The operationally resilient firm would be expected to have a comprehensive understanding and mapping of the resources and dependencies that support their business services.

Firm`s should identify and document the resources that deliver and support their critical business services. This identification process is referred to as mapping. Firms will only need to map their critical business services, not all business services as part of operational resilience mandate.

Mapping the critical business service should help identify vulnerabilities and/or weaknesses in the delivery of critical business services within an impact tolerance and enable firms to implement actionable to remediate.  

Mapping should allow firms to test their ability to stay within impact tolerances. To design and understand the full implications of scenarios, a complete map of the relevant business services is necessary.