QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Reviewing Hellebore Bank's operational-resilience claims the way a sceptical regulator or an attacker would, on the resilience board of eight tiles — services and tolerances, dependency mapping, disruption scenarios, testing and evidence, third-party and cloud, recovery and workarounds, attestation and dialogue, and continuous review; the March card-authorisation breach RES-2026-0117, which ran 12 hours 9 minutes against a 6-hour tolerance while the stand-in workaround sat un-invoked for want of a delegate; and the move from a 2024 self-assessment called aspirational, claiming 14 of 14 services within tolerance, to an evidence pack the board can sign.
CY-EXPERT-028Expert Level · Financial Services Security

Operational Resilience Adversary-Aware Review — The Resilience Board

An expert-level assurance course that reviews a bank's own operational-resilience claims the way a sceptical supervisor, a determined attacker or a cascading failure would probe them. Work the Resilience Board - eight tiles a reviewer must clear in order: important business services and impact tolerances, dependency and concentration mapping, adversary-aware scenarios, severe-but-plausible testing and evidence, third-party and cloud review, recovery and workarounds, self-assessment and regulator dialogue, and continuous review - replacing every aspirational claim with dated evidence that could have failed, and assembling the Hellebore Resilience Evidence Pack a board can sign and a regulator can accept.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Re-derive important business services and impact tolerances from consumer and market harm, and map each service to the concentrations its dependencies actually create.
  • Build adversary-aware, severe-but-plausible scenarios and run tests that can fail, with timestamped evidence that turns incidents into unplanned tests.
  • Probe third-party and cloud resilience against exit and substitution, and prove workarounds have measured capacity, invocation authority and safe recovery sequencing.
  • Write a self-assessment in which every claim is tagged and cited, conduct regulator dialogue on concession and evidence, and keep the programme true year over year with change triggers, board metrics and a costed roadmap.

Price:৳12,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.