\cleardoublepage \part{Operations in the Organisation} \setbookpart{Operations in the Organisation}

Part V: Operations in the Organisation

Operations sits in an organisation that must show what it can recover, measure what it does, choose a model, assign decision rights, comply with law and depend on providers. Part V treats resilience as a claim with evidence, metrics that mislead, operating models, decision rights, regulation and dependence on providers.

Chapters in this part:

• Chapter 19, Resilience as a Claim, makes resilience a claim with evidence (O4 Restore, O5 Sustain).
• Chapter 20, Measuring Operations, examines the metrics of operations and how they mislead (all five functions).
• Chapter 21, Operating Models, compares operating models (all five functions).
• Chapter 22, Decision Rights, Change Authority and the Incident Commander, settles decision rights, change authority and the incident commander (O2 Diagnose, O3 Change, O4 Restore).
• Chapter 23, Regulation as Constraint, maps DORA, NIS 2, the CER Directive, the AI Act, the GDPR and the Data Act to operations (all five functions).
• Chapter 24, Across Boundaries, treats dependence on cloud and managed providers, outages and exit (O1 Observe, O4 Restore, O5 Sustain).

Functions in this part. Part V concerns all five functions; Chapter 19 concerns O4 Restore and O5 Sustain, Chapter 22 O2 Diagnose, O3 Change and O4 Restore, and Chapter 24 O1 Observe, O4 Restore and O5 Sustain.

The thread from the series. Evidence and forums are those of AI Governance, Chapters 11 and 13; the metrics of the blue team are those of AI Blue, Chapter 20; the coverage claim is that of AI Purple, Chapter 17; sovereignty is treated in AI Governance, Chapter 6.

What you will learn in this part:

• How a recoverability claim is written and expires
• Which metrics mislead
• Which operating model fits which service
• Who holds which decision right
• Which duty reaches which function

Part VI turns to the people who operate.