[OR] [PM] [P3] [T] [M] Independent Quality Review Terms of Reference

Sustain Phase Appendices

:

• Introduce Change Management
• Develop Communication Strategy 
• Implement Training and Awareness
• Provide Self-Assessment
  
• Conduct an Independent Quality Review

The templates should be adapted to reflect the organisation’s size, complexity, regulatory environment, risk profile, governance structure, and operational resilience maturity.

Appendix M: Independent Quality Review Terms of Reference

1. Review Title

Independent Quality Review of the Operational Resilience Programme.

2. Purpose

To provide objective assurance regarding the design, implementation, effectiveness, and sustainability of the operational resilience programme.

3. Objectives

The review should determine whether:

• governance is effective;
• critical business services are appropriately identified;
• interconnections and interdependencies are complete;
• impact tolerances are meaningful;
• scenario testing is sufficiently challenging;
• lessons are implemented;
• cultural change is embedded;
• communication is effective;
• training supports competency;
• self-assessment is credible;
• remediation is effective.

4. Scope

Define:

• organisational areas;
• critical business services;
• jurisdictions;
• systems;
• third parties;
• assessment period.

5. Independence

Reviewers should disclose any actual or potential conflicts of interest.

6. Methodology

The review may include:

• document review;
• interviews;
• walkthroughs;
• sampling;
• control testing;
• evidence validation;
• scenario review.

7. Reporting

The final report should include:

• overall assurance conclusion;
• strengths;
• findings;
• systemic themes;
• management responses;
• remediation actions.

8. Follow-Up

High-risk findings should be monitored until validated closure.

"Plan" Phase of the OR Planning Methodology