SAQA All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.
SOUTH AFRICAN QUALIFICATIONS AUTHORITY 
REGISTERED QUALIFICATION: 

Occupational Certificate: Organisational Risk Practitioner 
SAQA QUAL ID QUALIFICATION TITLE
94222  Occupational Certificate: Organisational Risk Practitioner 
ORIGINATOR
Development Quality Partner - BANKSETA 
PRIMARY OR DELEGATED QUALITY ASSURANCE FUNCTIONARY NQF SUB-FRAMEWORK
QCTO - Quality Council for Trades and Occupations  OQSF - Occupational Qualifications Sub-framework 
QUALIFICATION TYPE FIELD SUBFIELD
Occupational Certificate  Field 03 - Business, Commerce and Management Studies  Generic Management 
ABET BAND MINIMUM CREDITS PRE-2009 NQF LEVEL NQF LEVEL QUAL CLASS
Undefined  125  Not Applicable  NQF Level 06  Regular-ELOAC 
REGISTRATION STATUS SAQA DECISION NUMBER REGISTRATION START DATE REGISTRATION END DATE
Reregistered  EXCO 0425/24  2018-07-01  2025-12-30 
LAST DATE FOR ENROLMENT LAST DATE FOR ACHIEVEMENT
2026-12-30   2029-12-30  

In all of the tables in this document, both the pre-2009 NQF Level and the NQF Level is shown. In the text (purpose statements, qualification rules, etc), any references to NQF Levels are to the pre-2009 levels unless specifically stated otherwise.  

This qualification does not replace any other qualification and is not replaced by any other qualification. 

PURPOSE AND RATIONALE OF THE QUALIFICATION 
Purpose:
The purpose of this qualification is to prepare a learner to be able to manage risk management plans in support of an organisation's risk framework, which is generally the responsibility of Risk Officers. However, the Risk Practitioners assist the Risk Officers by undertaking or facilitating activities related to the implementation of the plans for managing risk in an organisation.

A qualified learner will be able to:
  • Implement the framework (usually developed by Risk Officers) for managing risk in the business unit.
  • Create and sustain risk management partnerships.
  • Establish the internal and external risk context.
  • Assess risk in order to produce and update a risk profile for a business unit.
  • Prepare and facilitate risk treatment plans for a business unit.
  • Monitor, review and improve risk management activities and processes.

    Rationale:
    This Occupational Certificate: Organisational Risk Practitioner is an entry level qualification to provide sufficient knowledge and understanding in order to contribute towards supporting the functions carried out by the Risk Officers. Risk Officers are responsible to manage the complete risk management process within an organisation. 

  • LEARNING ASSUMED TO BE IN PLACE AND RECOGNITION OF PRIOR LEARNING 
    Recognition of Prior Learning (RPL):
    RPL for credits into the external integrated summative assessment:
    Accredited providers and approved workplaces must apply the internal assessment criteria specified in the related curriculum document to establish and confirm prior learning. Accredited providers and workplaces must confirm prior learning by issuing a statement of results or certifying a work experience record.

    RPL for access to the qualification:
    Accredited providers and approved workplaces may recognise prior learning against the relevant access requirements should learners not meet the formal entry requirements for admission into the qualification.

    Entry Requirements:
    The minimum entrance requirements for the Occupational Certificate: Organisational Risk Practitioner programme is a National Senior Certificate (NSC) or a Senior Certificate, with endorsement for diploma studies or a National Certificate (Vocational) at NQF Level 4.

    In addition to the above, the general rules will apply with regard to admission requirements based on work experience, age and maturity, and admission via Recognition of Prior Learning (RPL). 

    RECOGNISE PREVIOUS LEARNING? 

    QUALIFICATION RULES 
    This qualification is made up of the following compulsory Knowledge and Practical Skill Modules:
    Knowledge Modules:
  • Introduction to Risk Management, NQF Level 5, 5 Credits.
  • Risk Management Enablers, NQF Level 5, 8 Credits.
  • Risk Management Framework: Strategy and Policy, NQF Level 5, 5 Credits.
  • Risk Management Framework: Processes, NQF Level 6, 10 Credits.
    Total number of credits for Knowledge Modules: 28 Credits.

    Practical Skill Modules:
  • Prepare and Facilitate Risk Treatment Plans for a Business Unit., NQF Level 5, 2 Credits.
  • Establish the Internal and External Risk Context, NQF Level 5, 3 Credits.
  • Implement the Framework for Managing Risk, NQF Level 6, 5 Credits.
  • Create and Sustain Risk Management Partnerships, NQF Level 6, 5 Credits.
  • Assessment of Risk, NQF Level 6, 8 Credits.
  • Monitor, Review and Improve Risk Management Activities and Processes., NQF Level 6, 5 Credits.
    Total number of credits for Practical Skill Modules: 28 Credits.

    This qualification also requires the following Work Experience Modules:
  • Contribute to the Implementation of the Risk Management Framework for Managing Risk in the Business Unit, NQF Level 6, 15 Credits.
  • Identify Risk Management Partnerships, NQF Level 6, 10 Credits.
  • Establish the Internal and External Risk Context, NQF Level 5, 10 Credits.
  • Assessment of Risk, NQF Level 6, 16 Credits.
  • Prepare Risk Treatment Plans for a Business Unit, NQF Level 6, 8 Credits.
  • Monitor and, Review Risk Management Activities and Processes, NQF Level 6, 10 Credits.
    Total number of credits for Work Experience Modules: 69 Credits. 

  • EXIT LEVEL OUTCOMES 
    1. Implement the framework for managing risk in the business.
    2. Create and sustain risk management partnerships.
    3. Establish the internal and external risk context.
    4. Assess risk in order to produce and update a risk profile for a business unit.
    5. Prepare and facilitate risk treatment plans for a business unit.
    6. Monitor, review and improve risk management activities and processes. 

    ASSOCIATED ASSESSMENT CRITERIA 
    Associated Assessment Criteria for Exit Level Outcome 1:
  • Risk management frameworks of various business scenarios are interpreted and such interpretations to different business contexts is applied.
  • Within various business scenarios: what is in place, what needs to be done and which process to support the implementation process will be identified.

    Associated Assessment Criteria for Exit Level Outcome 2:
  • An understanding of the criteria for identifying risk management partnerships in various business scenarios is shown.
  • An understanding of the dynamics, challenges and need for support faced by business managers in fulfilling their risk management roles and responsibilities is shown.
  • An understanding about the art of creating rapport and trust in sustaining stakeholders buy-in are shown.

    Associated Assessment Criteria for Exit Level Outcome 3:
  • An understanding of how the internal and external risk contexts influence organisational risk is demonstrated.
  • An understanding of how the internal and external risk contexts influence and impact the business and its risk profile is shown.

    Associated Assessment Criteria for Exit Level Outcome 4:
  • The what-if- and why scenarios are analysed.
  • How to extract and contextualise risk- and control-information is understood.
  • A risk register is compiled and updated.

    Associated Assessment Criteria for Exit Level Outcome 5:
  • The what-if and why scenarios are understood in order for treatment options to be determined.
  • Responsive plans are formulated and shown.

    Associated Assessment Criteria for Exit Level Outcome 6:
  • The what-if and why scenarios are understood in order for in-cycle and out-of-cycle to be monitored and reviewed.
  • What has to be monitored and reviewed (responsiveness) and how to monitor and review (methodology) is shown.

    Integrated Assessment:
    Integrated Formative Assessment:
    The skills development provider will use the curriculum as a guide for the internal assessments (formative) by focussing on the stipulated internal assessment criteria and its weighting of the practical skills, knowledge and work experience modules. This formative assessment will enable a learner access into the integrated external summative assessment.

    Integrated Summative Assessment:
    A relevant QCTO Assessment Quality Partner conducts the external integrated summative assessment and is also responsible for issuing of this qualification. This external integrated summative assessment will focus on the exit level outcomes and associated assessment criteria.
    The external assessment will be a written assessment containing knowledge and skills-related scenarios for the learners to apply their learnt knowledge and skills.

    Qualifying for external assessment:
    In order to qualify for an external assessment, learners must provide proof of completion of all required modules by means of statements of results and work experience. 

  • INTERNATIONAL COMPARABILITY 
    The Occupational Certificate of the Occupational Risk Practitioner can be compared to similar qualifications offered at international institutions. The Institute of Risk Management (IRM) in the United Kingdom (UK), offers a qualification called the International Diploma in Risk Management which provides learners among others, competencies to design and implement risk management strategies; proficiencies in selecting and applying the tools and techniques required to assess and treat risks; a critical understanding of the influence of organisational culture, attitudes and appetite for risk as well as a critical understanding of the relationships between risk management, governance, internal control and compliance.

    IRM Modules:
    Module 1 (Dip): Risk assessment:
  • A thorough examination of the various types of risk information and the techniques for identifying and evaluating risks, including basic quantitative methods; communicating risk information through registers and matrixes; issues of risk and uncertainty.

    Module 2 (Dip): Risk treatment:
  • Detailed consideration of the variety of approaches to dealing with opportunities and treating threats, including physical controls, management systems and financial strategies; an introduction to business continuity planning.

    Module 3 (Dip): Risk, governance and culture:
  • A comprehensive exploration of corporate governance, internal control and compliance issues, internationally; the role of the board and key stakeholders; creating a risk management strategic plan; organisational and human behaviour; the psychology of risk including risk perception; reputation risk management; risk management skills, competencies and training of staff; monitoring and improving performance.

    Module 4 (Dip): Crises, resilience and future risks:
  • A detailed examination of crises and their management, utilising case studies across various sectors and types of risk; underlying factors involved in a crisis; learning lessons from the past; building resilience for the future; using tools to identify emerging risks and predict future events, their impact and mitigation strategies; impact of globalisation on risk.

    The Risk Management Association rebranded under the name RMA University is based in Philadelphia which offers a qualification called Introduction to Operational Risk for Regional and Community Bankers. This qualification focuses on key aspects of operational risk; what are operational risks; the importance of this sector; why one needs to control it and the techniques that can be used to control it. Furthermore, it focuses on the regulatory framework and the practical approaches to use to manage operational risk in a regional or community ban setting.

    This qualification will appeal to the following:
  • Members of the financial services industry who have experience in credit or market risk and who need a basic understanding of operational risk.
    > Individuals charged with understanding operational risk management and developing an approach for their institution, including:
    > Members of the risk management staff who are new to the discipline.
    > Business unit managers.
    > Auditors.
    > General controllers.
    > Compliance officers.
    > Information security/business continuity professionals.
    > Regulators.
    The purpose of the qualification is to:
  • Examine and evaluate broad categories of operational risk.
  • Understand the current Basel II proposals.
  • Explore organisational issues relating to setting up and operating an effective operational risk function.

    Conclusion:
    The qualifications being developed for Risk Management has been compared against the following leading risk management qualifications at international institutions such as:
  • The Institute of Risk Management (IRM) in the UK (IRM UK).
  • Risk Management Association rebranded under the name RMA University is based in Philadelphia.
    The Risk Practitioner qualification compares favourably with those from international institutions in terms of the content. However this qualification surpasses our international counterparts in terms of the offering practical skill and work experience modules. 

  • ARTICULATION OPTIONS 
    This qualification offers both horizontal and vertical articulation possibilities:

    Horizontally with:
  • Diploma in Assessment and Management at NQF Level 6.
  • Diploma in Risk Assessment and Management at NQF Level 6.

    Vertically with:
  • Bachelor of Commerce in Risk Management at NQF Level 7. 

  • MODERATION OPTIONS 
    N/A 

    CRITERIA FOR THE REGISTRATION OF ASSESSORS 
    N/A 

    REREGISTRATION HISTORY 
    As per the SAQA Board decision/s at that time, this qualification was Reregistered in 2015. 

    NOTES 
    Foundational learning:
    Not Applicable

    Additional legal or physical entry requirements:
  • None.

    Criteria for the accreditation of providers:
    Accreditation of providers will be done against the criteria as reflected in the relevant curriculum on the QCTO website.

    The curriculum title and code is: Organisational Risk Manager (Risk Practitioner): 242208002.

    This qualification covers the following trades as recorded on the NLRD:
  • None.

    Part Qualifications:
  • None. 

  • LEARNING PROGRAMMES RECORDED AGAINST THIS QUALIFICATION: 
     
    NONE 


    PROVIDERS CURRENTLY ACCREDITED TO OFFER THIS QUALIFICATION: 
    This information shows the current accreditations (i.e. those not past their accreditation end dates), and is the most complete record available to SAQA as of today. Some Primary or Delegated Quality Assurance Functionaries have a lag in their recording systems for provider accreditation, in turn leading to a lag in notifying SAQA of all the providers that they have accredited to offer qualifications and unit standards, as well as any extensions to accreditation end dates. The relevant Primary or Delegated Quality Assurance Functionary should be notified if a record appears to be missing from here.
     
    NONE 



    All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.