Roads to Resilience

Table 8.4 Strategy, tactics and operations resilience checklist for the board

‘Strategy, Tactics and Operations’ resilience checklist Board members should ask “to what extent are the board and senior executives sufficiently aware and/or provided with necessary information and assurance regarding … … ”

Determine risk attitude

1. The attitude of the organisation to risk and seizing the opportunities that taking risks can deliver

2. The information required by the board to discuss topics and concerns related to risk and resilience

3. The attitude of the organisation to high-risk activities, including whether there is a means of sharing this with the board

4. The mechanisms by which the board would stop or veto high-risk strategic, tactical and/or operational activities

5. The links between risk and the strategy, so that the board can identify the ‘risks it is willing to take’

6. Information on the emerging risks and changes that have occurred in the previous 12 months Undertake risk assessment

1. The extent to which risk assessments are undertaken for all aspects of the strategy, tactics and operations of the organisation

2. The procedures in place for undertaking risk assessment in the organisation and how these are co-ordinated

3. Whether risk assessment procedures include consideration of the risks inherent within the business model

4. Whether annual budgets and capital expenditure projects are assessed on approval and are subject to post-implementation reviews

5. The key dependencies and whether there is any over reliance on specific suppliers or partners

6. The trigger points at which developing risks are escalated, including procedures for escalation to the board

89

Roads to Resilience: Building dynamic approaches to risk to achieve future success