Skills and Competence Development
Establish and make available a risk management training curriculum and other employee development mechanisms to enhance skills and competences. Record employee participation in risk management training and development initiatives, and recognise and acknowledge their achievements (e.g. courses completed, certifications, skills and competence levels acquired).
Improvement Planning
Practices-Outcomes-Metrics (POM)
Representative POMs are described for Skills and Competence Development at each level of maturity.
- 2Basic
- Practice
- Develop basic risk management training and development programmes and deliver them in response to individual requests.
- Outcome
- There is high-level user proficiency and awareness of risk management processes, increased understanding of the role and value of risk management, and growing application of risk management in activities.
- Metrics
- # of risk management training and development programmes available.
- % of IT employees who have taken risk management training.
- % of business unit employees who have taken risk management training.
- 3Intermediate
- Practices
- Standardize risk management training and development programmes that have links to yearly target-setting, and proactively deliver them across most areas.
- Provide on-demand training for selected employees.
- Outcome
- There is wide-scale understanding of the role and value of risk management, and an opportunity to supplement scarce resources and improve risk management on a more timely basis.
- Metrics
- # of risk management training and development programmes available.
- % of IT employees who have taken risk management training.
- % of business unit employees who have taken risk management training.
- 4Advanced
- Practice
- Proactively deliver comprehensive risk management training and development programmes across the organization, and tailor the programmes to address the individual requirements of, for example, high-potential employees and those on specific career paths.
- Outcomes
- Risk management can be further improved as a result of organization-wide availability of training and development programmes and tailored versus generic risk management training.
- Employees and teams have more specific knowledge and tools to enhance the risk management processes.
- Metrics
- # of risk management training and development programmes available.
- % of IT employees who have taken risk management training.
- % of business unit employees who have taken risk management training.
- % of employees who are overdue refresher risk management training.
- 5Optimized
- Practice
- Continually review risk management training and development programmes for improvement opportunities based on objectives, emerging industry insights, and results in previous activities, and adjust them as required to address knowledge gaps.
- Outcomes
- There is consistent and up-to-date understanding of risk management training requirements.
- Training and development programmes are regarded as best known industry practice.
- Metric
- Stakeholder satisfaction ratings with risk management training.