Risk and opportunity management (PSK) includes: identifying threats and opportunities; assessing the likelihood of their occurrence and impact; mitigating potential threats; using potential opportunities.
Purpose: to identify, record, analyze and manage potential risks or opportunities.
Value: Mitigating adverse effects or using positive effects to increase the likelihood of achieving goals.
Practice summary
Maturity level 1
RSK 1.1 identifies and records risks or opportunities and keeps them up to date.
Maturity level 2
RSK 2.1 analyzes the identified risks or opportunities.
RSK 2.2 monitors the identified risks or opportunities and communicates the status to affected stakeholders.
Maturity level 3
RSK 3.1 identifies and uses risk or opportunity categories.
RSK 3.2 defines and uses parameters for risk or opportunity analysis and treatment.
RSK 3.3 develops and maintains an updated risk or opportunity management strategy.
RSK 3.4 Develop and maintain an up-to-date risk or opportunity management plan.
RSK 3.5 manages risks or opportunities by implementing planned risk or opportunity management activities.
Incident Resolution and Prevention (IRP) includes: identifying actual and potential incidents that may affect delivery; establishing methods to deal with incidents; analyzing incidents to prevent recurrence.
Purpose: resolve immediately and prevent interruptions to maintain service delivery levels.
Value: Minimize the impact of interruptions to achieve goals and customer commitments more effectively.
Practice summary
Maturity level 1
IRP 1.1 records and resolves incidents.
Maturity level 2
IRP 2.1 is developed, kept up to date, and follows incident resolution and prevention methods.
IRP 2.2 monitors and resolves every shutdown event.
IRP 2.3 communicates the status of the event.
Maturity level 3
IRP 3.1 develops, keeps up-to-date and uses an incident management system to process and track incidents and their solutions.
IRP 3.2 analyzes selected incidents and solution data to prevent future incidents.
Continuity (CONT) plans and verifies the key functions and resource sets required to continue operation in the event of a major or catastrophic event.
Purpose: Plan mitigation activities to cause significant damage to business operations so that work can continue or resume.
Value: In the event of serious damage or catastrophic events, operations can continue.
Practice summary
Maturity level 1
CONT 1.1 Develop emergency measures to manage major operational disruptions.
Maturity level 2
CONT 2.1 identifies and determines the functions essential for continuity.
CONT 2.2 identifies and prioritizes resources that are critical to continuity.
CONT 2.3 is developed, kept up to date and follows a continuity plan to resume basic functions.
Maturity level 3
CONT3.1 compiles and keeps the latest information about continuous training.
CONT 3.2 provides and evaluates continuous training according to the plan.
CONT 3.3 prepares, conducts and analyzes the results of the verification and validation of the continuity plan.
The Management Workforce (OT) addresses the way an organization develops and retains the human resources needed to perform current and future work.
Organizational training provides training strategies and capabilities to support the organization's strategic business goals, meet common tactical needs, and provide training throughout the organization.
Purpose: To develop the skills and knowledge of personnel so that they can perform their duties efficiently.
Value: Enhance personal skills and knowledge to improve organizational performance.
Practice summary
Maturity level 1
OT 1.1 trains people.
Maturity level 2
OT 2.1 determines training needs.
OT 2.2 Train personnel and keep records.
Maturity level 3
OT 3.1 develops and updates the organization's strategy and short-term training needs.
OT 3.2 coordinates training needs and delivery between projects and organizations.
OT 3.3 develops, keeps updated and follows the organization's strategy and short-term training plan.
OT 3.4 develops, keeps updated and uses the training function to meet the organization's training needs.
OT 3.5 evaluates the effectiveness of the organization's training plan.
OT 3.6 records, keep updated and use the organizational training record set.
Enabling focuses on analyzing reasons, making decisions, maintaining the integrity of work products and communicating with stakeholders.
Support for implementation includes determining and resolving the reasons for selected results, creating decision-making methods and structures, maintaining the integrity of work products, and promoting communication and coordination between stakeholders.
Cause analysis and solution (CAR) can determine the cause of the selected result and take measures to prevent the recurrence of bad results or ensure the recurrence of positive results.
Purpose: Determine the reason for the selected result and take measures to prevent the recurrence of bad results or ensure the recurrence of positive results.
Value: Solving the root cause problem can avoid rework and directly improve quality and productivity.
Practice summary
Maturity level 1
CAR 1.1 identifies and resolves the cause of the selected result.
Maturity level 2
CAR 2.1 selects the results for analysis.
CAR 2.2 analyzes and resolves the cause of the result.
Maturity level 3
CAR 3.1 determines the root cause of selected results by following the organizational process.
CAR 3.2 proposes actions to address the root causes that have been identified.
CAR 3.3 implements selected action recommendations.
CAR 3.4 records root cause analysis and resolution data.
CAR 3.5 submits improvement suggestions to prove a valid change.
Maturity level 4
CAR 4.1 uses statistics and other quantitative techniques to perform root cause analysis on selected results.
CAR 4.2 uses statistics and other quantitative techniques to assess the impact of measures taken on process performance.
Maturity level 5
CAR 5.1 uses statistics and other quantitative techniques to evaluate other solutions and processes to determine whether this resolution should be applied on a larger scale.
Decision Analysis and Resolution (DAR) helps to use standards-based alternatives to evaluate and record the results to make decisions.
Purpose: Use the recorded process of analyzing alternatives to formulate and record the
value of decision-making: improve the objectivity of decision-making and the possibility of choosing the best solution.
Practice summary
Maturity level 1
DAR 1.1 defines and documents alternatives.
DAR 1.2 makes and records decisions.
Maturity level 2
DAR 2.1 develops, keeps up-to-date and uses rules to determine when to follow a documented process to make standards-based decisions.
DAR 2.2 develops standards for evaluating alternatives.
DAR 2.3 identifies alternative solutions.
DAR 2.4 selects the evaluation method.
DAR 2.5 uses standards and methods to evaluate and select solutions.
Maturity level 3
DAR 3.1 is developed to keep updated and use the description of role-based decision-making authority.
Configuration management (CM) uses configuration identification, control, and auditing to establish and maintain the integrity of work products.
Purpose: Use configuration identification, version control, change control and auditing to manage the integrity of work products.
Value: Reduce workload and improve the ability to provide customers with the correct version of the solution.
Practice summary
Maturity level 1
CM 1.1 performs version control.
Maturity level 2
CM 2.1 identifies items to be placed under configuration management.
CM 2.2 develops, keeps up-to-date and uses configuration and change management systems.
CM 2.3 establishes or publishes benchmarks for internal use or delivery to customers.
CM 2.4 manages changes to the project under configuration management.
CM 2.5 development, keep updated and use records to describe items under configuration management.
CM 2.6 performs configuration audits to maintain the integrity of configuration baselines, changes, and configuration management system content.