Manuale di Resilienza

The theme of the resilience and business continuity has become highly topical for any organisation in recent years, not least because of events such as the pandemic, the climate crisis, the war...

The UK Prudential Regulation Authority, defines the resilience such as "...the ability of firms and the financial sector as a whole to prevent, adapt, respond to, recover, and learn from operational disruptions."

The term therefore covers all phases of the management of an adverse event, from its prevention to the subsequent recovery and continuous learning phases; in this regard, the text addresses:

• on the one hand, the management of risks of various kinds that may affect an organisation (including risks from third and fourth parties) and the assessment of appropriate actions for their prevention and management
• on the other hand, business continuity, understood as the management, in the short and long term, of scenarios that cause the unavailability of an organisation's assets/processes/services.

In this context, therefore, the text deals with:

• risk management measures, essentially aimed at ensuring the resilience of an organisation's assets/processes/services in advance, limiting both the probability of an adverse event occurring and its impacts
• solutions to ensure the restoration of operations after an adverse event.

The text is aimed at all the corporate structures involved (ICT, Security, Organisation, Personnel, Legal, Compliace, Risk, Audit...), with a vision that is as exhaustive and analytical as possible (as the 600 pages of the text demonstrate), without taking anything for granted, in order to allow the reader to have all the tools to deal with such complex issues in practice, albeit with differentiated levels of detail.

In the very technical areas, the treatment aims to give an overall but comprehensible view of the subject matter, more in depth are the topics related to risk detection and management, BIA, the definition of solutions and intervention plans..., addressing in detail the most common errors, such as

• not considering interdependencies between processes and cut-offs in the evaluation of RTOs
• the failure to run tests long enough to assess the resilience of a DR site
• disregarding the limitations of risk assessment or BIA methodologies
• not setting up a proper personnel management policy...

The book is intended to provide very practical guidance and is therefore accompanied by a significant number of tables, internal and external catalogues, references to authoritative publications that can be obtained free of charge online for in-depth analysis...

Particular attention is paid to the DORA Regulationfor which this book is a useful reference for the implementation of the required fulfilments.