1 Building the business case for operational resiliency Real Time Resilience Series 2 Introduction Today, organizations face an ever- expanding universe of risks that can lead to business disruption. Cyberattacks are increasing in frequency and sophistication, putting customer and company data in the crosshairs of malicious actors. Ransomware is a particular problem, often bringing business operations to a grinding halt. Climate change is resulting in environmental catastrophes—everything from wildfires to hurricanes and floods. Regional conflicts are threatening supply chains. The list goes on. At the same time, regulators are turning up the heat, especially when it comes to protecting critical national infrastructure. Much of this regulation is focused on digital assets. As an example, the EU’s Digital Operational Resiliency Act (DORA) requires financial firms to ensure that they can withstand, respond to, and recover from digital threats