Prove APRA CPS 230 compliance
Show APRA your critical services, tolerances, and dependency owners without the spreadsheet panic. RunReady keeps CPS 230 proof and remediation visible for Finance and Ops.
Stay ahead of what could stop you before it starts. RunReady.
Operational resilience software that identifies what’s critical, where you’re exposed, and how to act before disruption strikes.
RunReady maps your critical services and resource dependencies, testing impact tolerances and exposing weak points before they escalate. When a cyber event, system outage, or supply chain failure hits, you’re not reacting - you’re executing a plan you’ve already tested.
What is operational resilience software?
Operational resilience software helps organisations identify their critical services, map the people, systems and suppliers those services depend on, and test how well they would hold up under disruption. It matters because regulators such as APRA (CPS 230) and the FCA (PS21/3) now expect firms to prove resilience, not just plan for it. RunReady is the operational resilience module of Drova's RunGood platform: it maps critical services and dependencies, runs scenario testing against impact tolerances, and keeps the evidence ready for the board and the regulator.
Trusted by resilience leaders
“”
Handle the regulators. Keep building resilience.
Need CPS 230 or PS21/3 detail? Jump into the specialist workspace, then return to RunReady to orchestrate every disruption.
Prove FCA PS21/3 / SYSC 15A compliance
Give the FCA one story across impact tolerances, playbooks, and suppliers. RunReady holds PS21/3 evidence, issues, and improvements together for UK teams.
Four moves to stay RunReady
Map vulnerabilities, ready every dependency, rehearse the bad days, and prove resilience as a growth strategy.
Service foresight
Navigate resilience rules with clarity, not chaos
Give every owner a structured way to assess APRA's CPS230, the FCA's PS21/3, and other frameworks without drowning in admin.
- Use Drova’s RunSure to run clause-level gap analysis across any resilience framework (e.g. CPS 230).
- Use Sheila AI to link requirements to controls, risks, and evidence for cross-module traceability.
- Generate audit-ready, regulator-aligned outputs that meet rising expectations for operational resilience.
Map dependencies
See what really keeps the business running
Understand your important business services (or critical operations), processes and dependencies, and how they connect.
- Get recommend important business services and critical operations based on organisational profile.
- Map end-to-end processes, people, technology, facilities, and third-party dependencies.
- Establish tolerances, controls, and risk links for each service.
Scenario testing
Be disruption-ready with smart, simple testing
Plan, run and evidence resilience scenario tests that actually reflect how your organisation operates.
- Generate recommended scenario test plans that reference your mapped services, risks, resources and controls.
- Run test plans that automatically tie back to tasks, evidence, and resources. No separate spreadsheets or offline notes.
- Track remediation actions and lessons learnt in one workflow so scenario testing becomes continuous, not once-a-year theatre.
Strategic proof
Prove resilience with reporting that writes itself
Turn all your resilience work into polished stakeholder-ready outputs without touching a single template.
- Export a complete Operational Resilience Self-Assessment report powered by Drova’s BoldReports engine as PDF, Word or Excel.
- Give executives and regulators a real-time resilience picture with linked compliance, risk, and operational dependencies.
- Replace manual consolidation with automated, evidence-backed reporting that stands up to scrutiny.
FAQs
Operational resilience software, answered
What does operational resilience software do?
It gives you one place to map critical services, the dependencies behind them, and the tolerances they must operate within, then test those assumptions against realistic disruption scenarios. RunReady adds Mates, Drova's AI agents, to draft service maps, flag weak points, and keep evidence current as things change.
How is operational resilience different from business continuity planning?
Business continuity planning asks how you would recover after something goes wrong. Operational resilience asks whether your most important services would keep running in the first place, and expects you to test that answer. A continuity plan is one input to resilience, not the whole picture. Our business continuity guide covers where planning ends and resilience begins.
Does RunReady cover APRA CPS 230 and FCA PS21/3?
Yes. RunReady's service mapping and scenario testing align to both regimes, so the work you do to build resilience is the same work that produces your compliance evidence. Explore the CPS 230 workspace or the PS21/3 workspace for regime-level detail.
How is operational resilience software different from risk management software?
Risk management software tracks risks and the controls that mitigate them. Operational resilience software starts from your critical services and works outwards to every dependency that could disrupt them. In the RunGood platform the two connect: RunReady handles resilience, RunSafe handles risks and controls, and the same data serves both.
How long does it take to get started?
You can start a free trial and map your first critical service the same day. A full resilience programme takes longer, and the honest answer depends on how many critical services you run. What changes with RunReady is the shape of the work: mapping, testing and evidence live in one place instead of a spreadsheet stack.
Launch Drova’s resilience workspace and keep every service, dependency, and test on track
