Operational Resilience

The FCA has made operational resilience a requirement for banks, building societies, PRA-designated investment firms, enhanced scope firms and other financial institutions.

An operational resilience framework involves identifying important business services, setting impact tolerances, and mapping and testing to respond to operational disruptions.

Our Operational Resilience course will provide you with a better understanding of what the FCA means by operational resilience and how to comply with the FCA's requirements.

We have a free untracked version of this module for everyone to review the course content.

Start your trial Course details

55 Minutes
All staff
Based on UK legislation, but suitable for global audiences upon the removal of UK-specific references and translation as necessary.

Learning objectives

Appreciate what is meant by operational resilience and how it differs from operational risk and business continuity
Recognise different types of operational disruptions
Know the key elements of an operational resilience programme and operational mapping
Identify important business services
Set appropriate impact tolerances for important business services
Take appropriate action in line with FCA guidance to map operational resilience across your firm and perform scenario testing
Communicate operational resilience plans effectively and provide adequate governance

Introduction

What is operational resilience?

What are operational disruptions?
You decide: Why is it important?
Operational risk versus operational resilience
What is the difference between operational resilience & business continuity or disaster recovery?

What is the history of operational resilience?

Let's look at the key elements of an operational resilience programme in more detail
You decide: Who is responsible for operational resilience?
What are the implementation deadlines for operational resilience?

What are important business services?

Key factors in identifying important business services
You decide: Is it an important business service or not?

What are impact tolerances for operational resilience?

Key considerations when setting impact tolerance
Examples
Scenario: The call centre

What is operational resilience mapping?

More on mapping
You decide: True or false?

Scenario testing

You decide: What scenarios to test?
Cyber resilience

Lessons learned exercises

You decide: The elements of an operational resilience self-assessment
Self-assessment documentation

You decide: The elements of an operational resilience self-assessment

Self-assessment documentation

Developing communications plans for when important business services are disrupted

Getting communications right
You decide: Recognising the benefits

Governance & operational resilience

Supervisory review & feedback

Critical third-party providers - the proposed new rules

Summary

Affirmation

Assessment

Your questions, answered

DORA

CoreCompliance

Common FAQs

How can I benchmark my team's cyber security awareness?

An anonymous cybersecurity awareness survey can assess your team’s understanding of critical security practices. Skillcast offers ready-to-use surveys to benchmark awareness levels and identify areas needing extra focus.

Which courses are included in CoreCompliance?

All users get access to courses on popular compliance topics, such as: bribery, cybersecurity, equality, health and safety. In addition, you can get courses specific to your business sector.

There are over 150 courses included within the CoreCompliance package. The actual courses provided depend on the sector chosen for the subscription.

Are CoreCompliance courses only intended for use by those based in the UK?

Most of our courses are non-jurisdiction-specific and informed by global standards. However, some of them are specifically about UK law. We currently only recommend CoreCompliance outside the UK for courses on common standards. This includes Modern Slavery, Money Laundering, and Bribery.

Do the courses bookmark my progress?

Yes, all the courses have automatic bookmarking. If you close a course without completing it, you can return to where you left off or restart the course. However, if the course features a video, your progress through the video will not be bookmarked, and you'll need to start the video afresh upon your return.

What are in-depth courses?

Your subscription includes in-depth e-learning courses on bribery, money laundering, data protection, and equality. This is ideal for annual compliance training. Each course takes 30-45 minutes and provides comprehensive foundational knowledge. They can evidence that with a certificate and CPD points.

What are microlearning courses?

The CoreCompliance includes microlearning courses on most topics that you need for employee compliance training. These are typically 2-3 minutes long and illustrate the compliance topic using engaging visuals and storylines. For each course, employees can download a certificate evidencing their completion.

Can we use a Skillcast certificate to evidence training to regulators, courts, etc?

Yes, you can present a Skillcast certificate to evidence training. Skillcast can verify its validity, i.e., when and on which account the training was done, the time spent, etc. But of course, we can't prevent one person from sitting in place of another to do the training. That's up to the client company to ensure. Also, Skillcast is not an accredited certification body. Therefore, the certificates are only proof of training completion, not a legal document.

What is "mandatory training"?

All users in your account can see all the courses available for your business sector. You can set any of these courses as "mandatory training" for one or more users. Doing this assigns the courses to them with a deadline and sends them notification emails. If they don't complete the course within the deadline, they get reminder emails to complete the assignment.

How do I check my mandatory training?

The "Mandatory Training" box on the homepage shows the percentage of completed, incomplete, and overdue mandatory training. Select the box to access your incomplete mandatory training. The date (shown in the DD/MM/YYYY format) is your deadline for completing the course.

What is in my training record?

Your training record shows a list of the courses that you've started and completed. You can select each entry to see more details, such as your passing score and your certificate. You can access your training record by selecting "Certificates" at the top of the screen.

Can I get certificates for courses I've completed?

Yes, you can download a course completion certificate after you've completed a course. To do this, select "Certificates" at the top of your screen, and then choose the relevant course from the list of those that you've completed.

How do I update my details?

Select "My Profile" at the top of the screen to change your details.

Do I get a dashboard to manage my employees?

Yes, CoreCompliance provides you with an admin dashboard where you can manage and monitor your learners. It enables you to check whether your employees have completed the mandatory training you have assigned to them. You can also download a report showing the completed, pending or overdue assignments for all your users.

How do I start a subscription?

Subscribing to the CoreCompliance is easy. You are already registered for a trial. Select "Purchase" at the top of the screen and select the number of seats you need (you will need a seat for yourself). You can pay using a credit or debit card, which will be processed by Stripe.

Can I change the number of seats in my subscription?

Yes, you can upgrade your subscription to a higher number of seats at any point during your subscription. This will be at a pro-rata charge by selecting "Billing" at the top of the page. You can also reduce the number of seats at any point, but this change will take effect from the next renewal date.

Can I get monthly or annual subscriptions?

All subscriptions are on an annual basis. We don't offer monthly subscriptions.

Can I get an invoice for the subscription?

Yes, you will receive your invoice and payment receipt by email. After the purchase, you can also log in to Stripe to download your invoice and receipt.

How long do I have to wait to assign training after making the payment?

After your payment has been processed successfully, you and your employees will have immediate access to all the e-learning. You will need to add their names and email addresses to give them access.

How do I purchase more seats?

Your admin dashboard shows the number of seats you currently have available. You can purchase more seats at any point during your subscription. To do this, select "Billing" at the top of the page, allowing you to add more users to your Portal. You can have a maximum of 50 seats in total.

Can I reuse the seats of employees who have left my company?

Yes, you can free up seats by archiving users who have left your company and assigning them to others in your company.

Can I add more than 50 users to my subscription?

CoreCompliance is only available for up to 50 users. If you require more than 50 seats, you will need to upgrade to our Standard Plan. You can contact our Sales team via our website.

Can I get a refund if I terminate my subscription partway through the year?

Unfortunately, not. CoreCompliance subscriptions are for a whole year. If you terminate your subscription partway through the year, we will not renew it, but we can't give you any refunds.

Are the courses SCORM-compliant?

Yes. This means they can be delivered via the Skillcast Portal or any other SCORM-compliant Learning Management System.

What other tools are needed beyond training?

A comprehensive compliance solution often needs more than just training. Alongside e-learning, tools like declarations, surveys, and registers that track compliance tasks are usually essential. Skillcast provides full support to help you set up these additional tools.

Can users only view the courses assigned to them?

Yes. Users can view all the courses in the portal that have been assigned to them as either mandatory or optional. Courses that are mandatory will have a deadline shown.

Operational Resilience

Learning objectives

What can you expect your employees to learn?

Introduction

What is operational resilience?

What is the history of operational resilience?

What are important business services?

What are impact tolerances for operational resilience?

What is operational resilience mapping?

Scenario testing

Lessons learned exercises

You decide: The elements of an operational resilience self-assessment

Self-assessment documentation

Developing communications plans for when important business services are disrupted

Governance & operational resilience

Supervisory review & feedback

Critical third-party providers - the proposed new rules

Summary

Affirmation

Assessment

Start your compliance e-learning journey with a free trial

Your questions, answered

How can I benchmark my team's cyber security awareness?

Which courses are included in CoreCompliance?

Are CoreCompliance courses only intended for use by those based in the UK?

Do the courses bookmark my progress?

What are in-depth courses?

What are microlearning courses?

Can we use a Skillcast certificate to evidence training to regulators, courts, etc?

What is "mandatory training"?

How do I check my mandatory training?

What is in my training record?

Can I get certificates for courses I've completed?

How do I update my details?

Do I get a dashboard to manage my employees?

How do I start a subscription?

Can I change the number of seats in my subscription?

Can I get monthly or annual subscriptions?

Can I get an invoice for the subscription?

How long do I have to wait to assign training after making the payment?

How do I purchase more seats?

Can I reuse the seats of employees who have left my company?

Can I add more than 50 users to my subscription?

Can I get a refund if I terminate my subscription partway through the year?

Are the courses SCORM-compliant?

What other tools are needed beyond training?

Can users only view the courses assigned to them?

Related courses

Data Protection

Preventing Sexual Harassment

Anti-Bribery Training

Anti-Money Laundering & Counter-Terrorist Financing

Information Security

Modern Slavery

Fraud Prevention

Cybersecurity

Preventing the Facilitation of Tax Evasion

Financial Sanctions

Market Abuse Regulation

Bribery Prevention

Phishing

Healthy Working

Digital Operational Resilience Act (DORA)

Mental Health at Work

Information Security

Embargoes and Sanctions

Electronic Communications

Safeguarding the Vulnerable

Preventing Sexual Harassment for Managers

Good Outcomes for Vulnerable Customers

Overview of the Consumer Duty

Whistleblowing in Financial Services

Complaints Handling in Financial Services

Treating Customers Fairly in Financial Services

Personal Conflicts of Interest

Introduction to UK Financial Regulation

CASS Overview

Conflicts of Interest in Asset Management

Understanding Modern Slavery

Gifts and Hospitality