Roads to Resilience

3.  Strategy, Tactics and Operations

The intention is to establish a risk-based, well- informed and integrated approach to strategy, tactics and operations based on (1) clear understanding of the risk attitude of the board and senior executives with risk appetite guidance for managers; and (2) suitable and sufficient risk assessment activities throughout the development and implementation of the strategy, tactics and operations of the organisation. • determine risk attitude: establish the risk attitude of the board and develop risk appetite positions for each of the main types of risk to support decision-makers and ensure that decisions are linked to risk exposures, so that threats to resilience are seen as a risk to the reputation of the organisation • undertake risk assessment: develop a dynamic approach to risk assessment, so that the risk register becomes more than a list of risks, acts as a resilience action plan and provides clear understanding of the actions to be taken in the event of emerging risks and/or adverse circumstances arising Resilience action points

88

Section 8: Implications for Board Members