Further reading OpenVAS website Related pages Nessus

Operational resilience for an organisation can be defined as the ability to prevent, adapt, withstand, respond to, recover, and learn from operational disruptions to ensure the continuity of critical business services. Further reading The Concept of Resilience: A New Buzzword - CMS Wire What Is True Resilience? - Forbes Response and resilience in operational-risk events - McKinsey Operational resilience: Regulation Around the World - Norton Rose Fulbright Operational resilience for insurers - PwC Operational resilience for insurance firms - Grant Thornton Operational resilience insights for insurance firms - Financial Conduct Authority Operational Resilience - Bank of England & PRA & FCA Cyber operational resilience and cyber insurance - EIOPA Toward True Organisational Resilience - Deloitte Risk Resilience Report - Marsh McLennan BCI launches Continuity & Resilience Report 2022 - BCI The Business of Resilience: summary report 2022 - UK Gov Resilience Reports - European Commission Resilience: Building back better - HSBC International regulatory alignment on operational resilience - Deloitte UK Resilience without borders - Deloitte UK PS21/3 Building operational resilience - Financial Conduct Authority SS1/21: Operational resilience: Impact tolerances for important business services - Bank of England

The OR-2 module sets out the HKMA’s supervisory expectations for authorised institutions to maintain operational resilience in the event of a disruption. Further reading OR-2 SPM Module | HKMA (PDF) Operational Resilience: A new SPM module from HKMA | Deloitte Operational Resilience | KPMG The HKMA proposes new standards for operational resilience | Herbert Smith Freehills Fostering operational resilience | PwC Hong Kong SFC issues operational resilience standards and recommended techniques and procedures in the age of remote working | Herbert Smith Freehills Operational resilience and remote working | SFC Circular Related pages Operational Resilience (wiki) SPM TM-G-1 General Principles for Technology Risk Management SPM TM-G-2 Business Continuity Planning OR-1 Operational Risk Management SA-2 Outsourcing Cyber Resilience Assessment Framework 2.0

Threat modelling is a critical component of an organisation’s cybersecurity and risk management framework. The process will identify potential threats, assess vulnerabilities, and implement effective controls. Key outputs of a threat modelling exercise in a large organisation will include: 1. Threat Model Diagram. A visual representation of systems, data flows, and trust boundaries. Common formats include Data Flow Diagrams (DFDs) or Process Flow Diagrams, highlighting how data moves through the system and where risks may emerge. ...