, assessing, and managing operational resilience risks
5. Important Business Services: Identifies and classifies critical business services and their impact tolerances
6. Third-Party Risk Management: Describes the management of operational resilience risks related to third-party service providers
7. Incident Management: Outlines procedures for identifying, responding to, and learning from operational incidents
8. Business Continuity Management: Details the approach to ensuring business continuity during disruptions
9. Technology and Cyber Resilience: Specifies requirements for maintaining technological and cybersecurity resilience
10. Testing and Validation: Describes the approach to testing and validating operational resilience measures
11. Reporting and Communications: Outlines reporting requirements and communication protocols
12. Review and Updates: Specifies the frequency and process for reviewing and updating the policy
1. Data Protection and Privacy: Additional section for organizations handling significant amounts of personal data
2. Financial Market Infrastructure: Specific section for financial institutions participating in market infrastructure
3. Remote Working Resilience: Section addressing operational resilience in remote working environments
4. Cross-Border Operations: Section for organizations with international operations
5. Regulatory Compliance: Detailed section for heavily regulated industries
6. Environmental Resilience: Section addressing resilience against environmental and climate-related risks
1. Appendix A - Risk Assessment Matrix: Template and guidance for risk assessment and impact tolerance scoring
2. Appendix B - Incident Response Procedures: Detailed procedures for different types of operational incidents
3. Appendix C - Key Performance Indicators: List of KPIs for measuring operational resilience
4. Appendix D - Testing Schedule: Annual schedule for resilience testing and exercises
5. Appendix E - Contact List: Emergency contacts and escalation procedures
6. Appendix F - Third-Party Service Provider Assessment: Template for assessing third-party operational resilience
7. Appendix G - Business Impact Analysis Template: Template for conducting business impact analysis
Authors
Business Continuity
Business Impact Analysis
Critical Business Services
Critical Third Party
Cyber Incident
DORA
Disaster Recovery
Disruption
Emergency Response
Finanstilsynet
Impact Tolerance
Important Business Service
Incident Management
Internal Control System
Key Performance Indicator (KPI)
Key Risk Indicator (KRI)
Material Outsourcing
Operational Resilience
Operational Risk
Recovery Point Objective (RPO)
Recovery Time Objective (RTO)
Resilience Testing
Risk Appetite
Risk Assessment
Risk Matrix
Risk Register
Service Level Agreement (SLA)
Significant Incident
Stress Testing
System Availability
Third Party Risk
Threat Assessment
Vulnerability
Important Business Service
Mapping Exercise
Material Service Provider
Response and Recovery Plans
Self-Assessment
Scenario Analysis
Service Mapping
Single Point of Failure
Systemic Risk
Testing Programme
Vital Record
Governance and Oversight
Risk Assessment
Business Impact Analysis
Control Framework
Incident Management
Business Continuity
Disaster Recovery
Third Party Management
Data Protection
Technology and Cyber Security
Change Management
Training and Awareness
Monitoring and Testing
Reporting Requirements
Regulatory Compliance
Documentation Requirements
Review and Update
Roles and Responsibilities
Communication Protocol
Resource Management
Performance Measurement
Quality Control
Emergency Response
Audit and Assurance
Find the exact document you need
Download our whitepaper on the future of AI in Legal
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our Trust Centre for more details and real-time security updates.
Read our Privacy Policy.