Developing an enterprise wide resilience (risk management, crisis management, disaster recovery management and business continuity management) capability is a core business competency that includes:

• Risk Management - Identification and management of resilience risks, including acceptance of the risks, risk mitigation and business impacts should a risk occur and become an issue.
• Business Sustainability Management - Identification and management of gaps in business sustainability based on the resilience risks identified. For core business operations and a given loss of a system (process, function or entity), how long can business be sustained for, at acceptable levels, using an alternative solution compared with the time to recover the system (process, function or entity).
• Business Management in a crisis - Addresses the considerations, strategies and priorities for managing the business through a crisis (business or enterprise level). Used to set priorities and resource allocation both in a crisis and in preparing for a crisis.
• Crisis Management - The strategies, plans, frameworks and policies and procedures for managing a crisis.
• Capability Management - Covers the testing, training and skilling of staff so that they are capable of managing and responding to a crisis. The capability management can include the Monitoring and Reporting of the resilience capability or these can be addressed separately.

Further details around the development of an enterprise wide resilience capability are presented in this document.