Operational Resilience
Operational resilience training for UK firms covering the FCA/PRA framework, important business services, impact tolerances and each team's role.
Want this course for your team?
See it in action and get pricing tailored to your firm and learner numbers.
Request a demoWhat is operational resilience and why does it matter?
Operational resilience is a firm’s ability to keep delivering its most important services through disruption such as a system outage, cyber incident or supplier failure. It matters because when a critical service fails, harm reaches customers, markets and the firm’s reputation within minutes, and the FCA and PRA expect firms to plan for disruption as a question of when, not if.
Who needs operational resilience training?
This training is designed for operations, technology, risk and management staff at regulated firms, and for anyone whose work supports a critical service. Resilience is not solely a technology concern; it depends on people across the firm understanding their part and acting on it before an incident occurs.
What does operational resilience training cover?
The training explains the operational resilience framework in accessible, practical terms. It helps staff understand important business services and impact tolerances, recognise vulnerabilities and the role of scenario testing, and manage the third-party risk that runs through so many critical services. Above all, it shows how each individual’s area contributes to keeping services running.
What do the FCA and PRA expect on operational resilience?
The FCA and PRA framework requires firms to identify their important business services, set an impact tolerance for each (the maximum disruption they will tolerate) and demonstrate they can remain within those tolerances through severe but plausible scenarios. Firms must test this ability regularly; failing to do so can lead to regulatory action and a lasting loss of trust.
What your team will learn
- Explain what operational resilience means and why it matters
- Recognise important business services and impact tolerances
- Identify vulnerabilities and the role of scenario testing
- Recognise each individual's role in maintaining resilience
What's included
- ~15 min of focused, scenario-based learning
- CPD accredited (CII)
- Built-in quiz with a configurable pass mark
- Reviewed and kept current with UK regulation
- Time-stamped completion records for your audit trail
How it works
-
Assign it in seconds
Enrol a team, a role or your whole firm from the CityREPORTS dashboard, with automated reminders that chase completion for you.
-
Your team completes it
Learners work through the course at their own pace on any device, finishing with a short assessment that demonstrates understanding.
-
Evidence it to the regulator
Every completion is time-stamped and retained, so you can prove the right people did the right training at any moment.
Frequently asked questions
- What do the FCA and PRA frameworks require from regulated firms on operational resilience?
- The FCA and PRA require firms to identify their important business services, set an impact tolerance for each, map the people, processes, technology and third parties behind them, and demonstrate through regular testing that they can remain within those tolerances through severe but plausible disruption. Boards must own resilience, and testing findings must drive meaningful improvement.
- What is an important business service?
- An important business service is one that, if disrupted, could cause intolerable harm to the firm's customers or pose a risk to market integrity or the firm's safety and soundness. Firms must identify these services, map the people, processes, technology and third parties behind them, and set impact tolerances for each.
- What is an impact tolerance?
- An impact tolerance is the maximum level of disruption a firm will tolerate for an important business service, expressed as a clear metric such as a maximum time the service can be down. Firms must be able to remain within their impact tolerances through severe but plausible scenarios, and test their ability to do so.
- Who needs operational resilience training?
- Operations, technology, risk and management staff at regulated firms, and anyone whose work supports a critical service, benefit from operational resilience training. Resilience is not solely a technology concern; it depends on people across the firm understanding their part and acting on it before an incident occurs.
Related courses
Cyber Security Awareness
Cyber security training for UK financial services that equips staff to be the first line of defence against phishing, ransomware and social engineering.
Data Protection (UK GDPR)
Data protection training for UK firms: a practical grasp of the UK GDPR, lawful processing, data subject rights and breach response.