Agenda

Agenda

Developing Operational Resiliency Strategies | Agenda

Agenda timing is in HKT/SGT

08:4509:00

Registration

09:00 - 10:00

09:0010:00

Regulation and background

09:00 - 10:00

  • Why is operational resilience important?
  • The regulatory story so far 
  • Group exercise

10:0010:15

Morning break

09:00 - 10:00

10:1511:15

Operational resilience frameworks

09:00 - 10:00

  • The role of operational risk
  • Operational resilience and business continuity
  • Creating an operational resilience framework
  • Key challenges
  • What does good look like?

11:1511:15

End of Day 1

09:00 - 10:00

08:4509:00

Registration

09:00 - 10:00

09:0010:00

Identifying and mapping important business services

09:00 - 10:00

  • Identifying and ranking most important business services 
  • Ascertaining the users of each service
  • Developing a robust methodology for identification 
  • Mapping the people, processes, technology, facilities & information needed
  • Regulators expectations for firm’s mapping methodologies

10:0010:15

Morning break

09:00 - 10:00

10:1511:15

Impact tolerances

09:00 - 10:00

  • Difference between impact tolerance and risk appetite
  • How to set impact tolerances
  • Setting impact tolerances
    • Challenges
    • Benefits
  • Who is responsible for setting impact tolerances?
  • Which metrics should firms consider?

11:1511:15

End of Day 2

09:00 - 10:00

08:4509:00

Registration

09:00 - 10:00

09:0010:00

Scenario testing

09:00 - 10:00

  • Developing a scenario testing approach
  • Extreme but plausible disruptions
  • Focusing on response and recovery activities rather than preventing incidents
  • Considering how to respond to disruptions
  • Testing your firms ability to remain within impact tolerances

10:0010:15

Morning break

09:00 - 10:00

10:1511:15

Learning from operational disruptions

09:00 - 10:00

  • Investigating reasons for your failures
  • Proactively learning from incidents
  • Working collaboratively with regulators
  • Aggregating data on failures and near misses
  • Sharing best practice approaches
  • Lessons from other industries

11:1511:15

End of Day 3

09:00 - 10:00

08:4509:00

Registration

09:00 - 10:00

09:0010:00

Effective communication

09:00 - 10:00

  • Developing and testing communication plans for plausible disruptions
  • Clear and effective communication during a crisis including the use of supported technology
  • Focus on timeliness, regularity and clarity 
  • Informing internal and external stakeholders through established channels
  • Proactive interaction with regulators

10:0010:15

Morning break

09:00 - 10:00

10:1511:15

Emerging trends and potential future disruptors

09:00 - 10:00

  • Cyber risk
  • Technological innovation
  • Third party risk
  • Climate change risk
  • Upcoming regulatory developments

11:1511:15

End of course

09:00 - 10:00