Fintech Toolkit · Op Risk & Resilience · DORA + UK Op-Res

Operational Risk & Resilience Toolkit

A 13-module operator dashboard for fintech operational-risk and operational-resilience programmes. Risk taxonomy, risk & control self-assessment (RCSA), KRIs, loss-event database, scenario analysis, important business services, impact tolerances, third-party resilience, BCP / DR linkage, board reporting. Maps to DORA's pillars for EU financial entities and their ICT third-party providers, and to UK / PRA operational-resilience expectations. Single HTML. Runs offline. Owned forever.

"Operational risk is what fails when nothing in particular fails. Resilience is what survives when something definitely does. The programme is a single discipline applied to both questions."

What's inside

Programme Framework

Op risk + resilience integrated · three lines · governance

Risk Taxonomy

7-category Basel-aligned · level-1 / level-2 / level-3

RCSA

Process-level · likelihood × impact × control · workshop discipline

KRI Library

Threshold · trigger · escalation · board view

Loss-Event Database

Capture · classify · root-cause · near-miss

Scenario Analysis

Live JS · likelihood × severity · band → action

Important Business Services

IBS map · external impact · dependencies

Impact Tolerances

Per IBS · time · count · monetary · reputational

Resilience Testing

Tabletop · simulation · severe-but-plausible · evidence

Third-Party Resilience

Vendor RTO / RPO · concentration · sub-processor

BCP / DR Linkage

Op resilience as the umbrella · BCP / DR as components

Board Reporting

Quarterly · KRI heat-map · loss · scenario · IBS status

Committee Charter

CRO chair · CCO · CISO · COO · CFO · cadence · authority

Maps to DORA

For EU financial entities and the ICT third-party providers that serve them, the dashboard lines up with the five pillars of the Digital Operational Resilience Act (Regulation (EU) 2022/2554):

ICT risk management — programme framework, risk taxonomy, RCSA, KRI library.
ICT-related incident management & reporting — loss-event database, classification, root-cause, escalation thresholds.
Digital operational-resilience testing — scenario analysis, tabletop and severe-but-plausible testing, retained evidence (the basis for threat-led penetration testing where it applies).
ICT third-party risk — third-party resilience, concentration and sub-processor mapping (the working basis for a register of information).
Information sharing & governance — board and committee cadence to act on what the programme surfaces.

The same single discipline answers the UK / PRA framing too — important business services and impact tolerances — so one programme covers both sides of the channel.

Built for

Chief Risk Officers / Heads of Operational Risk at fintechs
Heads of Operational Resilience or Business Continuity owning IBS / impact tolerance
EU financial entities and the ICT third-party providers serving them, preparing for DORA
CCOs and COOs needing an integrated op-risk view across the firm
Internal Audit teams testing op-risk and resilience programmes
External counsel and op-resilience consultants

Format + licence

Single HTML file. Runs offline. Editable. Print-friendly.
1 working JS calculator (operational scenario · likelihood × severity).
Single-organisation licence. Methodology output yours to keep.
14-day satisfaction guarantee.

Owned forever · paid once

$497 USD

Buy now · $497

Stripe checkout. Single HTML file emailed within 1 business hour.

← Back to the full catalogue