The initiative brought together insights from 72 firms, including ORCG member firms, input from CMORG’s wider subgroups and UK Finance participants. The aim was to take stock of current practices, identify gaps, and explore how firms can move beyond compliance to build a more mature, data-driven resilience posture. The findings reveal a sector still in transition. While regulatory deliverables and core disciplines like scenario testing and impact tolerances are well embedded, many firms continue to rely on manual, fragmented reporting. Non-technology assets, such as people, property, and organisational culture, are often underrepresented in resilience assessments. The report also identifies that although governance forums are routinely updated, resilience data rarely filters through to the broader business, creating a visibility gap that could hinder informed decision-making. The report encourages firms to evolve their approach, shifting from retrospective compliance metrics to forward-looking indicators that support strategic investment in resilience. It also highlights the need for greater automation, standardisation, and consistency across the sector.

To download this artefact without registering, please click here.