Organising organisational resilience

1 July 2018 Security Services & Risk Management

Today’s world is volatile, uncertain, complex and ambiguous (VUCA). In such an environment, future planning is difficult, if not impossible. As a result, organisations are increasingly focusing on becoming resilient; that is, to be able to anticipate, adapt and respond both to incremental and sudden changes or disruptions.

Philippa Chappell
Philippa Chappell

“But while many organisations are starting to understand what these three components of organisational resilience are, few understand the need to integrate them in order to ensure resilience is actually achieved,” says Philippa Chappell, manager: advisory services, ContinuitySA. “Even fewer understand how to structure this collaboration.”

The challenge is that while each of the three components of organisational resilience is critical, they are typically the responsibility of different role-players. The anticipate component, which involves scoping the threat landscape and putting a risk strategy in place, is handled by the enterprise risk management department. Adapt, which focuses on operational resilience, would be governed by the COO and the business units concerned. Response is addressed by the business continuity manager and covered by the business continuity plan.

In dealing with any threat, it is vital that each of these areas works closely with the others. For example, in the case of a cyber-attack, it is vital that the organisation knows what cyber risks it faces: What confidential information and intellectual property are held in the systems, and what controls are in place?

It would be necessary for the risk management team to collaborate with IT in this case, and the results of its work would inform the actions taken by the operations team. The latter would have to consider the vulnerabilities and identify any single points of failure, such as central legacy system on which all other systems depend. It would also have to put contingency plans in place in the event of an attack.

Clearly, for maximum organisational resilience, these role-players must collaborate across the whole process. There are four key levers to drive better collaboration:

• Align each component with relevant international standards and best practices. Each of these three areas will have ISO or similar standards. Aligning to them will ensure that their information and processes are not contradictory.

• Create an integrated management structure. Typically, each of the three areas will be governed by a separate board or executive committee. It is critical that some way be found of coordinating these committees. Cross-membership is one way, or alternatively a central committee could be established.

• Develop a corporate culture of organisational resilience. If the organisation as a whole understands what organisational resilience is, and why it is so important, the various component programs will really begin to gain traction.

• Use technology wisely and innovatively. Many technologies can be used to improve both how each program is managed, and in a crisis itself. As regards program management, enterprise resource planners, SharePoint and OneDrive can drive workflows, while newer technologies like Office 365, Slack and Yammer are designed to drive collaboration. When it comes to responding to a crisis, widely used programs like What’s App can be invaluable. Facebook has a crisis response feature, and insurance companies offer emergency alert apps.

In addition, leading business continuity providers like ContinuitySA are bringing business continuity apps to the market in order to make business continuity plans immediately accessible and more user-friendly.

Organisational resilience is the key to sustainability in a VUCA world, and collaboration is the key to building it effectively.

For more information contact ContinuitySA, +27 11 554 8050, [email protected], www.continuitysa.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Risk management and compliance enforcement
Security Services & Risk Management
Having a risk management and compliance programme (RMCP) is not just a procedural formality; it is a legal requirement under Section 42 of the Financial Intelligence Centre Act (FICA).

Read more...
The dangers of poor-quality solar cables
Security Services & Risk Management Smart Home Automation
Reports indicate that one in six fires attended by South African firefighters is linked to substandard solar installations, often due to faulty wiring or incompatible components.

Read more...
Growing risks for employers
Security Services & Risk Management
With South Africa’s unemployment rate exceeding 32% and expected to rise beyond 33% this year, desperation is fuelling deception in the job market. Trust is no longer a given, it is a gamble.

Read more...
Chubbsafes celebrates 190 years
Gunnebo Safe Storage Africa News & Events Security Services & Risk Management
Chubbsafes marks its 190th anniversary in 2025 and as a highlight of the anniversary celebrations it is launching the Chubbsafes 1835, a limited edition 190th-anniversary collector’s safe.

Read more...
New law enforcement request portal
News & Events Security Services & Risk Management
inDrive launches law enforcement request portal in South Africa to support safety investigations. New portal allows authorised South African law enforcement officials to securely request user data related to safety incidents.

Read more...
Continuous AML risk monitoring
Access Control & Identity Management Security Services & Risk Management Financial (Industry)
AU10TIX, launched continuous risk monitoring as part of its advanced anti-money laundering (AML) solution, empowering businesses to detect behavioural anomalies and emerging threats as they arise.

Read more...
Growing risks for employers
Security Services & Risk Management
With South Africa’s unemployment rate exceeding 32% and expected to rise beyond 33% this year, desperation is fuelling deception in the job market. Trust is no longer a given, it’s a gamble.

Read more...
Managing mining physical security risks
Zulu Consulting Security Services & Risk Management Mining (Industry) Facilities & Building Management
[Sponsored] Risk-IO, a web app from Zulu Consulting, is designed to assist risk managers in automating and streamlining enterprise risk management processes, ensuring no steps are skipped and everything is securely documented.

Read more...
SAFPS issues SAPS impersonation scam warning
News & Events Security Services & Risk Management
The Southern African Fraud Prevention Service (SAFPS) is warning the public against a scam in which scammers pose as members of the South African Police Service (SAPS) and trick and intimidate individuals into handing over personal and financial information.

Read more...
Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.