Operational Resilience Mapper

Synthetic data

Inspired by OSFI Guideline E-21 — illustrative, not regulatory advice

E-21 was published August 22, 2024; OSFI expected full adherence by September 1, 2026 and scenario testing completed for all critical operations by September 1, 2027.

Critical operation

Tolerance for disruption (min)

RTO (min)

Severe-but-plausible scenario

Dependency map

People

Payments operations
On-call SRE

Technology

Payments hub engine
Real-Time Rail gateway
Message queue cluster

Processes

Payment repair queue
Cut-off management

Information

Payment message store
Sanctions screening lists

Facilities

Toronto primary data centre
Montreal recovery site

Third parties

Payments Canada
Sanctions screening vendor

Synthetic recovery timeline

Within tolerance114 min recovery vs 120 min tolerance · RTO 60 min (missed)

Detect: 10 min
Decide and invoke plan: 20 min
Recover Message queue cluster: 84 min

Weakest dependency: Message queue cluster

Remediation actions

Establish active-active deployment across two cloud regions
Automate region failover and rehearse it quarterly
Agree cloud provider escalation and status SLAs