Organisational resilience management model: a case study of joint stock companies operating in Spain

Abstract

Organisational resilience has become an increasingly important topic for businesses in recent years, as disruptions and unexpected events can have a significant impact on their operations, reputation, and financial performance. Such were the case with the COVID-19 pandemic, the cyberattacks on essential services or the recent conflict in Ukraine, all of which entail long-term disruptions that affect strategic business objectives. To ensure continuity of operations, it is essential to establish a comprehensive approach to enterprise risk management and increase resilience through internationally recognised standards such as COSO-ERM, ISO 31000, ISO 28000 or ISO 22316. The objective of this study will be to test a maturity model that will provide scientific support to professionals and, to a greater extent, to companies and other organisations. It assesses an organisation's security and resilience management system maturity level against internationally-recognised standards, with this model allowing them to visualise its evolution in subsequent updates. The proposed model has been tested through a survey that was carried out anonymously among the main companies included in the Spanish IBEX 35 stock index. It is an innovative model that can pave the way for new trends in entrepreneurship and management in terms of organisational resilience, after being empirically tested in a real business environment. It is also a direct transfer to the industry and allows for the creation of new strategies in service operations that support resilience.