Key Lessons from ResOps: An Executive Guide | Author Jason Cray on Resilience Operations

A half-done resilience plan is more risky than no resilience plan at all. In this author perspective, ResOps: An Executive Guide co-author Jason Cray shares key lessons from the book and explains why resilience must become an operational discipline across the organization. Drawing on the principles of ResOps, Jason discusses the importance of ownership, assuming breach, and identifying the minimum viable company needed to sustain operations during disruption. The discussion explores why organizations should stop focusing solely on prevention and instead build resilience around the systems, services, and business functions that matter most. Effective resilience is not about adding new teams or technologies. It's about aligning people, process, and priorities around recoverability and operational continuity. KEY TAKEAWAYS • Resilience requires clear ownership within the organization • Organizations should assume breach and plan accordingly • Prevention alone is not a sufficient strategy • Understanding your minimum viable company is critical to resilience • Not every system or service should be treated as the same priority • Recovery planning should focus on the capabilities needed to sustain business operations • Resilience depends on aligning people, process, and organizational priorities TL;DR Jason Cray shares key lessons from ResOps: An Executive Guide, explaining why organizations must move beyond prevention-focused thinking and build resilience around ownership, recoverability, and the minimum viable company. WHO IS THIS FOR? • CIO • CISO • CTO • IT Operations Leaders • Security Leaders • Cyber Resilience Leaders • Risk and Compliance Leaders • Business Continuity Leaders • Executive Leadership Teams FAQ Q: What is the minimum viable company? A: The minimum viable company is the set of critical services, systems, and processes required to keep an organization operating during a disruption. Q: Why is assuming breach important? A: A key theme discussed is that organizations should plan for disruption and recovery rather than assuming attackers can always be kept out. Q: Does ResOps require a new team? A: No. Jason emphasizes that organizations do not necessarily need a new team, but they do need clear ownership of resilience initiatives. Q: What is the primary message of this discussion? A: Successful resilience programs focus on ownership, recoverability, and prioritizing the business functions that matter most. Read the book today: https://bit.ly/3StvqTU #ResOps #ResilienceOperations #CyberResilience #OperationalResilience #BusinessContinuity #Leadership #CISO #CIO