Certification Application: Using Operational Resilience Body of Knowledge 15 (OR BoK 15) as part of your experience justification
This guide showcases how to effectively utilize Operational Resilience Body of Knowledge 15 (OR BoK 15) within your "Sustain" Phase 3 - Conduct Independent Quality & Assurance Review Stage 15" experience justification for the certification application.
Remember, OR BoK 15 outlines the minimum expected capabilities for an OR professional.
Demonstrating Your Expertise
Ensure that the "Conduct Independent Quality & Assurance Review" content is included in your application. Click the icon on the right to recap.
This is a brief explanation of the template provided in the certification application form (CAF)
| |
Evidence of Work Done
|
[3] When was it done? MM-YYYY to MM-YYYY
|
| [1] What was performed? Per the specific OR BoK? |
Detail the particular operational resilience practices you implemented. This is in line with the content of the OR BoK that you learned during the course.
(Estimate of a minimum of 200 words)
|
|
| [2] How was it carried out? |
This is a write-up of your actual implementation and contribution to the specific OR BoK within your organisation. You must demonstrate the completion of these particular OR practices.
(Estimate of a minimum of 200 words)
|
Please elaborate on the duration of the OR BoK. Was it over three years for ORCE and over one year for ORCS? |
In addition, here's how you may want to consider the following when describing your content: What was performed? and How was it carried out?
- Contextualize: Briefly establishes the specific project or organization where you applied the principles.
- Map stages to experience: Link each step in "Conduct Independent Quality & Assurance Review" to a concrete example from your work. Please refer to the "Areas of Expertise for OR BoK 15 "below.
- Provide evidence: Support your claims with tangible evidence, such as:
- Documents: Name (title and brief description) of reports, policy, proposal to management, and project plans.
- Testimonials: References from colleagues or project stakeholders.
Quantify duration: Mention your time at each stage, highlighting your dedicated engagement. Remember to aggregate the duration to at least one year for the specialist level and three years for Expert-level application.
5. Go beyond the minimum: While meeting specific standards of BoK expectations is essential, demonstrate how you exceeded them by adding further value. Did you develop innovative approaches? Did you lead a team through the process? Share such advancements to showcase your initiative and leadership.
Areas of Expertise for OR BoK 15 [P3-S5]
|
|
Demonstrate Your Actual "Practical" Experience and the period you execute these activities for more than one year (Specialist) or three years (Expert) |
| Understanding Independent Quality & Assurance Review |
- Think of an IQR as an external validation – a fresh set of eyes to assess your OR program's effectiveness during the "Sustain" phase. Understanding the Three Lines Model is crucial for this process.
|
| The Three Lines Model |
This model explains the relationship between different parts of an organization's assurance and review environment:
- First Line: Managers and staff who own and manage risks (day-to-day risk management).
- Second Line: Functions that oversee or specialize in compliance or risk management (risk oversight and review).
- Third Line: Provides independent assurance outside the first two lines (evaluates the adequacy of the first two lines).
- Fourth Line (External Assurance): External auditors, regulators (plays a vital role but sits outside the Three Lines Model).
|
| Red Flags for Independent Reviewers |
Independent reviewers look for potential weaknesses in your OR program. Here are some examples:
- Lack of expertise in operational resilience at senior levels.
- Unrealistic assumptions in scenario analysis and testing.
- Limited understanding of risk appetite and risk tolerance across the organization.
- Outdated infrastructure hindering resilience efforts.
|
| Conducting A Successful IQR |
Here's a roadmap to guide you through the IQR process:
- Prepare the IQR:
- Scope Determination: Identify the areas of your OR program to be reviewed using the Three Lines Model (specific risks, critical processes, incident response, etc.).
- Reviewer Selection: Choose an independent reviewer with expertise in OR and risk management (internal audit, external auditors, industry specialists, or regulators).
- Review Criteria: Establish clear criteria based on industry best practices, internal standards, and regulations.
- Data Preparation: Gather relevant documentation, reports, test results, and other materials for the reviewer.
- Communication and Agreement: Communicate the IQR's scope, objectives, and methodology to the reviewer and obtain their agreement.
- Conduct the IQR:
- On-Site Review: The reviewer will visit your organization to observe processes, interview personnel, and review documentation.
- Testing and Evaluation: The reviewer will assess the effectiveness of controls, incident response plans, and training programs through simulations or other testing methods.
- Data Analysis: The reviewer will compare the collected data to the established criteria.
- Draft Report: The reviewer will create a draft report summarizing their findings, including strengths, weaknesses, opportunities for improvement, and recommendations.
|
By demonstrating your understanding of the Three Lines Model and the IQR process, you'll show the certification reviewers that you're committed to continuously evaluating and improving your OR program. So, go forth and conduct independent reviews with confidence!
More Information About Blended Learning OR-5000 [BL-OR-5] or OR-300 [BL-OR-3]
To learn more about the course and schedule, click the buttons below for the OR-3 Blended Learning OR-300 Operational Resilience Implementer course and the OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer course.
|
|
|
|
|
|
|
|
|
|
If you have any questions, click to contact us.
|
|
|
|
|
|