Skip to main content
Choose your location
Select the location and the language that you prefer

main content, press tab to continue

Service

Operational Resilience Risk and Insurance Services

Operational resilience isn’t paperwork; it’s your organisation’s immune system.

Regulatory expectations, such as the EU’s Digital Operational Resilience Act (DORA) and the UK’s Financial Conduct Authority (FCA) policy statement PS21/3 on building operational resilience, alongside growing cyber threats, geopolitical instability, and climate-related risks, have placed resilience firmly in the spotlight.

Yet, many resilience strategies remain largely theoretical and disconnected from core areas like risk management, strategic planning and financial decision-making.

At Willis, a WTW business, we believe resilience must be more than compliance. Our operational resilience risk and insurance services team help transform operational resilience into practical capability and to add protection to your balance sheet, your people, and your reputation.

We help firms anticipate emerging risks, prepare financially for disruption, and integrate resilience planning directly with insurance solutions and measurable outcomes.

Whether you are a board member, a risk, resilience or operations leader or an insurance manager, these areas are relevant to your business.

Operational resilience risk and insurance contacts

Headshot of Alexandra Cosma

Alexandra Cosma

Associate Director - Operational Risk Solutions, FINEX

Headshot of Paul Search

Paul Search

Head of FINEX Risk Solutions - Operational Risk & Cyber Risk

Why choose Willis for your operational resilience risk and insurance services?

  • Risk-integrated resilience

    We don’t look at resilience as a standalone effort, nor do we reduce it to business continuity. We empower financial services firms to connect all aspects of resilience, from identifying established and emerging risks, to implementing innovative mitigation strategies. Our expertise includes creative insurance structuring, and response and recovery strategies, to ensure financial and operational protection.

  • Financial and regulatory clarity

    Beyond frameworks, Willis shows how resilience investment reduces financial risk, eliminates duplication and delivers clear return on investment all aligned to regulatory requirements.

  • Real-world data and multidisciplinary insights

    We blend regulatory and multidisciplinary technical expertise, proprietary claims and scenario data and behavioural science to design resilience strategies that work in practice, not just on paper.

The WTW Resilience Engine

An end-to-end model to help firms to prepare for, prevent, respond to, recover from, and adapt to operational disruptions that could impact the delivery of critical business services.

Circular diagram titled ‘The WTW Resilience Engine’ showing four interconnected components, Diagnostics, Governance, Response, and Financial Protection, surrounding a central gear labeled ‘Resilience Engine Collateral.

An integrated model illustrating how organisations can identify risks, strengthen governance, enhance response capabilities, and align financial protection to build long‑term resilience.

Diagnostics: What could disrupt your business?

Which critical business services would cause intolerable harm if they were disrupted?

How does your risk universe compare against risk and resilience benchmarks?

Governance: Are your controls and communication clear?

Is your governance embedded within your risk profile and culture and is it adaptive?

Response: How well could you respond and recover?

Are you confident that your business can recover from disruption?

Do you have an effective post-incident communication strategy?

Financial Protection: Will your capital and insurance protect you?

Have you quantified your risk and resilience exposure and aligned it to capital requirements?

Does insurance reflect quantified downtime and third-party dependencies?

Is your good governance rewarded by underwriters?

What evidence do you share today that convinces underwriters your governance and response are adequate?

What operational resilience risk and insurance services can we offer?

Operational resilience shouldn’t be theoretical. Willis makes it measurable, practical, and tailored to the specific realities of your business.

Help your organisation identify and prioritise severe yet plausible threats. Willis integrates horizon scanning, regulatory insight, and claims data to quantify the financial implications of emerging risks, supporting strategic planning and regulatory expectations.

Many resilience strategies focus on operational measures but overlook financial protection. Willis bridges this gap by mapping resilience exposures directly to insurance programmes, identifying gaps, and designing solutions that ensure insurance actively supports recovery when needed.

Boards and regulators increasingly demand evidence that resilience investments translate into financial risk reduction. Willis quantifies the financial benefits of resilience initiatives, helping firms justify spending and align resilience efforts with enterprise risk management.

Regulators are encouraging firms to set impact tolerance beyond time limits. Willis uses our proprietary Risk Tolerance Clarified (RTC) methodology to help organisations establish impact tolerances that align resilience planning with financial strategy and regulatory expectations, identifying the point at which disruption becomes financially unacceptable.

Third-party providers increasingly face requirements to demonstrate resilience to multiple financial institution clients. Willis designs collaborative workshops that consolidate testing processes, reduce duplication, and deliver independent validation trusted by regulators and clients alike.

Our services also include developing solutions and broader WTW capabilities in:

  • Integrated supplier risk assessment and monitoring
  • Human and cultural resilience
  • Business continuity
  • Information and cyber security
  • Crisis management
  • Physical security

Contact our operational resilience risk and insurance services team

Resilience shouldn’t stay on paper. Let’s build an operational immune system for your business, one that’s ready to respond when disruption arrives.