Roads to Resilience

2.  Business Structure

The intention is to establish an inclusive and open business structure with (1) an established means of communicating on risk management issues by way of a robust risk architecture, including defined resilience roles and responsibilities; and (2) well-developed and validated crisis response plans that have been fully tested and rehearsed as appropriate. • develop risk architecture: establish a risk architecture, including representatives from the supply chain, contractors and business partners to evaluate risk exposures and develop co-ordinated responses to changing or emerging risks • plan crisis management: nominate crisis management team(s) separate from normal management to be activated at pre-determined trigger point(s) for different types of risks that could cause disruption and/or damage to reputation Resilience action points

86

Section 8: Implications for Board Members