Summary This framework is well-designed for reviewing and assessing an entity’s Business Continuity Management (BCM) and Operational Resilience (OR) capability. It is professional-grade, aligned with regulatory expectations (e.g., UK FCA/PRA, APRA CPS 230, DORA), and suitable for internal audits, gap assessments, or external reviews.
Recommendation
Use this framework as your primary assessment tool for reviewing BCM and operational resilience capability in medium to large regulated entities (financial services, critical infrastructure, healthcare, utilities).
For smaller entities, use it as a benchmark with proportionality adjustments.
John Salter Consulting Services 