Operational Resilience
The FCA has made operational resilience a requirement for banks, building societies, PRA-designated investment firms, enhanced scope firms and other financial institutions.
An operational resilience framework involves identifying important business services, setting impact tolerances, and mapping and testing to respond to operational disruptions.
Our Operational Resilience course will provide you with a better understanding of what the FCA means by operational resilience and how to comply with the FCA's requirements.
We have a free untracked version of this module for everyone to review the course content.
- 55 Minutes
- All staff
- Based on UK legislation, but suitable for global audiences upon the removal of UK-specific references and translation as necessary.

Learning objectives
- Appreciate what is meant by operational resilience and how it differs from operational risk and business continuity
- Recognise different types of operational disruptions
- Know the key elements of an operational resilience programme and operational mapping
- Identify important business services
- Set appropriate impact tolerances for important business services
- Take appropriate action in line with FCA guidance to map operational resilience across your firm and perform scenario testing
- Communicate operational resilience plans effectively and provide adequate governance
What can you expect your employees to learn?
Introduction
What is operational resilience?
- What are operational disruptions?
- You decide: Why is it important?
- Operational risk versus operational resilience
- What is the difference between operational resilience & business continuity or disaster recovery?
What is the history of operational resilience?
- Let's look at the key elements of an operational resilience programme in more detail
- You decide: Who is responsible for operational resilience?
- What are the implementation deadlines for operational resilience?
What are important business services?
- Key factors in identifying important business services
- You decide: Is it an important business service or not?
What are impact tolerances for operational resilience?
- Key considerations when setting impact tolerance
- Examples
- Scenario: The call centre
What is operational resilience mapping?
- More on mapping
- You decide: True or false?
Scenario testing
- You decide: What scenarios to test?
- Cyber resilience
Lessons learned exercises
- You decide: The elements of an operational resilience self-assessment
- Self-assessment documentation
You decide: The elements of an operational resilience self-assessment
-
Self-assessment documentation
Developing communications plans for when important business services are disrupted
- Getting communications right
- You decide: Recognising the benefits
Governance & operational resilience
Supervisory review & feedback
Critical third-party providers - the proposed new rules
Summary
Affirmation
Assessment
Does your company have…
Under 50 employees?
We recommend our CoreCompliance, our solution, perfect for smaller teams. Start your training immediately with pre-configured, ready-to-go courses.
Over 50 employees?
We have a range of flexible pricing plans to suit your unique needs. Choose from off-the-shelf course libraries or a customised, bespoke approach to reach your compliance learning goals.
Stay up to date on the latest compliance news
Your questions, answered
CoreCompliance
DORA
Common FAQs
How can I benchmark my team's cyber security awareness?
Which courses are included in CoreCompliance?
All users get access to courses on popular compliance topics, such as: bribery, cybersecurity, equality, health and safety. In addition, you can get courses specific to your business sector.
There are over 150 courses included within the CoreCompliance package. The actual courses provided depend on the sector chosen for the subscription.
Are CoreCompliance courses only intended for use by those based in the UK?
Do the courses bookmark my progress?
What are in-depth courses?
What are microlearning courses?
Can we use a Skillcast certificate to evidence training to regulators, courts, etc?
What is "mandatory training"?
How do I check my mandatory training?
What is in my training record?
Can I get certificates for courses I've completed?
How do I update my details?
Do I get a dashboard to manage my employees?
How do I start a subscription?
Can I change the number of seats in my subscription?
Can I get monthly or annual subscriptions?
Can I get an invoice for the subscription?
How long do I have to wait to assign training after making the payment?
How do I purchase more seats?
Can I reuse the seats of employees who have left my company?
Can I add more than 50 users to my subscription?
Can I get a refund if I terminate my subscription partway through the year?
Are the courses SCORM-compliant?
What other tools are needed beyond training?
Can users only view the courses assigned to them?
Related courses
Boost your compliance efforts with our range of courses. Varying in length and topic, our courses equip you with the tools to create an ethical and resilient workplace.
Phishing
It's essential for your employees to know what phishing is, how to spot the signs of an attempt and how to protect themselves and your Company.
Information Security
The loss or theft of commercially sensitive information may damage revenues, reputation and consumer trust.
Understanding Modern Slavery
Bring "Understanding Modern Slavery" training to life using animation characters and storylines.
Gifts and Hospitality
Bring "Gifts and Hospitality" compliance training to life using animation characters and storylines.
Spot a Phishing Attempt
Bring "Spot a Phishing Attempt" online training to life using animation characters and storylines.
Abuse of Position
Bring "Abuse of Position" training to life using animation characters and storylines.
Whistleblowing
Bring "Whistleblowing" online training to life using animation characters and storylines.
Money Laundering Red Flags
Bring "Money Laundering Red Flags" training to life using animation characters and storylines.
Speak Up
Bring "Speak Up" compliance training to life using animation characters and storylines.
Display Screen Equipment
Bring "Display Screen Equipment" e-learning to life using animation characters and storylines.
Identity Fraud
Bring "Identity Fraud" compliance training to life using animation characters and storylines.
Slips and Trips
Bring "Slips and Trips" online training to life using animation characters and storylines.
Manual Handling
Bring "Manual Handling" e-learning to life using animation characters and storylines.
Records Management
Records management refers to employees' creation, storage, archiving, and disposal of business records.
Deepfake Awareness
Bring "Deepfake Awareness" compliance training to life using animation characters and storylines.
Understanding Information Security
Bring "Understanding Information Security" e-learning to life using animation characters and storylines.
Common Cyber Threats
Bring "Common Cyber Threats" online training to life using animation characters and storylines.
Bring Your Own Device Security
Bring "Bring Your Own Device Security" training to life using animation characters and storylines.
Device Hygiene
Bring "Device Hygiene" training to life using animation characters and storylines.
Malware
Bring "Malware" training to life using animation characters and storylines.
Ransomware
Bring "Ransomware" training to life using animation characters and storylines.
Smishing
Bring "Smishing" training to life using animation characters and storylines.
Spear Phishing
Bring "Spear Phishing" training to life using animation characters and storylines.
Video Conferencing
Bring "Video Conferencing" training to life using animation characters and storylines.
Vishing
Bring "Vishing" training to life using animation characters and storylines.
Creating Strong Passwords
Bring "Creating Strong Passwords" training to life using animation characters and storylines.
Multi-factor Authentication
Bring "Multi-factor Authentication" training to life using animation characters and storylines.
Reacting to Password Breaches
Bring "Reacting to Password Breaches" training to life using animation characters and storylines.
Information Classification
Bring "Information Classification" training to life using animation characters and storylines.
Information Security on the Move
Bring "Information Security on the Move" training to life using animation characters and storylines.
Tailgating and Piggybacking
Bring "Tailgating and Piggybacking" training to life using animation characters and storylines.
Secure Web Browsing
Bring "Secure Web Browsing" training to life using animation characters and storylines.
Supply Chain Cybersecurity
Bring "Supply chain cybersecurity" training to life using animation characters and storylines.
Transferring Information Securely
Bring "Transferring Information Securely" training to life using animation characters and storylines.
Using Wi-Fi safely
Bring "Using Wi-Fi safely" training to life using animation characters and storylines.
Advising customers on cybersecurity
Bring "Advising customers on cybersecurity" training to life using animation characters and storylines.
CEO fraud
Bring "CEO fraud" training to life using animation characters and storylines.
Guide to Secure Remote Working
Bring "Guide to Secure Remote Working" training to life using animation characters and storylines.
Think Before You Click
Bring "Think before you click" training to life using animation characters and storylines.