Topic Resilience & Continuity
When the system goes down — what your program already had to have ready.
Business continuity, disaster recovery, and SOC 2 templates for the team that needs to prove resilience to regulators, auditors, and bank partners. Aligned with ISO 22301, FFIEC BCM, NIST SP 800-34, and AICPA SOC 2.
◆ ISO 22301 · FFIEC BCM · NIST SP 800-34 · AICPA SOC 2
◆ What you'll find here
Resilience that survives an examiner question.
◆ 01
BCP & BIA
Business impact analysis, recovery time objectives, dependency mapping, and the BCP plan structure that holds up during a real outage. Aligned with ISO 22301 and FFIEC BCM.
◆ 02
Disaster recovery
DR runbooks, technology recovery, tabletop exercises, and the test evidence regulators expect. Mapped to NIST SP 800-34 and FFIEC IT Examination Handbook.
◆ 03
SOC 2 readiness
The trust services criteria mapped to working controls. Built for fintechs and SaaS companies preparing for their first SOC 2 audit or maintaining Type II evidence year-round.
◆ Resilience templates
Tools for resilience teams.
BCP, DR, BIA, and SOC 2 templates with Excel workbooks and PDF guides. Buy once, tailor to your program, deploy in days.
Business Continuity & Disaster Recovery (BCP/DR) Kit
BCP and DR templates with BIA, recovery procedures, and a standalone tabletop exercise kit.
SOC 2 Compliance Checklist
151 readiness checks cross-referenced to the AICPA Trust Services Criteria, with evidence collection guidance.
Contingency Funding Plan — Banks
Examiner-ready contingency funding plan for chartered banks built to the 2023 Interagency Addendum.
Contingency Funding Plan — Fintechs
Contingency funding plan for sponsor-bank fintechs — FBO reconciliation, runway-based triggers, post-Synapse stress scenarios.
72+
Resilience articles
4
Frameworks · ISO · NIST · FFIEC · AICPA
US
Federal banking + SOC 2 ecosystem
◆ Latest analysis
From the journal.
Business Continuity
ISO 22301 Clause 9.3 Management Review: Agenda, Inputs, Decisions, and Evidence
Build an ISO 22301 management review decision pack that maps Clause 9.3 inputs to evidence, decisions, owners, and follow-up.
Business Continuity
Tabletop Exercise Evaluation Rubric: Ratings, Assignments, and Observation Notes
Build a tabletop exercise evaluation rubric with evaluator assignments, evidence-based ratings, observation notes, calibration, and AAR handoff.
Business Continuity
BIA Quality Assurance: Challenge Outliers and Calibrate Scores Across Business Units
Run business impact analysis quality assurance with outlier tests, challenge notes, score calibration, capability checks, and approval evidence.
Business Continuity
Operational Resilience Critical-Service Dependency Crosswalk: Reconcile Processes, Systems, Vendors, Facilities, and People
A critical-service crosswalk reconciles your process, system, vendor, facility, and people inventories under a shared service ID—so your resilience program has one source of truth instead of five competing lists. Here's how to build it.
Business Continuity
Tabletop Exercise Injects: Build an MSEL That Tests Decisions
A Master Scenario Events List (MSEL) is an exercise controller's run sheet—not a general bank or fintech regulatory requirement. Here's how to build one.
Business Continuity
FCA Operational Resilience: Six Evidence Checks From Its One-Year Observations
The FCA's March 2026 publication gives good-practice examples and improvement areas—not an enforcement verdict. Use these six evidence checks.