Qualification details

Transcription

1 Outcome Statement Qualification details Title New Zealand Certificate in Organisational Risk and Compliance (Level 4) Version 1 Qualification type Certificate Level 4 Credits 60 NZSCED Quality Management DAS classification Business > Business Operations and Development > Organisational Direction and Stragegy Qualification developer The Skills Organisation Next review 60 months December 2019 Approval date Strategic purpose statement Dd Mmmm YYYY Risk and compliance management systems support an organisation s ability to demonstrate its commitment to the identification and management of risk and compliance with relevant laws and codes, as well as governance, ethical and community expectations. The purpose of this qualification is to provide people with a transferable set of skills and knowledge to support the operation of effective organisation-wide risk and compliance management systems. This qualification is designed to support sound business practices and improve the competitiveness of New Zealand businesses. Graduate profile Graduates will benefit from achieving a portable, recognised qualification and skillset and will be able to monitor processes and operate within established risk and compliance framework(s). Graduates will be able to: 1 Apply understanding of the fundamentals of risk and compliance frameworks in an organisation. 2 Understand operational processes, risks, and controls. Implement the test of these controls, review the actions for risks, and assist in the evaluation of the findings. 3 Undertake tasks associated with operational risk and compliance management frameworks and systems. 4 Contribute to the development of policies, procedures, mitigation actions, controls, testing that they are operating as intended, and where appropriate recommending improvements. 5 Assess events such as issues, the probability and impact of risks, breaches, and near misses for significance; recommend management options, monitor implementation of selected options(s); compile information to assist identification of trends. 6 Promote adherence to organisational requirements; provide Qualification Reference ORC6v1 Page 1 of 7

2 Education pathway Employment pathway advice, support and education and training on risk and compliance requirements. 7 Perform baseline research and information gathering to allow identification of emerging trends and issues to maintain personal and organisational competency. 8 Communicate with relevant stakeholders (including management and staff) in a manner that is appropriate for the nature of the information and the audience. Graduates of this qualification may progress on to the New Zealand Diploma in Risk and Compliance (Level 6). All graduates may progress on to higher level tertiary qualifications, for example in management and leadership. Graduates of this qualification may be qualified to work as a practitioner in the risk and compliance field. Qualification specifications Example of roles include: risk adviser, risk analyst, risk practitioner, compliance analyst, risk and compliance adviser, or other roles that support audit and assurance. Qualification award The candidate shall be awarded the qualification by the accredited Tertiary Education Organisation (TEO) where the programme has been completed. The formal document certifying the award of this qualification includes the full qualification title, the date of award, and the logos of The Skills Organisation, the accredited TEO, and the NZQF. As the qualification developer, The Skills Organisation will maintain a list of graduates of this qualification. The TEO will annually report the names of all graduates awarded the qualification to The Skills Organisation. Arrangements for managing consistency All TEOs offering this qualification (either arranging training or delivering programmes) are required to meet with The Skills Organisation on an annual basis, or more frequently if required. The purpose of the meeting(s) is to enable each TEO, and The Skills Organisation, to provide assurance that graduates have achieved the graduate profile outcomes to a comparable standard. This will involve: reviewing evidence associated with graduates achievement of outcomes in the qualification s graduate profile. identifying opportunities for improvement of outcome achievement. Following the meeting(s), The Skills Organisation will provide a report to TEOs on the confidence it has that graduates have achieved the qualification s graduate profile Qualification Reference ORC6v1 Page 2 of 7

3 outcomes to a standard comparable with graduates of other programmes leading to this qualification. The process will be funded by TEOs offering programmes leading to the qualification, to cover actual and reasonable evaluation related costs. The Skills Organisation will also undertake a regular cycle of surveys that will include industry feedback on skill needs and the monitoring of graduate outcomes against the qualification purpose. The feedback will be used to inform programme development and future qualification reviews. For full details of The Skills Organisation s arrangements for meeting consistency, contact The Skills Organisation at: consistency@skills.org.nz. Credit transfer and recognition of prior learning arrangements Minimum standard of achievement and standards for grade endorsements Entry requirements (including prerequisites to meet regulatory body or legislative requirements) TEOs delivering programmes that lead to award of this qualification may transfer credit and recognise prior learning in accordance with their own credit recognition policies and proceedures. These policies and proceedures, and information about associated fees, must be available to the applicant prior to enrolment. To facilitate credit transfer, education organisations must clearly demonstrate the equivalency or comparability between each of the outcomes in the graduate profile, and the assessment components of their programmes. Credit transfer will be automatic where standards on the Directory of Assessment Standards are used within programmes of study or training leading to this qualification. The minimum standard of achievement required for the award of the qualification will be: achievement of all graduate outcomes in the graduate profile through successful completion of an approved programme. Nil Qualification conditions Overarching conditions relating to the qualification Conditions for programme structure Not applicable Conditions for programme context Other conditions Not applicable Tertiary Education Organisations (TEOs) offering programmes leading to this qualification must maintain currency with ammendments to, and replacements of, relevant legislation, regulations, government departments, and Australian/New Zealand/International Standards. Qualification Reference ORC6v1 Page 3 of 7

4 References ISO 19600:yyyy Compliance Management Systems Guidelines (Draft) ISO 31000:2009 Risk Management Principles and guidelines Definitions Risk effect of unceretainty on organisational objectives. Specific conditions relating to the Graduate profile Qualification outcomes Conditions Mandatory or Optional 1 Apply understanding of the fundamentals of risk and compliance frameworks in an organisation. 2 Understand operational processes, risks and controls. Implement the test of these controls, review the actions for risks, and assist in the evaluation of the findings. Awareness of organisational governance, risk, and compliance requirements, including: Corporate Governance the way in which the organisation is directed and controlled. Organisational structure and function, including roles and responsibilities. The risk framework: proactive identification, assessment, mitigation, and reporting. Understanding the applicable compliance standards (laws, regulations, codes, and standards) and their requirements. Internal Board/Executive driven obligations. Application of risk assessment criteria. Understanding of how: Control, audit and behavioural mechanisms ensure compliance with standards. Risks are identified, analysed and mitigated. Complete tests of control(s). Complete risk reviews. Compile template reports. Qualification Reference ORC6v1 Page 4 of 7

5 3 Undertake tasks associated with operational risk and compliance management frameworks and systems 4 Contribute to the development of policies, procedures, mitigation actions, controls, testing that they are operating as intended, and where appropriate recommending improvements. 5 Assess events (such as issues, the probability and impact of risks, breaches, near misses) for significance; recommend Undertake tasks associated with an organisational risk and compliance management programme giving due consideration to the nature of responses and whether further information is required. Tasks include: Investigating anomalies and noncompliances, recording findings. Completing assessments and reviews/audits. Facilitate risk workshops. Identifying and assessing risks and guiding development of risk mitigation actions. Completing compliance reviews. Completing baseline audits and assurance reviews for the risk and compliance system/framework. Understanding the proactive nature of risk and compliance and the benefits to continuous improvement including: How policies and procedures fit within the risk and compliance framework. How policies, procedures, and controls are constructed, approved and published. How to support the establishment and development of policies, procedures, and controls. Understanding of: Mitigation actions and controls for risks. Development of controls to reduce risk and ensure compliance. Testing of risk mitigation and control actions. The process for recommending actions for improvements. Understanding the significance (quantitatively and qualitatively) and cost versus benefit in Qualification Reference ORC6v1 Page 5 of 7

6 management options, monitor implementation of selected options(s); compile information to assist identification of trends 6 Promote adherence to organisational requirements; provide advice, support and education and training on risk and compliance requirements 7 Perform baseline research and information gathering to allow identification of emerging trends and issues to maintain personal and organisational competency. 8 Communicate with relevant stakeholders (including management and staff) in a manner that is appropriate for the nature of the information and the audience. relation to an organisation s size, scale and culture. Completion of risk and compliance reports (breach logs, compliance registers, risk registers). Apply risk assessment criteria to identified events to prioritise responses. Compilation of information in a format which allows it to be analysed to identify trends. Recommend risk mitigation actions to management. Supporting the development of organisational and training programmes for staff to: Raise awareness of: Manuals and instructions. Interdependencies and separations between roles. Available supporting technologies. Delivery of training programmes. Promoting a culture of risk awareness and reporting on identified issues. Disseminating information about risk and control programmes using appropriate media. Techniques for researching technological changes and legislative imperatives, environmental conditions, emerging risk issues, changes to industry sector practice and recognised industry best practice. Identifying and extracting emerging risks, issues, and events. Identifying better practice models. Preparing reports at a professional level. Using appropriate procedures and channels to communicate and escalate information relating to risks, issues, and events. Communicating information clearly and concisely both verbally and in writing in a Qualification Reference ORC6v1 Page 6 of 7

7 form appropriate to the audience and the nature of the information. Maintaining and updating reference resources and material. Transition information Replacement information (Write any additional transition information here or delete the row) Qualification Reference ORC6v1 Page 7 of 7