The scoreboard, honestly: the hard targets, how often each one is actually looked at,
and the quiet human signals that never make it onto a dashboard.
Enterprise Resilience Maturity Score
Improvement in our internal resilience maturity model, which assesses our capabilities across BCM, IT DR, crisis management, and supply chain resilience.
Target · Increase maturity from Level 2 to Level 3 (out of 5) within 18 months, with a clear roadmap to Level 4.Achieving a score of 3.2 in Q4, up from 2.5 in Q1, demonstrating progress in key areas like exercise effectiveness and supply chain mapping.
Reduction in Recovery Time Objective (RTO) Gaps
The percentage reduction in the difference between our desired RTOs and our actual demonstrated recovery capabilities for critical business processes.
Target · Achieve a 20% reduction in RTO gaps for the top 10 critical processes within 12 months.After a full-scale exercise, the RTO for our core order processing system improved from 6 hours to 4.5 hours, closing a 1.5-hour gap.
Financial Impact Reduction from Max Tolerable Outage (MTO)
Quantifiable reduction in the potential financial loss associated with a Maximum Tolerable Outage (MTO) for our most critical functions.
Target · Reduce the projected MTO financial impact by £5M+ through targeted resilience investments and improved recovery strategies within 2 years.Through investment in redundant systems and a faster recovery strategy, the estimated financial loss for a 24-hour outage of our primary logistics platform dropped from £20M to £14M.
Critical Audit Findings Related to Resilience
The number of high-severity findings from internal and external audits related to business continuity, disaster recovery, and operational resilience.
Target · Reduce critical audit findings by 75% year-over-year.Moving from 4 critical findings in the Q4 2023 audit to 1 critical finding in Q4 2024, demonstrating significant programme improvement.
Supply Chain Resilience Score
Improvement in our internal scoring model for critical third-party vendor resilience, assessing their BCM maturity and disaster recovery capabilities.
Target · Increase the average resilience score for our top 50 critical suppliers by 15% within 18 months.After working with our key logistics provider, their BCM maturity score improved from 2.8 to 3.3, reflecting better documented plans and recent exercise participation.
Board and C-Suite Confidence
The level of trust and reliance the Board and C-Suite place in the resilience programme, evidenced by their proactive engagement and strategic investment decisions.
- You're regularly invited to strategic planning meetings to provide input on risk
- your recommendations for resilience investments are typically approved
- the COO and CEO reference the resilience programme in investor calls
- you're seen as the go-to expert for major operational risk questions.
Cross-functional Resilience Integration
How well resilience considerations are embedded into the daily operations and strategic project planning across the business unit, rather than being an afterthought.
- Resilience requirements are built into new product development lifecycles
- IT DR is a standard part of system architecture reviews
- major change programmes automatically include resilience impact assessments
- department heads proactively seek your team's input on process changes that could affect continuity.
Team Leadership and Development
The effectiveness of your leadership in building, mentoring, and developing a high-performing operational resilience team, including succession planning.
- Your direct reports are consistently meeting or exceeding their objectives
- there's a clear succession plan for key roles
- team members are progressing into more senior positions
- the team demonstrates strong collaboration and knowledge sharing
- feedback from your team and peers highlights your supportive and empowering leadership style.
Regulatory Engagement and Reputation
Our standing with key regulatory bodies regarding operational resilience, demonstrating proactive engagement and a strong compliance posture.
- Regulators view us as a leader in resilience, often asking for our input on industry best practices
- we receive minimal or no adverse findings during regulatory reviews
- you're invited to speak at industry forums on resilience topics, enhancing our external reputation.