SAQA All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.
SOUTH AFRICAN QUALIFICATIONS AUTHORITY 
REGISTERED QUALIFICATION: 

Occupational Certificate: Organisational Risk Manager 
SAQA QUAL ID QUALIFICATION TITLE
97387  Occupational Certificate: Organisational Risk Manager 
ORIGINATOR
Development Quality Partner - BANKSETA 
PRIMARY OR DELEGATED QUALITY ASSURANCE FUNCTIONARY NQF SUB-FRAMEWORK
-   OQSF - Occupational Qualifications Sub-framework 
QUALIFICATION TYPE FIELD SUBFIELD
Occupational Certificate  Field 03 - Business, Commerce and Management Studies  Generic Management 
ABET BAND MINIMUM CREDITS PRE-2009 NQF LEVEL NQF LEVEL QUAL CLASS
Undefined  265  Not Applicable  NQF Level 08  Regular-ELOAC 
REGISTRATION STATUS SAQA DECISION NUMBER REGISTRATION START DATE REGISTRATION END DATE
Reregistered  EXCO 0425/24  2018-07-01  2025-12-30 
LAST DATE FOR ENROLMENT LAST DATE FOR ACHIEVEMENT
2026-12-30   2029-12-30  

In all of the tables in this document, both the pre-2009 NQF Level and the NQF Level is shown. In the text (purpose statements, qualification rules, etc), any references to NQF Levels are to the pre-2009 levels unless specifically stated otherwise.  

This qualification does not replace any other qualification and is not replaced by any other qualification. 

PURPOSE AND RATIONALE OF THE QUALIFICATION 
Purpose:
The purpose of this qualification is to prepare a learner to operate as an Organisational Risk Officer. The responsibility of an Organisational Risk Officer is to plan, organise, direct and control activities relating to risk management in order to guide the organisation in achieving its objectives.
A qualified learner will be able to:
  • Obtain risk management mandate and commitment.
  • Develop a risk management framework, strategy and protocol.
  • Implement the framework, strategy and protocols for managing risk.
  • Institutionalise and facilitate the embedding of risk management.
  • Monitor and evaluate the effectiveness and efficiency of the risk management framework and embedded practices.
  • Continually improve the risk management framework, strategy, protocols and processes.

    Rationale:
    Management of risk is a key issue for all organisations hence, Risk Management is a growing discipline coupled with increasing Governance and Compliance requirements in South Africa as highlighted in the King III report and entrenched with legislative and regulatory prescripts. Organisations also need to be achieving their objectives more efficiently and managing their risks proactively to protect the sustainability of their organisation. This qualification is aimed at providing the labour market with competent Risk Officers to address the ever increasing need for practitioners that could guide industry on matters related to risk management.

    Various Risk Management codes and guidelines exist which strive to guide organisations in the design, implementation and maintenance of risk management processes that are consistent and value adding throughout all levels of an organisation. The South African Risk Management fraternity, as represented by IRMSA, has standardised on ISO 31000. To achieve this, it is imperative that organisations have access to adequate risk management skills which include theoretical knowledge that has been practically applied.
    The Risk Officer Qualification is required to equip learners with the theoretical knowledge of Risk Management, based on best practice as well as the skills for design, implementation and embedding of risk management. The skills will be developed in practice and through work experience and enable the learner to add value in an organisation through the consistent implementation of risk management and grow as a contributor and leader in the discipline of risk management at a higher level within the organisation. The qualification will also enhance the development of Risk Officers into roles of leadership in risk management.

    The Risk Officer is responsible to manage all processes of the Risk Framework as prescribed by ISO 31000 by ensuring the underpinning principles are entrenched and supporting processes developed and sustained. 
    		•

    LEARNING ASSUMED TO BE IN PLACE AND RECOGNITION OF PRIOR LEARNING 
    Recognition of Prior Learning (RPL):
    RPL for access to the external integrated summative assessment:
    Accredited providers and approved workplaces must apply the internal assessment criteria specified in the related curriculum document to establish and confirm prior learning. Accredited providers and workplaces must confirm prior learning by issuing a statement of result or certifying a work experience record.

    Recognition of Prior Learning (RPL) for access to the qualification:
    Accredited providers and approved workplaces may recognise prior learning against the relevant access requirements.

    Entry Requirements:
    The access to this qualification is granted to applicants with:
  • A NQF Level 6 qualification.
    Or
  • 5 years experience in risk management. 
    		•

    RECOGNISE PREVIOUS LEARNING? 
    Y 

    QUALIFICATION RULES 
    This qualification is consists of the following compulsory Knowledge and Practical Skill Modules:
    Knowledge Modules:
  • 242208003-KM-01, Principles of defining and understanding the business context, at NQF Level 6, 5 Credits.
  • 242208003-KM-02, Principles and theories of Governance, at NQF Level 7, 10 Credits.
  • 242208003-KM-03, Legislative and regulatory framework underpinning risk management, at NQF Level 5, 5 Credits.
  • 242208003-KM-04, Principles and theory of risk management, at NQF Level 7, 20 Credits.
  • 242208003-KM-05, Principles of developing a risk management framework, at NQF Level 8, 15 Credits.
  • 242208003-KM-06, Implementing risk management, at NQF Level 7, 10 Credits.
  • 242208003-KM-07, Risk management review, evaluation and improvement, at NQF Level 7, 10 Credits.
  • 242208003-KM-08, Theory of business management applied in risk management, at NQF Level 7, 10 Credits.
    Total number of Credits for Knowledge Modules: 85.

    Practical Skill Modules:
  • 242208003-PM-01, Define risk management function and confirm commitment in the organisation, at NQF Level 8, 10 Credits.
  • 242208003-PM-02, Develop a risk management framework, strategy and protocol, at NQF Level 8, 15 Credits.
  • 242208003-PM-03, Develop and execute a risk management process, at NQF Level 7, 20 Credits.
  • 242208003-PM-04, Institutionalise and facilitate the embedding of risk management, at NQF Level 7, 10 Credits.
  • 242208003-PM-05, Monitor and evaluate risk management of an organisation, at NQF Level 7, 25 Credits.
  • 242208003-PM-06, Improve risk management continuously, at NQF Level 8, 10 Credits.
    Total number of Credits for Practical Skill Modules: 90.

    This qualification also requires the following Work Experience Modules:
  • 242208003-WM-01, Prepare and propose risk management mandate with the aim of garnering management commitment for risk management, at NQF Level 8, 10 Credits.
  • 242208003-WM-02, Develop a risk management framework's strategy, policies and protocols, at NQF Level 8, 15 Credits.
  • 242208003-WM-03, Implement and execute the risk management process (stemming from strategy, policies and protocols), at NQF Level 7, 20 Credits.
  • 242208003-WM-04, Facilitate the embedding of risk management, at NQF Level 7, 10 Credits.
  • 242208003-WM-05, Monitor and evaluate risk management of an organisation, at NQF Level 7, 25 Credits.
  • 242208003-WM-06, Improve risk management continuously, at NQF Level 7, 10 Credits.
    Total number of Credits for Work Experience Modules: 90. 
    		•

    EXIT LEVEL OUTCOMES 
    1. Develop the proficiency to institutionalise and facilitate the embedding principles of risk management.
    2. Develop the competencies required to design and implement risk management framework, strategy and protocol.
    3. Monitor and evaluate the effectiveness and efficiency of the risk management framework and embedded practices. 

    ASSOCIATED ASSESSMENT CRITERIA 
    Associated Assessment Criteria for Exit Level Outcome 1:
  • Asset management strategies are developed.
  • Advantages and disadvantages of each asset management strategy are evaluated.
  • Strategies to make asset management recommendations are optimised.
  • Action steps to assist in implementing asset management recommendations are prioritised.
  • The principal terminology and concepts relating to risk management within organisation are identified and applied.
  • The main types of risks faced by organisations are identified.
  • The processes required for identifying and managing risks is explained.

    Associated Assessment Criteria for Exit Level Outcome 2:
  • Risk management framework, strategy and protocol are discussed and developed.
  • Challenges understood to be aligned to risk management within the business of an organisation are identified.
  • Knowledge of current information, theories and models, and techniques and practices in all of the major business disciplines is demonstrated.
  • Tools to complete basic risk assessment are designed.
  • Knowledge of controls that can be put into place to mitigate risks is demonstrated.
  • Risk Management culture is created and promoted within the Organisation.

    Associated Assessment Criteria for Exit Level Outcome 3:
  • Knowledge of the key areas of monitoring, reporting, and assessment of a risk management program is applied.
  • Risk management context in a business environment is established.
  • Best practices in Risk Management are identified and applied.
  • Knowledge on how to set risk tolerance levels is applied.
  • Risk Management processes are integrated into the daily operations of the Organisation.
  • The ability to identify any deficiencies and provide appropriate remedial action is demonstrated.

    Integrated Assessment:
    Integrated Formative Assessment:
    The skills development provider will use the curriculum to guide them on the stipulated internal assessment criteria and weighting. They will also apply the scope of practical skills and applied knowledge as stipulated by the internal assessment criteria. This formative assessment leads to entrance into the integrated external summative assessment.

    Integrated Summative Assessment:
    An external integrated summative assessment, conducted through the relevant QCTO Assessment Quality partner is required for the issuing of this qualification. The external integrated summative assessment will focus on the exit level outcomes and associated assessment criteria.
    The external assessment will be conducted by means of a written assessment providing the learner with a number of scenarios in which knowledge and related skills need to be applied in an integrated manner.
    The assessment process should focus on the learner's ability to integrate the principles of risk management with strategic, operational and tactical business' processes to add value to the long term sustainability of the business. 
    		•

    INTERNATIONAL COMPARABILITY 
    This qualification is comparable with the following international qualifications in terms of the duration, level and module competencies the learner is to master.

    Swinburne University of Technology in Australia offers a Graduate Certificate of Business Management (Risk Management) which is designed to meet the demand from business for managers with a greater awareness of factors posing a risk to the financial position and reputation of an organisation. Learners acquire an understanding of the types of risk present across an organisation and how to manage those risks. They also explore the concepts of corporate governance, compliance, control and reporting within the context of managing risk.

    Governance Institute of Australia offers a Graduate Diploma of Applied Risk Management and Corporate Governance focusing in the risk and corporate governance education market. This accredited postgraduate diploma gives the learner hands-on knowledge, drawing from real-life cases and practical examples, to position the qualifying learner as organisation's greatest asset for driving responsible risk and corporate governance performance. This qualification equips learners with knowledge about the important role risk management plays in effective governance today.

    The qualification is ideal for risk management practitioners and senior managers with responsibility for risk management and corporate governance functions. It is also highly relevant for governance practitioners seeking to broaden their risk management skills. Modules are listed in the recommended study order. However, Risk Management Project cannot be attempted until the other three risk modules have been successfully completed.
    Compulsory modules:
  • Advanced Risk Management.
  • Risk and Compliance.
  • Risk Management in Practice.
  • Risk Management Project.

    Optional modules:
  • Applied Corporate Law.
  • Public Law and Government.
  • Corporate Accountability: Meetings and Disclosure.
  • Public Sector Accountability and Transparency.
  • Corporate Governance.

    University of Leicester in London offers a Post graduate qualification in Security and Risk Management. The qualification allows learners to develop detailed knowledge of crime, risk and managing security in organisations. Learners develop an understanding of a range of theoretical models that explains why and how people commit crime, how to analyse and assess risk, and how to manage security. They also learn how to design, conduct and critically appraise research within these areas. The course is of immense professional value to those working within a security context, either in the private or public sector.

    Conclusion:
    The purpose, module content, the degree of complexity and the notional learning time of this qualification compares favourably with the international offerings. 
    		•

    ARTICULATION OPTIONS 
    This qualification offers both horizontal and vertical articulation possibilities for the qualifying learner. Qualifications in the Higher Education Sub-framework will require learners to achieve competency on the research component.

    Horizontal Articulation:
  • A Postgraduate Diploma in Risk Management at NQF Level 8.

    Vertically Articulation can be achieved provided that the admission requirements of the relevant institution are met:
  • A Master of Commerce in Business Management at NQF Level 9.
    Or
  • A Master of Commerce in Banking and Financial Risk Management at NQF Level 9.

    This qualification will enable articulation to designations within the field of organisational risk management as determined by the Professional Body. 
    		•

    MODERATION OPTIONS 
    N/A 

    CRITERIA FOR THE REGISTRATION OF ASSESSORS 
    N/A 

    NOTES 
    Qualifying for external assessment:
    In order to qualify for an external assessment, learners must provide proof of completion of all required modules by means of statements of results and work experience.

    Foundational learning:
    None.

    Additional legal or physical entry requirements:
    None.

    Criteria for the accreditation of providers:
    Accreditation of providers to provide this qualification will be done against the criteria as reflected in the relevant curriculum on the QCTO website.
    The curriculum title and code is: Organisational Risk Manager (Organisational Risk Officer): 242208003.

    Trades covered by this Qualification:
    This qualification covers the following trades as recorded on the NLRD:
    None.

    Part Qualifications:
    N/A. 

    LEARNING PROGRAMMES RECORDED AGAINST THIS QUALIFICATION: 
     
    NONE 


    PROVIDERS CURRENTLY ACCREDITED TO OFFER THIS QUALIFICATION: 
    This information shows the current accreditations (i.e. those not past their accreditation end dates), and is the most complete record available to SAQA as of today. Some Primary or Delegated Quality Assurance Functionaries have a lag in their recording systems for provider accreditation, in turn leading to a lag in notifying SAQA of all the providers that they have accredited to offer qualifications and unit standards, as well as any extensions to accreditation end dates. The relevant Primary or Delegated Quality Assurance Functionary should be notified if a record appears to be missing from here.
     
    NONE 


    All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.