Operational Resilience vs Risk Reporting: What Leaders Get Wrong

Most organisations believe strong risk reporting indicates strong operational resilience.In this segment, Bruce McIndoe challenges that assumption. Drawing on his experience in enterprise risk management (ERM), crisis management, and business continuity planning (BCP), he explains why reporting and monitoring provide visibility but do not determine whether an organisation can continue to operate under disruption.The discussion explores how operational resilience depends on the ability to interpret emerging signals, connect information across functions, and act before conditions escalate.What You Will LearnListeners will gain insight into:• Why risk reporting and risk monitoring do not reflect operational resilience• How enterprise risk management frameworks can create visibility without readiness• Why early signals in crisis management and BCP environments are often not acted upon• How fragmentation across functions limits business resilience• What this means for chief risk officers and senior leadersWhy This MattersMany organisations continue to strengthen risk management frameworks, monitoring processes, and reporting structures.These improve oversight and support governance.Operational resilience depends on a different capability: the ability to recognise emerging disruption, make decisions under uncertainty, and maintain continuity when conditions change.This distinction is critical for leaders responsible for enterprise risk management, crisis management, and business continuity.Full EpisodeThis extract is taken from the full RiskMasters interview with Bruce McIndoe on operational resilience, enterprise risk management, and crisis decision-making.