AI Is Already in Your Resilience Program. Now There’s a Framework for It.
Most resilience guidance was built for human-run, human-speed programs. That assumption no longer holds. The AI in Resilience Framework, developed by DRJ in partnership with The BCI, gives practitioners a structured way to govern AI, defend against it, and put it to work.
AI in Resilience Framework (Download Now)
Three pillars, ten domains.
The framework organizes the field into three pillars. Govern is the spine, because it applies to everything. Defend addresses AI as a risk to be managed. Apply addresses AI as a capability to be used. Ten domains sit within the three pillars.
Govern
Oversight, accountability, policy.Governance runs through both of the other pillars. You cannot defend against AI risk or apply AI capability responsibly without it.
Show the 3 domainsHide the 3 domains
- 01 AI governance and accountability Knowing who owns AI-driven actions before those actions occur.
- 02 Regulation and standards Translating emerging AI rules into resilience practice.
- 03 Ethics, transparency, and trust Responsible use, explainability, and the trust stakeholders place in decisions AI has shaped.
Defend
AI as a risk to manage.This pillar treats AI as a source of risk. Some of these threats are new in kind; others are familiar threats transformed in degree.
Show the 3 domainsHide the 3 domains
- 04 The AI-enabled threat landscape AI-augmented attacks, deepfakes, synthetic identity, and social engineering produced at scale.
- 05 Model and data risk Model failure, drift, poisoning, fabrication, and dependence on third-party models and data.
- 06 Autonomous agents as a disruption class The failure of autonomous agents, the cascading actions they trigger, and the wider blast radius they create.
Apply
AI as a capability to use.This pillar treats AI as a capability that strengthens resilience when used well.
Show the 4 domainsHide the 4 domains
- 07 AI across the resilience lifecycle Business impact analysis, risk assessment, plan generation and maintenance, scenario design, and exercising.
- 08 AI-driven detection, response, and recovery Anomaly and ransomware detection, automated recovery workflows, and real-time operational dashboards.
- 09 AI in crisis management and communications Intelligent monitoring, information triage during an incident, and around-the-clock assistance.
- 10 Evaluating and adopting AI-enabled tooling Assessing vendor claims, building versus buying, integration, and the workforce change adoption brings.
AI Hype vs. AI Reality
Help us understand how AI is actually being used across resilience. Take the AI-Enhanced Resilience for 2027 survey.