Nader Mehravari, 2013, Resilience Management through use of CERT-RMM and Associated Success Stories, 2013 IEEE International Conference on Technologies for Homeland Security. 5 Richard Caralli, Julia Allen, David White, Lisa Young, Nader Mehravari, and Pamela Curtis, 2016, CERT  Resilience Management Model Version 1.2: Service Continuity, CERT Program: Carnegie Mellon. Rico Brandenburg, Tom Ivell, Evan Sekeris, Matthew Gruber, and Paul Lewis, 2019, Striving for Operational Resilience: The Questions Boards and Senior Management Should Ask, Oliver Wyman. 6 David P. Moynihan, 2009, The Network Governance of Crisis Response: Case Studies of Incident Command  Systems. Journal of Public Administration Research and Theory, 19, pp. 895–915. 7 Peter Senge, 2006, The Fifth Discipline: The Art and Practice of the Learning Organization, New York:  Doubleday. Nancy Leveson, Nicolas Dulac, David Zipkin, Joel Cutcher-Gershenfeld, John Carroll, and Betty Barrett, 2013, “Engineering Resilience into Safety Critical Systems” in Resilience Engineering: Concepts and Precepts, Eds. Erik Hollnagel, David Woods, and Nancy Leveson. Dorchester, UK: Dorset Press. Resilience Engineering: Sidney Dekker, Erik Hollnagel, David Woods, and Richard Cook, 2008, New Directions for Measuring and Maintaining Safety in Complex Systems, Lund University School of Aviation. 8 Jonathan B. Wiener, 1998. Managing the Iatrogenic Risks of Risk Management, Risk, Health, Safety, and the  Environment, 39, pp. 9-82. 9 M-Trends 2019, FireEye Mandiant Services Special Report. 10 Nancy Leveson and John Thomas, 2018, STPA Handbook. Matthew Leitch, 2011, Intelligent Internal Control and  Risk Management: Designing High Performance Risk Control Systems, Burlington, VT: Gower Publishing Company. Deloitte, 2009, Mining Safety: A Business Imperative.

And, I’ve proposed a set of solutions based on risk management tools: a focus on organizational objectives, end-to-end management of critical processes, integrated risk management, and a systems approach to control. These all share the common characteristic of being integrative. Resilient components do not necessarily add up to a resilient whole. So, organizational resilience is an enterprise goal that is achieved through coherent and coordinated enterprise solutions. A resilient organization is able to make better plans, decisions, and actions that deliver desired outcomes over a range of conditions. To strengthen resilience, we seek to tame the problematic present and constructively move forward into the hazy future. The tools of risk management can help get us there. 1 National Research Council, 2012, Disaster Resilience: A National Imperative, Washington, DC: The National  Academies Press. 2 Gillian Tett, 2005, The Silo Effect: The Peril of Expertise and the Promise of Breaking Down Barriers, New York, 4/5  BIS central bankers' speeches  NY: Simon and Schuster. 3 Committee of Sponsoring Organizations of the Treadway Commission, 2017, Enterprise Risk Management:  Integrating with Strategy and Performance. 4 Philippa Girling, 2013, “Operational Risk and Convergence” in Operational Risk Management: A Complete  Guide to a Successful Operational Risk Framework. Hoboken, NJ: Wiley. Ramy Farha, Allen Meyer, Evan Sekeris, and Elena Belov, 2018, Non-Financial Risk, Convergence, and Integration, Oliver Wyman. Steve Culp and Chris Thompson, 2016, The Convergence of Operational Risk and Cyber Security. Accenture.