Which term describes systematic and coordinated activities and practices through which an organization manages its operational risks and the associated potential threats and impacts therein?

Which term describes systematic and coordinated activities and practices through which an organization manages its operational risks and the associated potential threats and impacts therein?

• A. Organizational resilience
• B. Physical protection systems
• C. Mitigation
• D. Lock

Answer: (A)

Organizational resilience is the ability of an organization to anticipate, withstand, adapt to, and recover from threats and disruptions while continuing to deliver essential operations. It encompasses systematic and coordinated activities and practices that integrate risk assessment, governance, procedures, training, incident response, business continuity, and ongoing improvement. This makes it the best fit for describing how an organization manages its operational risks and the associated potential threats and impacts, because it captures the full, coordinated capability to prevent, respond to, and recover from adverse events, not just individual controls. The other terms are narrower: mitigation focuses on reducing risk likelihood or impact, but doesn’t describe the broad, integrated organizational capacity; physical protection systems refer to safeguards for assets, not the overall risk-management process; and a lock is a specific physical control with limited scope.

Organizational resilience is the ability of an organization to anticipate, withstand, adapt to, and recover from threats and disruptions while continuing to deliver essential operations. It encompasses systematic and coordinated activities and practices that integrate risk assessment, governance, procedures, training, incident response, business continuity, and ongoing improvement. This makes it the best fit for describing how an organization manages its operational risks and the associated potential threats and impacts, because it captures the full, coordinated capability to prevent, respond to, and recover from adverse events, not just individual controls. The other terms are narrower: mitigation focuses on reducing risk likelihood or impact, but doesn’t describe the broad, integrated organizational capacity; physical protection systems refer to safeguards for assets, not the overall risk-management process; and a lock is a specific physical control with limited scope.