[OR] [PM] [P3] [T] [N] Independent Quality Review Checklist

Sustain Phase Appendices

:

• Introduce Change Management
• Develop Communication Strategy 
• Implement Training and Awareness
• Provide Self-Assessment
  
• Conduct an Independent Quality Review

The templates should be adapted to reflect the organisation’s size, complexity, regulatory environment, risk profile, governance structure, and operational resilience maturity.

Appendix N: Independent Quality Review Checklist 

Governance

• Board oversight is effective.
• Senior management accountability is clear.
• Governance bodies provide challenge.
• High-risk weaknesses are escalated.
• Actions are actively tracked.

Critical Business Services

• CBS definitions are appropriate.
• Services are current.
• Owners are assigned.
• Customer and stakeholder impacts are considered.

Mapping

• Maps reflect actual operating arrangements.
• Key dependencies are complete.
• Single points of failure are identified.
• Concentration risks are visible.
• Changes trigger map updates.

Impact Tolerance

• Methodology is credible.
• Tolerances are approved.
• Tolerances are evidence-based.
• Testing challenges the tolerance.
• Breaches are escalated.

Scenario Testing

• Scenarios are severe but plausible.
• Tests challenge critical dependencies.
• Management participates.
• Third parties participate where appropriate.
• Findings drive remediation.

Sustain Activities

• Cultural change is measurable.
• Communication is effective.
• Training is role-based.
• Competency is assessed.
• Self-assessment is evidence-based.

Assurance

• Findings are risk-rated.
• Root causes are identified.
• Management responses are appropriate.
• Closure is validated.
• Retesting occurs where required.

"Plan" Phase of the OR Planning Methodology