How We Work

A staged operating model for resilience risk.

Platform Resilience is not a collection of disconnected services. It moves from evidence to direction to retained assurance.

Control path
01
Assess
Make risk visible

IRI turns assumptions into evidence, scores exposure across six domains, and gives leadership a defensible view of current risk.

02
Strategy
Set the control path

Strategy translates assessment findings into a target state, priorities, and a business-aligned path forward.

03
Advisory
Maintain assurance

Advisory keeps resilience under active review through retained oversight, analysis, governance validation, and decision support.

Operating flow

The flow is designed to move leadership from concern to control.

Evidence comes first. Design follows. Retained assurance comes after.

Step 01

Qualify consequence and urgency across the services leadership depends on most.

Step 02

Define scope, evidence, and decision boundaries before work begins.

Step 03

Create a defensible view of current exposure and recovery confidence.

Step 04

Set the path to reduced risk through priority, ownership, and decision direction.

Step 05

Maintain control through a retained cadence that keeps risk visible and decisions timely.

Assessment structure

IRI translates resilience questions into a practical assessment model.

It focuses the conversation on what matters most, tests the real conditions affecting resilience confidence, and makes prioritisation defensible.

Clarifies what must remain operational under disruption.
Tests dependency, failover, recovery, and remediation assumptions.
Creates a defensible basis for prioritised action and investment.
Infrastructure Resilience Index process overview
Advisory

Advisory keeps resilience under control after the initial work.

This phase ensures resilience is not just designed, but kept under review as exposure, governance, and conditions change.

Maintain continuous visibility of resilience exposure.

Validate that recovery capability is improving.

Keep ownership and accountability clear.

Support critical decisions as risk evolves.

Next step

Start by making resilience visible.

The control system starts with IRI, then moves into strategy and retained advisory where needed.