With the OSFI E-21 deadline approaching, many Canadian banks and credit unions are realizing the gap between having a business continuity plan and proving it works. This piece explores the key questions institutions are asking, the risks they are overlooking, and what operational resilience really requires under regulatory scrutiny. A practical perspective on how to prepare before supervisory reviews begin.

Most organizations don't discover gaps in their business continuity planning during a calm review, they find them when a system won't come back online. Scott Wilson explains why true resilience is an ongoing practice of thinking, testing, and honest self-assessment, rather than a one-time project

Most organizations know they have operational gaps, but few know the right questions to ask to find them. In the conclusion of our series, Scott Wilson shares the practical framework for dependency mapping, moving beyond "shelf-ware" documentation to identify the vendors, people, and systems your business genuinely cannot function without