IVI Framework Viewer

Skills and Competence Development

A6

Establish and make available a risk management training curriculum and other employee development mechanisms to enhance skills and competences. Record employee participation in risk management training and development initiatives, and recognise and acknowledge their achievements (e.g. courses completed, certifications, skills and competence levels acquired).

Improvement Planning

Practices-Outcomes-Metrics (POM)

Representative POMs are described for Skills and Competence Development at each level of maturity.

2Basic
  • Practice
    Develop basic risk management training and development programmes and deliver them in response to individual requests.
    Outcome
    There is high-level user proficiency and awareness of risk management processes, increased understanding of the role and value of risk management, and growing application of risk management in activities.
    Metrics
    • # of risk management training and development programmes available.
    • % of IT employees who have taken risk management training.
    • % of business unit employees who have taken risk management training.
3Intermediate
  • Practices
    • Standardize risk management training and development programmes that have links to yearly target-setting, and proactively deliver them across most areas.
    • Provide on-demand training for selected employees.
    Outcome
    There is wide-scale understanding of the role and value of risk management, and an opportunity to supplement scarce resources and improve risk management on a more timely basis.
    Metrics
    • # of risk management training and development programmes available.
    • % of IT employees who have taken risk management training.
    • % of business unit employees who have taken risk management training.
4Advanced
  • Practice
    Proactively deliver comprehensive risk management training and development programmes across the organization, and tailor the programmes to address the individual requirements of, for example, high-potential employees and those on specific career paths.
    Outcomes
    • Risk management can be further improved as a result of organization-wide availability of training and development programmes and tailored versus generic risk management training.
    • Employees and teams have more specific knowledge and tools to enhance the risk management processes.
    Metrics
    • # of risk management training and development programmes available.
    • % of IT employees who have taken risk management training.
    • % of business unit employees who have taken risk management training.
    • % of employees who are overdue refresher risk management training.
5Optimized
  • Practice
    Continually review risk management training and development programmes for improvement opportunities based on objectives, emerging industry insights, and results in previous activities, and adjust them as required to address knowledge gaps.
    Outcomes
    • There is consistent and up-to-date understanding of risk management training requirements.
    • Training and development programmes are regarded as best known industry practice.
    Metric
    Stakeholder satisfaction ratings with risk management training.