[OR] [BOK] [13] [P3] [S3] Implement Training and Awareness

Element

Description

Purpose

• To institutionalise operational resilience by embedding awareness and training into the organisation’s culture.
• This ensures all employees, stakeholders, and third parties understand their roles and responsibilities in maintaining resilience, particularly in protecting and restoring critical business services during disruptions.

• Develop a structured and ongoing training program tailored to different roles and responsibilities.
• Build organisation-wide awareness of operational resilience principles, practices, and expectations.
• Reinforce the importance of resilience across all levels, including leadership,  frontline staff, and third-party partners.
• Ensure consistent communication of lessons learned from exercises, incidents, and audits.
• Align training programs with regulatory expectations and industry best practices.

Inputs

• OR policies, frameworks, and governance structure.
• Results from risk assessments, business impact analysis (BIA), and scenario testing.
• Regulatory requirements and supervisory expectations.
• Feedback from previous incidents, exercises, and audits.
• Training needs assessment across business units and third parties.

Activities

• Design role-based training modules (e.g., executives, business units, IT, third parties).
• Conduct awareness campaigns (e.g., newsletters, workshops, intranet resources, townhalls).
• Deliver scenario-based training and crisis simulation exercises.
• Provide refresher training to sustain knowledge retention and awareness.
• Incorporate resilience topics into onboarding for new staff.
• Track attendance, participation, and performance to measure effectiveness.
• Embed resilience awareness in supplier and partner engagement.

Outputs

• A comprehensive OR training program tailored by function and role.
• Documented training records and attendance tracking.
• Communication materials (presentations, awareness bulletins, e-learning modules).
• Measurable awareness levels across the organisation (through surveys, assessments).
• Evidence of compliance with regulatory training requirements.
• Increased organisational readiness and resilience culture.

Linkages

• P3-S1 (Embed Governance and Oversight): Ensures leadership supports training as part of resilience governance.
• P3-S2 (Maintain Continuous Compliance): Training and awareness reinforce compliance and regulatory obligations.
• P3-S4 (Enhance Collaboration and Third-Party Engagement): Training extends to suppliers, vendors, and partners.
• P3-S5 (Improve and Communicate Lessons Learned): Lessons learned feed into training and awareness updates.
• Cross-phase linkage: Builds on P2-S5 (Conduct Exercises and Validations) by reinforcing knowledge gained during simulations and stress testing.