Business Continuity and Operational Resilience Governance | Governance Ep 16

If a disaster hit today, who ultimately owns recovery? Resilience isn't just an IT problem. It starts with governance and accountability at the very top. We start with governance and the board's top-level accountability, and why company directors have a legal responsibility to act on computer information and data security. Then we separate business continuity from disaster recovery, keeping the business running versus restoring IT. You will learn how the business impact analysis assesses disruption consequences to derive strict recovery priorities (identify critical processes, assess financial, legal and reputational impact, and determine MTPD and RTO). Then we cover operational resilience as a strategic shift from preventing every failure to absorbing and recovering from it, testing and regulations including resilience mandates under SOX, HIPAA, GDPR and FFIEC, and common failures like leadership absence and untested plans. We finish with a takeaway governance structure that maps the chain of accountability from the board to IT. In this lesson you will learn: Board accountability for resilience Business continuity vs disaster recovery Business impact analysis, MTPD and RTO Operational resilience as a strategic shift Regulatory mandates and the accountability chain Chapters: 0:00 Introduction: Resilience Governance 0:28 Lesson roadmap 0:53 Section 1: Governance and board, top-level accountability 1:36 Directors have legal responsibility 2:15 Allocating resources for resilience 2:45 Section 2: Continuity vs DR 3:36 Planning before the fire 4:08 Section 3: Business impact analysis, determining priorities 4:50 Identify, assess and determine MTPD and RTO 5:42 Section 4: Operational resilience, the strategic shift 6:30 Section 5: Testing and regulations, proving it works 7:14 Regulators balance security and business 7:35 SOX, HIPAA, GDPR and FFIEC 8:20 Common failures 9:03 Section 6: The takeaway artifact, governance structure 9:54 Wrap up: If a disaster hit today, who owns recovery? This is episode 16 of the cybersecurity governance series. Watch the full playlist in order to build your governance, risk and compliance skills from the ground up, and subscribe so you do not miss the next lesson. Cybersecurity Masterclass by Joshua Moses | CyberTrace Foundation.