[OR] [PM] [P3] [T] [N] Independent Quality Review Checklist

Sustain Phase Appendices

Introduce Change Management
Develop Communication Strategy
Implement Training and Awareness
Provide Self-Assessment
Conduct an Independent Quality Review

The templates should be adapted to reflect the organisation’s size, complexity, regulatory environment, risk profile, governance structure, and operational resilience maturity.

Appendix N: Independent Quality Review Checklist

Governance

Board oversight is effective.
Senior management accountability is clear.
Governance bodies provide challenge.
High-risk weaknesses are escalated.
Actions are actively tracked.

Critical Business Services

CBS definitions are appropriate.
Services are current.
Owners are assigned.
Customer and stakeholder impacts are considered.

Mapping

Maps reflect actual operating arrangements.
Key dependencies are complete.
Single points of failure are identified.
Concentration risks are visible.
Changes trigger map updates.

Impact Tolerance

Methodology is credible.
Tolerances are approved.
Tolerances are evidence-based.
Testing challenges the tolerance.
Breaches are escalated.

Scenario Testing

Scenarios are severe but plausible.
Tests challenge critical dependencies.
Management participates.
Third parties participate where appropriate.
Findings drive remediation.

Sustain Activities

Cultural change is measurable.
Communication is effective.
Training is role-based.
Competency is assessed.
Self-assessment is evidence-based.

Assurance

Findings are risk-rated.
Root causes are identified.
Management responses are appropriate.
Closure is validated.
Retesting occurs where required.

"Plan" Phase of the OR Planning Methodology

Assess Capability and Maturity	Analyse Gap	Develop Strategy and Roadmap	Confirm Risk Appetite	Develop and Embed Governance

More Information About Blended Learning OR-5000 [BL-OR-5] or OR-300 [BL-OR-3]

Contact our course consultant colleagues to learn more about our blended learning program and about the next course's schedule. They are the BL-OR-3 Blended Learning OR-300 Operational Resilience Implementer and the BL-OR-5 Blended Learning OR-5000 Operational Resilience Expert Implementer.