Operational Resilience and Critical Service Mapping
Identification of your important business services, the resources they depend on, and the maximum disruption each can tolerate.
Start in the portal
Sign in, complete the intake form for this service, then pay the engagement fee before submitting. You can save a draft so your answers are not lost.
- Standard
- 5 business days
Regulatory and standards basis
This engagement is performed against the following instruments. Each is cited in the deliverable at the point it is relied on.
- Basel Committee Principles for Operational Resilience
- ISO 22301:2019
- CBN Risk-Based Cybersecurity Framework
Who this is for
- Payment infrastructure operators
- Banks and switches
What you receive
- 01Important business service identification and prioritisation
- 02End-to-end service maps including third-party dependencies
- 03Impact tolerance statements per service
- 04Severe-but-plausible scenario testing plan
How the engagement runs
Phase 1
Intake
You complete a structured intake form and upload supporting documents. Autosaved, so it can be finished across several sittings.
Phase 2
Evidence review
We review what you have provided and raise a document request list for anything material that is missing. We do not guess at gaps.
Phase 3
Analysis and drafting
Your documents and answers are assessed against the applicable control universe. Findings are recorded with an evidence reference or explicitly flagged as an assumption.
Phase 4
Quality review
A named reviewer works through every finding and section, and a partner approves. Their name and credentials appear on the report.
Phase 5
Delivery
The deliverable is released in the portal within 5 business days of payment. Two revision rounds are included.
Questions
Who approves the deliverable?
A named member of the engagement team reviews it and a partner approves it. Their name, title and credentials are printed on the report, and the approval is recorded against the engagement in the portal.
What happens if we disagree with a finding?
You raise a review from the deliverable page, selecting the specific finding or assumption you are challenging and attaching supporting evidence. Two revision rounds are included. Factual corrections and any error on our side never count against those rounds and are never billed.
How quickly can this be turned around?
Standard delivery is 5 business days from payment. Express delivery in 48 to 72 hours is available at a 75% uplift.
Where do our documents live?
In private storage, accessible only through short-lived signed links, with every view and download logged. Nothing is attached to email. Our security posture and data residency are published on the trust page.
How do we pay?
Sign in to the portal, choose this service, complete the intake form, then pay by card through Stripe. You can save a draft at any time before payment.
Related engagements in Risk and Governance
AI/ML Model Risk Validation
Independent validation of a machine learning model in production: performance, stability, explainability and the governance around it.
Anti-Bribery and Corruption Programme
An anti-bribery programme aligned to ISO 37001, covering gifts, facilitation payments, third-party intermediaries and whistleblowing.
Consumer Protection and Complaints Framework
A complaints and fair-treatment framework meeting the CBN Consumer Protection Framework, with the reporting your regulator expects.