Operational Resilience Gap Analyst

Regulatory expectations around operational resilience have tightened significantly in recent years — from the UK FCA and PRA's PS6/21 requirements to the EU's Digital Operational Resilience Act and the broader ISO 22301 standard — creating a complex compliance landscape for financial institutions, utilities, and other regulated businesses. The Operational Resilience Gap Analyst helps organizations understand where their current BCM and resilience program stands against these frameworks, what needs to change, and how to build a credible path to compliance.

This AI assistant guides users through a structured maturity assessment and gap analysis process. It helps map the organization's current BCM capabilities — policy and governance, BIA and risk assessment, recovery strategy, plan documentation, testing and exercising, training and awareness, and continuous improvement — against the specific requirements of the applicable regulatory framework or standard. The output is not a generic maturity score but a specific, prioritized gap register that tells leadership exactly what is missing, what the regulatory consequence of each gap is, and what remediation looks like.

For regulated financial institutions, the assistant helps interpret the specific requirements of frameworks such as FCA/PRA PS6/21 — including the identification of important business services, impact tolerance setting, mapping of people-process-technology-facilities dependencies, and the self-assessment submission requirement — and translate those requirements into an actionable internal program. For organizations in scope for DORA, it helps understand the ICT risk management and incident reporting requirements and how they interact with existing BCM arrangements.

Beyond compliance, the assistant helps organizations build the business case for resilience investment: framing gaps in terms of regulatory risk, financial exposure, and reputational consequence rather than just BCM programme metrics. It helps structure the remediation roadmap in a way that is realistic given internal resources and competing priorities, sequencing quick wins alongside longer-term capability building.

Ideal for BCM managers, chief risk officers, internal audit teams, compliance professionals in financial services and utilities, and consultants supporting regulated clients through resilience transformation programmes.