The scoreboard, honestly: the hard targets, how often each one is actually looked at,
and the quiet human signals that never make it onto a dashboard.
Enterprise Resilience Score Improvement
Improve our internal resilience maturity score by moving from our current Level 2 to Level 3 within 18 months.
Target · Achieve Level 3 maturityIf we're currently scoring 'Reactive' (Level 2) on our BCM framework, you'll need to show clear progress towards 'Proactive' (Level 3) by, say, Q4 next year. That means more robust plans, better exercise outcomes, and stronger team capabilities.
Reduction in Recovery Time Objective (RTO)
Demonstrate a 20% reduction in the Recovery Time Objective for our top 5 critical Operations processes through large-scale exercises and plan optimisation.
Target · 20% RTO reduction for top 5 processesIf our customer support system currently has an RTO of 8 hours, you'll need to show through a full-scale exercise that your team's plans and preparations can get it back up and running in 6.4 hours or less. This is about real-world performance, not just theoretical targets.
Reduction in Maximum Tolerable Outage (MTO) Financial Impact
Quantify and reduce the potential financial impact of a maximum tolerable outage by at least £5M through targeted resilience investments and improved recovery strategies.
Target · £5M+ reduction in MTO financial impactAfter refreshing BIAs and working with Finance, you might identify that a major logistics hub outage could cost £15M. By implementing a new recovery strategy (e.g., a secondary distribution centre), you'd aim to bring that potential loss down to £10M or less.
BCM Programme Audit Pass Rate
Maintain a 100% pass rate on all internal and external BCM programme audits, with zero critical findings.
Target · 100% pass rate, zero critical findingsWhen the external ISO 22301 auditors come knocking, your programme should be so buttoned-up that they find no 'major non-conformities'. A minor observation is fine, but anything that questions the fundamental effectiveness of the programme is a miss.
Team Engagement & Development
Achieve a team engagement score of 80%+ in annual surveys and ensure 100% of your direct reports have a clear development plan and achieve at least one major development goal per year.
Target · 80%+ engagement, 100% development plan completionIt's not just about the programme; it's about the people. You'll need to build a high-performing, motivated team. That means regular 1:1s, coaching, and making sure they feel supported and are growing in their careers.
Strategic Influence & Buy-in
You're seen as the go-to expert for resilience, with your recommendations actively sought out by Operations leadership and integrated into strategic planning.
- Operations leaders proactively consult you on new initiatives' resilience implications. Your team's BIA outputs are consistently used to inform investment decisions. You're invited to strategic planning sessions, not just operational ones. You're able to secure budget and resources for resilience initiatives without excessive friction.
Team Leadership & Mentorship
Your team is high-performing, well-motivated, and developing their skills. You're known for supporting them and getting the best out of everyone.
- Your direct reports consistently meet or exceed their performance goals. They actively seek your guidance and feedback. Peer managers comment positively on your team's capability and morale. You're able to delegate effectively, empowering your team while maintaining oversight.
Programme Maturity & Continuous Improvement
The BCM programme isn't static; it's constantly evolving, learning from exercises and real incidents, and adapting to the changing threat landscape.
- After Action Reviews (AARs) consistently lead to actionable improvements that are tracked and implemented. You regularly introduce new methodologies or technologies to enhance the programme. The programme demonstrates agility in responding to new risks (e.g., new regulations, emerging cyber threats). You're not just maintaining
- you're advancing.
Stakeholder Confidence & Communication
Operations leadership, auditors, and even the Board have high confidence in our BCM capabilities, largely due to your clear, concise, and credible communication.
- Your presentations to senior leadership are clear, impactful, and well-received. Auditors consistently provide positive feedback on your programme's documentation and your team's responses. You can explain complex resilience concepts in simple business terms. Stakeholders trust your judgment during both planning and actual incidents.