01Discipline / Understand
Impact & Criticality Assessment
Exposure is quantified against financial impact, dependency by dependency, with recovery targets set from evidence.
Defined outputCriticality model + recovery targets
The frame
Four phases frame the engagement. Five disciplines do the work.
Discovery, scoping, engagement, handoff. Within them, five disciplines do the work, each with a defined output and a defined owner.
The standard
01IndependentNo vendor agenda in the room.
02Evidence-ledDecisions trace back to evidence.
03Pressure-testedCapability is proven, not assumed.
04Board-readableClear enough to act on.
The method
02Discipline / Plan
Continuity Architecture
Continuity plans designed and governed through controlled lifecycle workflows, ready to activate under pressure.
Defined outputOwned runbooks + activation paths
03Discipline / Prove
Resilience Validation
Capability is proven in structured simulation programmes, scored, tracked, and closed with action.
Defined outputScored exercise + action register
04Discipline / Govern
Threat Intelligence & Risk Governance
Threats mapped to capabilities, exposure scored, escalation triggered at defined thresholds.
Defined outputRisk view + escalation thresholds
05Discipline / Assure
Investment Analysis & Regulatory Assurance
Resilience argued in board-grade financial terms and kept audit-ready at the article level.
Defined outputBoard case + assurance evidence
The shift
BeforeDocuments, assumptions, shared ownership.
Plans exist, but nobody can see what is current, critical, or ready to activate.
AfterEvidence, decisions, named accountability.
One operating picture connects risk, capability, testing, and the board decision.
Delivery
The method runs on a platform.
Every discipline is operationalised in OpenResilience, the BCM platform behind Varde Advisory's Continuity & Recovery work. Method and tool are one system.
