All insights
Training & Certification

How to Become a Certified Operational Resilience Manager in 2026

Learn why operational resilience certification has become critical for risk professionals and how the CORM qualification can advance your career in an increasingly regulated landscape.

The Oakwood Team9 min read

Operational resilience has moved from a specialist concern to a boardroom priority in organisations across the globe. The convergence of regulatory requirements, technological dependencies, and complex supply chains means that the ability to prevent, adapt to, respond to, and recover from operational disruptions has become a fundamental business capability. For professionals working in resilience, risk management, or operational leadership roles, formal certification in operational resilience is increasingly becoming a career essential.

The regulatory landscape has fundamentally reshaped expectations for operational resilience. In the UK, the Financial Conduct Authority and Prudential Regulation Authority have introduced stringent requirements for financial services firms, mandating that they identify important business services, set impact tolerances, and demonstrate their ability to remain within those tolerances during severe disruption scenarios. The European Union's Digital Operational Resilience Act has introduced similar requirements across the financial sector. Beyond financial services, critical national infrastructure operators, healthcare providers, and public sector organisations all face increasing scrutiny of their resilience capabilities.

This regulatory pressure has created unprecedented demand for professionals with verified operational resilience expertise. Organisations need people who understand not just the individual components of resilience, such as business continuity, crisis management, and cyber security, but how to integrate these elements into a cohesive programme that can withstand and recover from any disruption.

The Certified Operational Resilience Manager qualification, known as CORM, has been developed specifically to meet this demand. This Level 5 professional certification is designed for today's resilience managers, operational leaders, and risk professionals who need advanced knowledge and practical tools to design, implement, and strengthen organisational resilience against any disruption.

What distinguishes the CORM from other resilience qualifications is its comprehensive approach to the field. Rather than focusing on a single discipline, the programme provides deep understanding of the frameworks, regulatory demands, and core disciplines needed to build an organisation that can adapt, respond, and thrive in the face of adversity.

The CORM curriculum comprises nine modules that cover every aspect of operational resilience. The programme opens with an introduction to operational resilience fundamentals, exploring what makes a business genuinely resilient, the key frameworks and standards that guide resilience practice, and the critical role of governance and culture in building resilient organisations.

Operational resilience in regulated sectors receives dedicated attention, reflecting the importance of regulatory compliance for many organisations. Participants learn about the specific requirements facing critical national infrastructure, public services, healthcare, and financial services. The module covers the regulatory landscape in detail, including how to define critical business services, set and test impact tolerances, conduct mapping and dependency analysis, and design effective scenario testing programmes.

Risk management forms a core pillar of the CORM curriculum. The programme provides thorough grounding in ISO 31000 and its application to resilience related risks, including the complete risk assessment process from identification through treatment. This ensures that graduates can apply consistent, rigorous approaches to identifying and managing the full spectrum of threats their organisations may face.

Business continuity is covered comprehensively, from the fundamentals of business impact analysis through to the development of business continuity strategies, procedures, and plans. The integration between business continuity and broader resilience disciplines is emphasised throughout, recognising that effective continuity planning cannot operate in isolation.

Crisis and incident management receives significant attention within the CORM programme. Participants learn to develop crisis management plans, establish early warning systems, lead crisis response and incident management activities, manage crisis communications, and conduct effective post crisis analysis and recovery processes. The overlap with the CCMP qualification reflects the importance of crisis management as a core resilience capability.

Cyber resilience has become an essential component of any operational resilience programme, and the CORM curriculum reflects this reality. The module covers common cyber threats, cyber risk management approaches, implementation of cyber resilience measures, identity and access management, incident response specific to cyber events, and the critical area of third party cyber resilience.

Supplier and third party resilience addresses the increasingly complex web of dependencies that modern organisations manage. Participants learn about supply chain visibility, third party risk categorisation and assessment, embedding resilience requirements in supplier selection, and the governance and maturity models that support effective third party resilience management.

Continuous improvement is explored as the mechanism that keeps resilience programmes current and effective. The module covers the integration of core resilience elements, monitoring and auditing approaches, awareness and training programmes, and the design and facilitation of testing and exercise programmes.

The final module explores alternative approaches to operational resilience, including resilience by design principles, adaptive business continuity concepts, and emerging thinking about how resilience practice may evolve in the future.

Upon successful completion of the CORM, participants receive dual certification. They earn the Certified Operational Resilience Manager credential from Oakwood Risk Training and a Certificate in Operational Resilience at QLS Level 5 from the Skills and Education Group. This dual recognition ensures that graduates can demonstrate their expertise to employers, regulators, and professional bodies.

The CORM is available through multiple delivery formats. The hybrid workshop combines online pre-learning with intensive in-person sessions over three days. The five day immersive option provides extended classroom time for those who prefer a deeper in-person experience. The online distance learning format offers maximum flexibility for professionals who need to balance study with work and personal commitments.

The career benefits of CORM certification are substantial. Organisations across all sectors are actively recruiting for operational resilience roles, and candidates with verified qualifications have a significant advantage. The qualification is particularly valuable for professionals working in or aspiring to roles in regulated sectors, where the ability to demonstrate formal training in operational resilience may be a specific requirement.

For professionals committed to building careers in operational resilience, the CORM provides the knowledge, skills, and credentials needed to succeed in this rapidly growing field. As regulatory requirements continue to expand and organisations face ever more complex threats, the demand for certified operational resilience managers will only increase.

To explore how the CORM qualification can support your professional development, visit our training pages or contact our team to discuss your specific requirements and learning preferences.

---

Ready to take the next step? View the full CORM course details and enrol today

Related services

Talk to us

Want to discuss how this applies to your organisation?

Speak with us