The second part of the operational resilience series presents a modern resilience control model for financial and insurance institutions to maintain better control when dependencies fail. It argues that in financial services and insurance, resilience is not measured by whether outages happen but by how institutions respond.