[OR] [P2] [S5] [LL] [C11] Communication of Lessons Learned

[P2] [S5] Chapter 11

Communication of Lessons Learned

Introduction

Lessons learned only create value when they are effectively communicated and understood. Many organisations capture and analyse lessons but fail to:

• Share insights beyond immediate teams
• Influence organisational behaviour
• Drive enterprise-wide improvement

In operational resilience, communication is critical to ensure that:

• Learning is disseminated across all relevant stakeholders
• Risks are clearly understood
• Improvement actions are aligned and executed

This chapter explores how organisations can design and implement a robust communication framework for lessons learned.

Purpose of the Chapter

To establish a structured and effective approach for communicating Lessons Learned, ensuring that insights are shared across the organisation, drive awareness, influence decision-making, and strengthen operational resilience capabilities.

Objectives of Communicating Lessons Learned

Effective communication of lessons learned aims to:

• Promote organisational awareness of risks and vulnerabilities
• Enhance decision-making at all levels
• Drive accountability for improvement actions
• Prevent recurrence of incidents
• Support regulatory transparency and compliance

Ultimately, communication ensures that lessons learned become institutional knowledge, not isolated insights.

Key Principles of Effective Communication

Clarity

• Present information in a clear and concise manner
• Avoid technical jargon where possible

Relevance

• Tailor messages to the audience
• Focus on what matters to stakeholders

Timeliness

• Communicate lessons promptly
• Avoid delays that reduce impact

Transparency

• Share both successes and failures
• Promote openness

Action-Oriented

• Highlight required actions
• Emphasise accountability

Target Audiences for Lessons Learned

Different stakeholders require different levels of detail and focus.

Senior Management and Board

• Strategic insights
• High-level risks and impacts
• Status of improvement actions

Business Units

• Operational impacts
• Process improvements
• Action ownership

Risk and Compliance Functions

• Control weaknesses
• Risk implications
• Regulatory considerations

IT and Technology Teams

• System vulnerabilities
• Technical improvements

External Stakeholders

• Regulators
• Customers (where appropriate)
• Third-party vendors

Communication Channels and Methods

Formal Reports

• Post-incident reports
• Post-exercise reports
• Audit reports

Dashboards and Visualisations

• Real-time tracking of:
• Lessons learned
• Action status
• Risk indicators

Meetings and Workshops

• Lessons learned review sessions
• Cross-functional workshops

Training and Awareness Programs

• Incorporate lessons into training materials
• Conduct awareness sessions

Digital Platforms

• Intranet portals
• Knowledge management systems

Structuring Lessons Learned Reports

A standardised report format ensures consistency and clarity.

Key Components of a Report

Tailoring Communication to Stakeholders

Executive-Level Communication

• Focus on:
• Strategic implications
• Risk exposure
• Resource requirements

Operational-Level Communication

• Focus on:
• Process improvements
• Implementation details

Technical Communication

• Focus on:
• System-level issues
• Technical solutions

Promoting Organisational Awareness

Knowledge Sharing

• Share lessons across departments
• Encourage cross-functional learning

Awareness Campaigns

• Highlight key lessons
• Reinforce learning culture

Continuous Engagement

• Regular updates
• Ongoing communication

Integration with Training and Exercises

Incorporating Lessons into Training

• Update training materials
• Use real-life examples

Enhancing Scenario Testing

• Use lessons to design scenarios
• Improve realism

Reinforcing Learning

• Conduct follow-up exercises

Technology and Tools for Communication

Knowledge Management Systems

• Central repository for lessons learned
• Easy access for stakeholders

Dashboards

• Visual representation of:
• Key metrics
• Trends
• Action status

Collaboration Tools

• Facilitate communication across teams

Measuring Effectiveness of Communication

Key Metrics

• Stakeholder awareness levels
• Participation in training sessions
• Reduction in recurring incidents

Feedback Mechanisms

• Surveys
• Workshops
• Stakeholder feedback

Continuous Improvement

• Refine communication strategies based on feedback

Regulatory Expectations

Regulators expect organisations to:

• Communicate lessons learned effectively
• Demonstrate transparency
• Provide evidence of continuous improvement

Communication supports:

• Regulatory reporting
• Audit requirements
• Compliance with resilience frameworks

Common Challenges

 Poor Communication Channels

• Limited reach
• Ineffective dissemination

Information Overload

• Too much detail
• Lack of focus

Lack of Engagement

• Stakeholders not actively involved

Siloed Information

• Lessons not shared across departments

Best Practices

Standardise Communication Formats

• Use consistent templates

Tailor Messages

• Adapt to audience needs

Use Visual Tools

• Dashboards and infographics

 Promote Transparency

• Share both successes and failures

Encourage Feedback

• Continuously improve communication

Case Example: Communication in Banking Sector

Scenario

A bank experiences a system outage affecting customer transactions.

Communication Approach

• Immediate notification to stakeholders
• Detailed post-incident report
• Workshops to discuss lessons learned

Outcome

• Improved awareness
• Enhanced response processes
• Reduced recurrence

Effective communication of lessons learned is essential for transforming insights into organisation-wide improvements. It ensures that:

• Knowledge is shared
• Risks are understood
• Actions are implemented

By establishing a structured communication framework, organisations can:

• Enhance operational resilience
• Strengthen governance
• Foster a culture of continuous learning

Transition to Next Chapter

With effective communication in place, the next chapter will explore technology and tools for managing lessons learned, focusing on how digital solutions can enhance capture, analysis, and reporting.

C1	C2	C3	C4	C5	C6
C7	C8	C9	C10	C11	C12
C13	C14	C15	C16	C17	C18

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.