A University ICT Disaster Recovery Plan will be maintained to ensure the continuity of ICT systems availability and protection of data in the of an unwanted event. 6.3 Compliance The University has an effective system to ensure the University is aware of and in compliance with legislative, contractual and policy requirements. 7 Training & Communication The University has clarified roles, responsibilities accountabilities and authorities at all levels of the University. The University Risk Management Framework is embedded in operations through a number of communication, training and support systems, including: 7.1 Training To ensure that adequate risk management competency levels are achieved and maintained, the University provides regular training courses in the risk management process and its application in the University. Specific risk management training sessions will be held on an annual basis, aimed at providing an overview of the Risk Management Framework. The training will be facilitated by the Risk Administrator. Additional ad-hoc training will be provided as required. Instruments providing training on appropriate controls include job descriptions, inductions, policies, procedures, terms of reference, charters, performance planning and review programs, contracts and delegations. 7.2 Communication of responsibilities and Accountabilities Risk management responsibilities, accountabilities and authorities are set out in: The Risk Management Policy; Positions descriptions; Delegations the University’s intranet; Project documentation; Performance planning and review documentation; and Risk registers. 7.3 Advice and Support Risk management responsibilities, accountabilities and authorities are also available on the University’s intranet. Advice and support in relation to risk management is available by consulting; The Risk Administrator; Vice President (Corporate Services); and University’s Risk Management Framework document.
A University ICT Disaster Recovery Plan will be maintained to ensure the continuity of ICT systems availability and protection of data in the of an unwanted event. 6.3 Compliance The University has an effective system to ensure the University is aware of and in compliance with legislative, contractual and policy requirements. 7 Training & Communication The University has clarified roles, responsibilities accountabilities and authorities at all levels of the University. The University Risk Management Framework is embedded in operations through a number of communication, training and support systems, including: 7.1 Training To ensure that adequate risk management competency levels are achieved and maintained, the University provides regular training courses in the risk management process and its application in the University. Specific risk management training sessions will be held on an annual basis, aimed at providing an overview of the Risk Management Framework. The training will be facilitated by the Risk Administrator. Additional ad-hoc training will be provided as required. Instruments providing training on appropriate controls include job descriptions, inductions, policies, procedures, terms of reference, charters, performance planning and review programs, contracts and delegations. 7.2 Communication of responsibilities and Accountabilities Risk management responsibilities, accountabilities and authorities are set out in: The Risk Management Policy; Positions descriptions; Delegations the University’s intranet; Project documentation; Performance planning and review documentation; and Risk registers. 7.3 Advice and Support Risk management responsibilities, accountabilities and authorities are also available on the University’s intranet. Advice and support in relation to risk management is available by consulting; The Risk Administrator; Vice President (Corporate Services); and University’s Risk Management Framework document.