Making Project Assurance Work
A talk by Roy Millard, APM Assurance SIG
13th July 2023
Aim of my talk…
© 2022 Association for Project Management 3
• What is it, and why do we have it?
• Definitions
• Perceptions
• Who does what to who, and for whom?
• Providers & receivers
• How should we organise it?
• Just another element of P3M
• Integrated Assurance
• How do we get good at it?
• Dimensions & principles
• Why does it go wrong?
• Heathrow T5
• LU Signalling Contract
• Crossrail
• How do we get the best value?
• What’s the future for Project
Assurance?
• Professionalising
• Use of data / AI
“To improve understanding of Project Assurance”
effective
^
What is Project Assurance?
© 2022 Association for Project Management 4
Who is asking?
What is Project Assurance?
Assurance n. Emphatic declaration, guarantee; self-confidence, assertiveness; insurance esp. of life; certainty.
(Source: The Pocket Oxford Dictionary.)
Assurance
• noun
1. the act of assuring
2. the state of being assured; sureness; confidence; certainty
3. something said or done to inspire confidence, as a promise, positive statement, etc.; guarantee
(Source: www.yourdictionary.com)
Assurance:
“The process of providing confidence to stakeholders that projects, programmes and portfolios will achieve
their objectives for beneficial change.” [APM BoK7]
Definitions
Who does what to who, and for whom?
© 2022 Association for Project Management 6
Providers
Internal Audit
External
Audit
Quality
Assurance
Health &
Safety
IPA Reviews
(Prev OGC GatewayTM)
Independent
Engineer
reviews
PMO/PMCoE
Control Self
Assurance
NAO
Policies
Standards
Processes
Systems
Project
Audits
Contract
Audits
Peer Reviews
Continuous
Assurance
Progressive
Assurance
Information
Assurance
P-Rep
Security
Audits
Data
Compliance
Who does what to who, and for whom?
© 2022 Association for Project Management 7
Customers
Audit
Committees
Sponsors
Project Boards / SROs
Programme Boards
Governing Bodies Shareholders
Investors
Public &
media
Central
Government
Investment
Committees
Organising Project Assurance
• P3M Training & qualifications:
• PRINCE2
• MSP
• Building trust through assurance (APM Learning module)
• Assurance SIG publications:
• Guide to Integrated Assurance
• Measures for Assuring Projects
• A Guide to Auditing Projects & Programmes
• A Guide to Assurance of Agile Delivery
• APM BoK7
• Assurance training:
• ‘Assurance for PMO Professionals’, PMO Learning
• ‘Project Assurance Practitioner’, Wellingtone
© 2022 Association for Project Management 8
Just another element of P3M
Organising Project Assurance
© 2022 Association for Project Management 9
Relationships with Governance and Risk Management
Governance
Boards
Organisational structure
Roles & responsibilities
Processes, procedures, standards, etc.
Delegated authorities
Standing orders
Risk Committee
Strategic risks
Operational risks
Project [aka Investment] risk
Enterprise risk arrangements
Risk appetite
Audit Committee
Internal audit
Quality Assurance
HSES Assurance
Commercial Assurance
Project Assurance
© Roy Millard, P3RA
The GRA Trilogy
The ‘other’ project
management ‘Iron Triangle’
Organising Project Assurance
© 2022 Association for Project Management 10
Taking an integrated approach
Dimensions of Assurance
Three Lines [of Defence] Model
Assurance Mapping
Organising Project Assurance
© 2022 Association for Project Management 11
Principles of good assurance
With all this Assurance around, why do projects still keep going wrong?
Some examples:
• Heathrow T5
• London Underground Signalling Contract
• Crossrail
Two systemic reasons:
• Weak 2nd line Assurance
• Behaviours (deliberate & unintentional)
© 2022 Association for Project Management 12
Delivering value from Assurance
© 2022 Association for Project Management 13
Assurance
adding
value
Best value
Assurance
Value
of
Assurance
Portfolio Level Project Level
Programme Level
‘Doing projects right’
• Link to governance:
➢ Supports decision-making
➢ Mechanism for stopping projects
➢ Catalyst for change
• Link to risk management
➢ Confidence that risks are under control
➢ Early identification when they are not
➢ Spotting the unspotted
➢ Mechanism for identifying opportunities
• Link to corporate assurance
➢ Confidence in meeting business priorities
• Manage the outputs:
➢ Terminology / language / being meaningful
➢ Visibility at the right levels and the right places
➢ Timeliness
• Business partners
• Proportionality
• Don’t be expensive
• Use for Stakeholder Communications
• Custodian of corporate knowledge
• Good relationships & communications
• Skilled & knowledgeable Assurance staff
• Positive actions taken
• Close link to project lifecycle
• Assurance an intrinsic part of P3M
• Integrated Assurance
• Use of data and AI (Predictive
assurance)
‘Doing the right projects’
Maximising organisational benefit
Getting best value
Delivering value from Assurance
© 2022 Association for Project Management 14
Value drivers
Remove
Delivery
Cost
Increase
Delivery
Speed
Avoid
Business
Risk
Reduce
Business
Cost
Maintain
Business
Value
Increase
Business
Value
Accelerate
Benefit
Delivery
© 2019 Lloyds Banking Group plc and its subsidiaries
Example 1: Lloyds Banking Group Example 2: Network Rail
1. Does it provide early identification of project
/ programme issues?
2. Does it support successful delivery of
projects and programmes
(cost/duration/benefits)?
3. Does it target the most critical / complex /
high reputation?
4. Is it proportionate and affordable (cost and
input)?
5. Are the outputs aligned with key
stakeholders – duplication and sharing of
intelligence?
6. Is the activity and output trustworthy?
© T Robins, Network Rail
Professionalising Project Assurance
© 2022 Association for Project Management 15
The problem of functional fit
Professionalising Project Assurance
© 2022 Association for Project Management 16
What makes a profession?
Main components
Standards
Competence
Training
Body of Knowledge
Qualifications
Professional body
Other aspects
Measuring effectiveness/value
Knowledge management
Professionalising Project Assurance
© 2022 Association for Project Management 17
Components of a Profession Status for Project Assurance
Standards Various guidance available, e.g. APM
Some UK & international standards refer to Project Assurance
Discussions with BS ongoing for stand-alone standard for Project Assurance
Competence Some organisations (e.g. NDA) have developed their own
House of PMO Competency Framework (Competence 19 – Assurance)
Early stages of developing guidance on implementing APM Competence Framework for Project
Assurance roles
Training ‘Assurance for PMO Professionals’, PMO Learning (www.pmolearning.co.uk)
‘Project Assurance Practitioner’, Wellingtone
Body of Knowledge Initial version in development (Governance, Risk & Assurance in Projects, Programmes & Portfolios LinkedIn group)
Qualifications TBA
Professional body TBA (do we need one?)
Further Help and Support
• Discussion & collaboration:
• P3RA: https://www.p3ra.co.uk/forum (New!)
• APM Community: https://community.apm.org.uk/topics/28687/feed
• LinkedIn: Governance, Risk & Assurance In Projects, Programmes & Portfolios LinkedIn group
• Current practice and guidance:
• APM Assurance SIG: https://www.apm.org.uk/community/assurance-sig/
• Contacts:
• LinkedIn: https://www.linkedin.com/in/roy-millard-9545852/
• Email: roymillard@p3ra.co.uk
• Mentoring, coaching and advisory
• P3 Risk & Assurance: https://www.p3ra.co.uk/
© 2022 Association for Project Management 18

Making Project Assurance Work presentation.pdf

  • 1.
    Making Project AssuranceWork A talk by Roy Millard, APM Assurance SIG 13th July 2023
  • 3.
    Aim of mytalk… © 2022 Association for Project Management 3 • What is it, and why do we have it? • Definitions • Perceptions • Who does what to who, and for whom? • Providers & receivers • How should we organise it? • Just another element of P3M • Integrated Assurance • How do we get good at it? • Dimensions & principles • Why does it go wrong? • Heathrow T5 • LU Signalling Contract • Crossrail • How do we get the best value? • What’s the future for Project Assurance? • Professionalising • Use of data / AI “To improve understanding of Project Assurance” effective ^
  • 4.
    What is ProjectAssurance? © 2022 Association for Project Management 4 Who is asking?
  • 5.
    What is ProjectAssurance? Assurance n. Emphatic declaration, guarantee; self-confidence, assertiveness; insurance esp. of life; certainty. (Source: The Pocket Oxford Dictionary.) Assurance • noun 1. the act of assuring 2. the state of being assured; sureness; confidence; certainty 3. something said or done to inspire confidence, as a promise, positive statement, etc.; guarantee (Source: www.yourdictionary.com) Assurance: “The process of providing confidence to stakeholders that projects, programmes and portfolios will achieve their objectives for beneficial change.” [APM BoK7] Definitions
  • 6.
    Who does whatto who, and for whom? © 2022 Association for Project Management 6 Providers Internal Audit External Audit Quality Assurance Health & Safety IPA Reviews (Prev OGC GatewayTM) Independent Engineer reviews PMO/PMCoE Control Self Assurance NAO Policies Standards Processes Systems Project Audits Contract Audits Peer Reviews Continuous Assurance Progressive Assurance Information Assurance P-Rep Security Audits Data Compliance
  • 7.
    Who does whatto who, and for whom? © 2022 Association for Project Management 7 Customers Audit Committees Sponsors Project Boards / SROs Programme Boards Governing Bodies Shareholders Investors Public & media Central Government Investment Committees
  • 8.
    Organising Project Assurance •P3M Training & qualifications: • PRINCE2 • MSP • Building trust through assurance (APM Learning module) • Assurance SIG publications: • Guide to Integrated Assurance • Measures for Assuring Projects • A Guide to Auditing Projects & Programmes • A Guide to Assurance of Agile Delivery • APM BoK7 • Assurance training: • ‘Assurance for PMO Professionals’, PMO Learning • ‘Project Assurance Practitioner’, Wellingtone © 2022 Association for Project Management 8 Just another element of P3M
  • 9.
    Organising Project Assurance ©2022 Association for Project Management 9 Relationships with Governance and Risk Management Governance Boards Organisational structure Roles & responsibilities Processes, procedures, standards, etc. Delegated authorities Standing orders Risk Committee Strategic risks Operational risks Project [aka Investment] risk Enterprise risk arrangements Risk appetite Audit Committee Internal audit Quality Assurance HSES Assurance Commercial Assurance Project Assurance © Roy Millard, P3RA The GRA Trilogy The ‘other’ project management ‘Iron Triangle’
  • 10.
    Organising Project Assurance ©2022 Association for Project Management 10 Taking an integrated approach Dimensions of Assurance Three Lines [of Defence] Model Assurance Mapping
  • 11.
    Organising Project Assurance ©2022 Association for Project Management 11 Principles of good assurance
  • 12.
    With all thisAssurance around, why do projects still keep going wrong? Some examples: • Heathrow T5 • London Underground Signalling Contract • Crossrail Two systemic reasons: • Weak 2nd line Assurance • Behaviours (deliberate & unintentional) © 2022 Association for Project Management 12
  • 13.
    Delivering value fromAssurance © 2022 Association for Project Management 13 Assurance adding value Best value Assurance Value of Assurance Portfolio Level Project Level Programme Level ‘Doing projects right’ • Link to governance: ➢ Supports decision-making ➢ Mechanism for stopping projects ➢ Catalyst for change • Link to risk management ➢ Confidence that risks are under control ➢ Early identification when they are not ➢ Spotting the unspotted ➢ Mechanism for identifying opportunities • Link to corporate assurance ➢ Confidence in meeting business priorities • Manage the outputs: ➢ Terminology / language / being meaningful ➢ Visibility at the right levels and the right places ➢ Timeliness • Business partners • Proportionality • Don’t be expensive • Use for Stakeholder Communications • Custodian of corporate knowledge • Good relationships & communications • Skilled & knowledgeable Assurance staff • Positive actions taken • Close link to project lifecycle • Assurance an intrinsic part of P3M • Integrated Assurance • Use of data and AI (Predictive assurance) ‘Doing the right projects’ Maximising organisational benefit Getting best value
  • 14.
    Delivering value fromAssurance © 2022 Association for Project Management 14 Value drivers Remove Delivery Cost Increase Delivery Speed Avoid Business Risk Reduce Business Cost Maintain Business Value Increase Business Value Accelerate Benefit Delivery © 2019 Lloyds Banking Group plc and its subsidiaries Example 1: Lloyds Banking Group Example 2: Network Rail 1. Does it provide early identification of project / programme issues? 2. Does it support successful delivery of projects and programmes (cost/duration/benefits)? 3. Does it target the most critical / complex / high reputation? 4. Is it proportionate and affordable (cost and input)? 5. Are the outputs aligned with key stakeholders – duplication and sharing of intelligence? 6. Is the activity and output trustworthy? © T Robins, Network Rail
  • 15.
    Professionalising Project Assurance ©2022 Association for Project Management 15 The problem of functional fit
  • 16.
    Professionalising Project Assurance ©2022 Association for Project Management 16 What makes a profession? Main components Standards Competence Training Body of Knowledge Qualifications Professional body Other aspects Measuring effectiveness/value Knowledge management
  • 17.
    Professionalising Project Assurance ©2022 Association for Project Management 17 Components of a Profession Status for Project Assurance Standards Various guidance available, e.g. APM Some UK & international standards refer to Project Assurance Discussions with BS ongoing for stand-alone standard for Project Assurance Competence Some organisations (e.g. NDA) have developed their own House of PMO Competency Framework (Competence 19 – Assurance) Early stages of developing guidance on implementing APM Competence Framework for Project Assurance roles Training ‘Assurance for PMO Professionals’, PMO Learning (www.pmolearning.co.uk) ‘Project Assurance Practitioner’, Wellingtone Body of Knowledge Initial version in development (Governance, Risk & Assurance in Projects, Programmes & Portfolios LinkedIn group) Qualifications TBA Professional body TBA (do we need one?)
  • 18.
    Further Help andSupport • Discussion & collaboration: • P3RA: https://www.p3ra.co.uk/forum (New!) • APM Community: https://community.apm.org.uk/topics/28687/feed • LinkedIn: Governance, Risk & Assurance In Projects, Programmes & Portfolios LinkedIn group • Current practice and guidance: • APM Assurance SIG: https://www.apm.org.uk/community/assurance-sig/ • Contacts: • LinkedIn: https://www.linkedin.com/in/roy-millard-9545852/ • Email: roymillard@p3ra.co.uk • Mentoring, coaching and advisory • P3 Risk & Assurance: https://www.p3ra.co.uk/ © 2022 Association for Project Management 18