White Paper
Interagency guidance on sound practices to
Operational resilience is the ability to maintain critical operations and core business lines through disruption. U.S. interagency guidance SR 20-24 consolidates sound practices for large, complex firms, focusing on governance, operational risk management, business continuity, and third-party oversight. Firms must define critical services, set risk tolerances, and ensure leadership involvement. Scenario analysis, resilient IT systems, and robust cybersecurity practices are emphasized, alongside continuous monitoring and board-level reporting. The guidance also highlights the need for third-party risk management, contracts, and contingency planning. Ultimately, it frames resilience as an enterprise-wide capability—embedding governance, testing, and proactive controls to safeguard stability,
