With the OSFI E-21 deadline approaching, many Canadian banks and credit unions are realizing the gap between having a business continuity plan and proving it works. This piece explores the key questions institutions are asking, the risks they are overlooking, and what operational resilience really requires under regulatory scrutiny. A practical perspective on how to prepare before supervisory reviews begin.

Most organizations identify obvious risks like cyberattacks but are often blindsided by "quiet" threats - hidden dependencies. From the "last-mile" telecom problem to external environmental factors like transit strikes, Scott Wilson explains why looking beyond your own walls is critical for true operational resilience

Most organizations know they have operational gaps, but few know the right questions to ask to find them. In the conclusion of our series, Scott Wilson shares the practical framework for dependency mapping, moving beyond "shelf-ware" documentation to identify the vendors, people, and systems your business genuinely cannot function without