Embedding business resilience in the organisational culture
Having robust Business Resilience arrangements requires ongoing engagement with staff, both to promote the concept of resilience (ensuring that skills and understanding are maintained) and to draw on their expertise to improve plans and responses. Promoting Business Resilience is therefore an important part of having Business Resilience, even within an organisation.
Risk management specialists have developed Risk Architectures and management systems which can contribute to the development of Business Resilience. These include working with existing governance arrangements and identifying the responsibilities of different internal stakeholders, in order to embed methodologies in the organisational culture, e.g. identifying risk management responsibilities for:
- the CEO/Board
- the business unit manager
- individual employees
- the risk manager (and specialist risk management functions)
- internal audit manager
Organisations with arrangements of this type will be able to draw on them to help in the development of a culture of Business Resilience.
Promoting business resilience is discussed more fully in the next section.