Integrated Security Management Model: A Proposal applied to Organisational Resilience
The purpose of this article is to contribute scientifically to the thematic areas of
organisational resilience and security risk management by providing a model of a
flexible security management system that can be integrated with other management systems and be applied to the operational dimension of organisational resilience. To this end, the literature on security risk and operational resilience has been reviewed as well as on security governance models based on enterprise security risk management
and other international standards that allow integration with business processes.
During the study, an incipient production of specific models that determine
the maturity of different management systems was observed in the academic sphere, with a gap being detected in terms of security management system maturity models linked to organisational governance and enterprise risk management, which would facilitate their inclusion in the organisation’s integrated management system in a practical way. It is concluded that the proposed model provides scientific support to practitioners, and, to a greater extent, to companies and other organisations irrespective of their size, sector of activity or location.
Unravelling Critical Business Services and Dependencies for Resilience
This article examines the crucial process of identifying essential business services and their dependencies for operational resilience. It emphasises a systematic approach to mapping and managing these services in today's volatile environment. Key strategies include conducting impact analyses, engaging stakeholders, and leveraging technology. The article highlights the importance of collaboration, regular reassessment, and effective prioritisation in enhancing organisational resilience.
Navigating Labour Law Compliance in a Changing Work Landscape
This article examines labour law compliance challenges in evolving work models, focusing on remote work, flexible contracts, and the gig economy. It emphasises the need for resilience management strategies to navigate regulatory complexities. Key areas include remote work impact, worker protection, and employee classification. The article highlights the importance of regular training, clear policies, technology utilisation, and proactive stakeholder engagement for effective compliance management.
Building a Resilient Organisation
Sun TZU, in The Art of War writes that:
“If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle.”
This quotation highlights the importance of understanding our organisations and the environments in which we operate.
The Invisible Web: Unravelling the Complexity of Interconnected Systems
This article examines challenges in implementing resilience in complex interconnected systems, emphasising understanding dependencies. It discusses mapping complexity through network analysis, agent-based modelling, and data-driven techniques. Key focus areas include mapping dependencies, analysing networks, and adaptive management. Insights highlight the importance of a 'system-of-systems' perspective, cascading failures' impact, and emerging technologies like AI and digital twins for resilience planning.
Navigating the Cyber Storm: Building Resilience in an Era of Digital Threats
This article examines cyber resilience's crucial role in today's digital landscape, with global data breach costs projected to reach £5 trillion in 2024. Key focus areas include risk assessment, incident response, continuous monitoring, AI-driven cybersecurity, Zero Trust Architecture, and board-level involvement. Cyber resilience integrates into overall operations, utilising frameworks like CRMM and emerging technologies whilst balancing robust defences with budget constraints.
McKinsey on Risk & Resilience: Managing Risks to achieve Resilience
Welcome to the latest issue of McKinsey on Risk & Resilience, now a subscription-based, quarterly publication featuring the latest trends, research, insights, and best practices related to financial and nonfinancial risks, and how to build and strengthen business resilience in an ever-evolving world.