Resilience risk controls and the Netflix Unified Resilience Framework

This paper argues that programmes built around existing enterprise resilience/business continuity management (ER/BCM) metrics provide a low return on investment, which ultimately can damage the perceived value of the industry. It goes on to introduce a new approach to creating and measuring ER/BCM programmes that provides a much greater level of return for a smaller investment. Finally, it describes how this new approach can be used to satisfy traditional programme requirements, and provides a shared framework for emerging uses, such as cyber resilience.