Organizational Resilience

Keep Operating When It Matters Most, and Prove Your Partners Can Too.

Business continuity, disaster recovery and crisis management programs that are built to standard, exercised and updated regularly.

Third-party resilience assuranceResilience programs
Featured service

Third-Party Resilience Assurance

Your delivery, logistics and supply chain partners signed continuity clauses. We verify that the capability behind them is real, tested and ready for your next peak.

Built for organizations that
Rely on third-party carriers, sort centres or last-mile partners
Depend on a few key partners to keep customer promises
Need assurance before peak season, not after it
Must demonstrate third-party resilience to regulators (OSFI B-10, AMF)

The Problem: A Contract Clause Is Not a Capability

Partner contracts often include strong continuity requirements, but most are never verified. A partner can sign the contract and hand over a binder of plans without the capability behind them.

The gap shows up at the worst time: peak season, a weather event or a system outage. When a network relies on a few key partners, one partner's untested plan becomes the network's single point of failure.

Gaps We Commonly Find in Third-Party Assessments
Continuity and DR plans that exist on paper but have never been exercised
No tested backup for routing, sortation or driver dispatch systems
Alternate sites, surge labour and capacity that are planned but not contracted
Crisis management handled ad hoc, without defined roles or client communication
Self-attested compliance with no evidence behind it

What We Verify

Business Continuity
Impact analysis, recovery objectives and continuity strategies that are funded and in place.
Disaster Recovery
Backup and recovery for the systems that move parcels, with proof of recent recovery tests.
Crisis and Incident Management
Governance, escalation, client notification and evidence from real incidents.
Peak Readiness
Surge capacity, labour, alternate sites and contingency triggers, checked before peak.
Method

Each Assessment Maps Contract Clauses to ISO 22301 Practices, Then Tests Every One Against Evidence.

  1. 01
    Clause Mapping
    Each resilience clause becomes a testable requirement with defined evidence.
  2. 02
    Evidence Review
    Exercise reports, DR test results, capacity agreements and incident logs.
  3. 03
    On-Site Validation
    Walk-throughs at sort centres and dispatch, interviews with the people who would respond.
  4. 04
    Live Exercise
    An observed tabletop or functional exercise on a realistic peak or outage scenario.
  5. 05
    Score and Follow Up
    A maturity score per clause, a remediation plan with owners and dates, and a re-check.
What you receive

Deliverables

DeliverableWhat you get
Partner Resilience ScorecardA maturity rating per clause and per domain, comparable across partners
Gap and Remediation ReportFindings rated by impact on service, with required actions and deadlines
Exercise Observation ReportWhat worked and what failed when the plan was put under pressure
Peak-Readiness RatingA pre-peak go, conditional or no-go view for each partner
Network Risk SummaryWhere the network relies on a single partner without a fallback
Start with a pilot

A Peak-Readiness Assessment of One or Two Partners

Scope
1–2 partners
Duration
6–12 weeks
Fee
Fixed

You get one scorecard and remediation plan per partner, plus a network risk summary. The pilot proves the method on real partners with a contained scope and budget, and gives you a baseline for evidence requirements in future contract renewals.

Resilience programs

Build, Revamp or Test Your Plans and Programs

The same standard we apply to partners, applied inside your organization.

Business Impact Analysis

Identify critical functions, dependencies, and recovery time and point objectives to set clear priorities.

You receive: BIA report, dependency map, RTO/RPO register

Business Continuity Planning

Develop, revise and implement continuity strategies and plans that are funded, owned and usable under stress.

You receive: continuity strategies, BCPs, activation playbooks

Disaster Recovery Planning

Align IT recovery capabilities with business needs, and validate them through recovery testing.

You receive: DR plans, recovery runbooks, test reports

Crisis Management

Governance, roles, escalation and communication protocols so leadership can decide quickly under pressure.

You receive: crisis management plan, team charter, communication templates

Tests and Exercises

Walk-through, tabletop, functional and full-scale exercises that reveal gaps before a real event does.

You can also combine your continuity, crisis, recovery and cybersecurity exercises into one integrated exercise

You receive: exercise design, facilitation, after-action report

Program Maturity Assessment

An independent review of your resilience program against ISO 22301, with a practical improvement roadmap.

You receive: maturity scores, gap analysis, roadmap

Aligned with ISO 22301 and DRI International professional practices.

Why Cybertivité

We Know Where Plans and Operations Diverge

01
Audit Rigour, Operational Reality

Advisory and audit experience at KPMG and CGI, combined with in-house resilience leadership at a national logistics operator.

02
Certified and Bilingual

CBCP certified. Bilingual delivery in French and English, including Quebec operations.

03
Independence

Any past relationship with an organization being assessed is disclosed up front. Where independence could be questioned, that part of the fieldwork is led by a trusted partner consultant.

Serge’s expertise and professionalism ensured the success of the project. He was a true pillar for the team, and his positive impact is undeniable.
R.B. · Strategic Advisor, Business Continuity, Desjardins
More from clients and colleagues

Do You Know Which of Your Partners Would Hold Up at Peak?

Tell us about your partner network and your next peak, and we’ll propose a pilot scope.

info@cybertvt.ca(514) 424-3961LinkedIn

What Happens Next

  1. We reply within one business day.
  2. A 30-minute scoping call. We can sign your NDA beforehand.
  3. A written proposal with deliverables, timeline and fees.
Based in the Greater Montreal Area
Serving clients across Canada and internationally

We use this information only to respond to your request. See our privacy policy.