Risk Academy, a Nexortium programmeRisk Science and MethodsDepartment of Risk Management

Failed processes, people, systems and events, and the services that must keep running

Operational risk and business continuity

Operational risk is the risk that something inside the organisation fails; continuity is how the important services survive it.

risksacademy.comrisk-sciencediscipline

Operational risk and business continuity, drawn as uncertainty bands: 0 primary courses open, 2 in preparation, 0 approved for authoring and 0 also taught here, across 8 subtopics. Courses: RAF-113 L1 in preparation, RAT-221 L2 in preparation.L1L2L3L420
Operational risk and business continuity at a glance. Drawn as uncertainty bands.
  • Open, 0
  • In preparation, 2
  • Subtopics, 8
Course codes from the curriculum; study levels L1 to L4.
Twin builder and simulatorThe central Apennines: L'Aquila, Amatrice and Norcia4 twin generators, 8 layers, 4 instruments
courses open now
0
in preparation
2
subtopics in its scope
8
reference earthquakes, M6.2 to M6.6
3

Twin figures for the central Apennines: L'Aquila, Amatrice and Norcia, counted from its layers at their stated dates.

Twin builder and simulator.

For Operational risk and business continuity: the faculty's twin of L'Aquila on the planet map, the globe and in 3D. Pick a generator, switch layers, run the instruments; every layer prints its provider and date.

The central Apennines: L'Aquila, Amatrice and Norcia: a flat plan of the faculty twin. Terrain 24 to 2,805 m; 3 reference earthquakes, M6.2 to M6.6; Earthquakes M4.5 and above, past week (live): live, loads in the twin; USGS ShakeMap intensity contours: live, loads in the twin. Contours every 500 metres from the elevation grid; reference earthquakes as marks.
The central Apennines: L'Aquila, Amatrice and Norcia, Italy. Flat plan of the same data: relief, the three reference epicentres with magnitude and depth, and the numbers below; the sampler's figure shows one precomputed field with its parameters. The 3D twin opens on devices with WebGL once its data and library have been checked.
  • Terrain 24 to 2,805 m
  • 3 reference earthquakes, M6.2 to M6.6
  • Earthquakes M4.5 and above, past week (live): live, loads in the twin
  • USGS ShakeMap intensity contours: live, loads in the twin
Credits and dates per layer are listed under the stage. Relief in the twin is exaggerated ×1.5 for legibility.

Drag to move, right drag or Shift with a drag to turn and tilt, Ctrl with the wheel to zoom. Keyboard: arrows move, Shift with arrows turn and tilt, + and - zoom, 0 resets, V steps through the views, Escape clears.

Flat plan of the same data: relief, the three reference epicentres with magnitude and depth, and the numbers below; the sampler's figure shows one precomputed field with its parameters. The 3D twin opens on devices with WebGL once its data and library have been checked.

The map loads from this site as it nears the view (MapLibre 6.9.1, checked by hash).

The discipline in brief.

The discipline teaches operational risk taxonomies and loss event data, controls and control testing, key risk indicators, business impact analysis with recovery time objectives and impact tolerances, continuity strategies under ISO 22301:2019, operational resilience of important services, outsourcing and third parties, and human factors. A graduate can run a business impact analysis, set the indicators that signal a change in risk and write the continuity plan that keeps a service inside its tolerance.

This area covers the risks of failed processes, people, systems and external events, and how organisations keep important services running: operational risk taxonomies and loss data, controls and key risk indicators, business impact analysis, continuity strategies, operational resilience and outsourcing. It is taught in the department of Risk Management, Faculty of Risk Science and Methods, through 2 courses with it as primary discipline.

What the discipline covers.

8 subtopics, taught across its courses and labs.

Courses
0 open, 2 in preparation
Levels
L1 Introductory, L2 Intermediate
Labs
Named when the courses are authored
  • Operational risk taxonomy and loss data
  • Controls and control testing
  • Key risk indicators
  • Business impact analysis
  • Continuity strategies
  • Operational resilience and important services
  • Outsourcing and third parties
  • Human factors

What is changing now.

Recent developments in operational risk and business continuity, each with its source; sources checked on 16 October 2026. Summaries are short readings of the source; follow the link for the full account.

The faculty hub.

News and research as they are published, per discipline, with the faculty's other tools.

The newest research, preprints, news and humanitarian reports for Operational risk and business continuity, each with its source and date, load here. Open the research and news hub

Frameworks and standards it works with.

From the Academy's risk taxonomy: the discipline's own entries and those of its primary courses, with how many courses teach each.

Frameworks and standards

  1. COSO Internal Control framework1 course
  2. ISO 22301 business continuity management1 course
  3. Three Lines Model1 course

Hazard families

  1. Process and execution failure2 courses
  2. Critical infrastructure outage1 course
  3. Fraud and misconduct1 course
  4. Human factors and workforce disruption1 course
  5. Technology and cloud outage1 course

2 in preparation.

No course with this primary discipline is open yet; these are planned, so you can prepare with the courses also taught here.

Courses with this primary discipline0 open, 2 in preparation

  1. RAF-113Business Continuity and Organisational ResilienceIn preparationFoundation, L1 Introductory, 8 hours (estimate)
  2. RAT-221Operational Risk, Controls and Loss DataIn preparationTechnical, L2 Intermediate, 10 hours (estimate)

Where the subject is worked on.

Cited as places where the subject is practised; the institutions named are sources here, and Risk Academy hosts every course.

The two Foundry systems where it is practised.

  • Nexus FoundryApps systemRestoring service after failureRecovery room
  • NET systemCommunications continuityContinuity room

Nexus Foundry system pages describe what each system and its rooms are designed to do; they are not a service on offer, and studying here gives no access to them.

What you can earn here.

Terms used on this page.

Operational risk and business continuity

Prepare with a related course.

Open courses in connected disciplines teach the methods this discipline will build on.

Skip to toolbar