
How an audit differs from analytics and from a compliance check
Five mistakes that turn it into a useless exercise
Three levels: compliance, best practice, strategic alignment
Express scoring: diagnosing maturity in ten minutes
Thirteen sections, the logic of the weights, and the final index
A demonstration on a two-hundred-person company
Four data collection methods: documents, interviews, observation, systems
Getting through 729 items in three days, and turning the result into a report
Where the audit sits in the annual cycle: full, focused, continuous
The RACI matrix: who runs it, who supplies data, who implements
Fifteen metrics with formulas and benchmarks
Five typical objections with answers, and the roadmap
How decisions get made under uncertainty
What the last global financial crisis demonstrated
What human risks actually are
The current research on them
The risk heat map
The fraud triangle and the safety triangle
The people-risk model
The risk triangle, applied to a real situation
How decisions actually get made
Cognitive biases that show up in risk assessment
Conflict of interest, and why it is rarely declared
Examples of human risk in practice
The 4I model, and incidents
Risks at the level of one person, and risks at the level of the company
Industry-specific risks
ISO 31000 as the standard, and the risk hierarchy
Internal against external risk
Finding and assessing risks
Eliminating, reducing, and escalating them
Management maturity
Dynamics inside a leadership team
The role of the chief executive
The warning signs that precede an event
The cultural context risk sits inside
Building a risk culture rather than a risk policy
Company values, and trust
The three lines of defence model
Who owns what at each line
Reducing risk through the structure itself
Making the invisible visible
Improving the decision process itself
A decision-making checklist
The code of conduct, and what it is for
The job description as a risk instrument
Where accountability actually lands when something happens
What succession planning is, and its link to strategy
The risks that exist specifically because there is no plan
Cases that worked and cases that did not
Modelling replacement scenarios for a key role with AI
Criteria for selecting key roles
The impact and risk matrix
Competency models and role profiles
Functions with a high risk of departure
The nine-box grid: potential against performance
Interviews, 360 assessment, review, assessment centre
Tools that predict leadership potential
Fairness, transparency, and managing expectations
Individual development plans
Rotations, mentoring, shadowing and projects
Leadership development
Personalised learning paths built for a specific succession goal
Inclusion principles in succession
Communicating with managers and with candidates
Transparency against confidentiality, and where the line sits
The mistakes that derail implementation
Metrics and bench strength
Integrating succession with review and development
Auditing and revising the plans
Dashboards, forecasts and early warning signals
What workforce planning is, and what it solves
Headcount as both a capability and one of the largest cost lines
Employment types, segmentation, and the full-time-equivalent concept
Gap analysis, and understanding the external labour market
Analysing turnover and retirements
Career transition analysis
Extrapolation, interpolation, Delphi and the nominal group method
The competency matrix for a team
Designing the position itself
Job analysis and workload analysis
Segmentation, and calculating the value of a role
Combining functions and eliminating duplication
Process automation
Internal part-time, project work and matrix structures
Optimising the underlying processes rather than the headcount
Implementing a performance system
Competence management
Using development to raise capacity rather than adding people
The 7B model
Cost-benefit analysis of a headcount decision
Employer brand and the value proposition
Engagement, and total rewards
What a crisis does to every process at once
Recruiting under uncertainty
Attracting people to a company that visibly has problems
Hiring below market rate, and handling negative public feedback
Methods of reducing payroll, in order of damage
Retaining people without revising salaries
Bonuses funded from the value the person creates
Reducing benefits least painfully, and adding them with no budget
A fair policy when there is nothing to spend
Internal training, a corporate library, and mentoring
Building a development plan without money
This course contains the use of artificial intelligence.
Continuity plans are almost always written about the building. What happens if the power fails, if the warehouse burns, if the server goes down.
Companies do not usually lose a building. They lose a person
And not in a fire — on an ordinary Tuesday, to a competitor, with two weeks' notice. What follows is the same sequence every time. The process that person ran turns out to be documented nowhere, because they were the documentation. Nobody can take it over, because a bench was never built for a role nobody classified as critical. And the people who remain cannot absorb it, because headcount was set by what the budget allowed rather than by what the work requires. None of that appears in a plan about the power supply. Real continuity rests on three things: you know your current state, you know your risks by name, and every critical role has a second person.
What this course covers
Forty-one lessons across those three. The current state first: what an audit is and how it differs from analytics, the five mistakes that make it a formality, three levels from compliance to strategic alignment, ten-minute maturity scoring, a thirteen-section checklist with weighted index and 729 items, four data collection methods, the RACI matrix for who runs it, fifteen metrics with formulas, and objection handling. Then risk by name: what human risk is, the heat map, the fraud and safety triangles, cognitive bias and conflict of interest, the 4I model, risks at individual and company level, ISO 31000 and the risk hierarchy, escalation, warning signs at senior level, risk culture, the three lines of defence, a decision checklist, and where accountability lands. Then the second person: why succession is a continuity question, criteria for critical roles, the impact and risk matrix, the nine-box grid, rotations and shadowing, transparency against confidentiality, bench strength and early warning signals. Then capacity: headcount as a cost line and a capability, segmentation, full-time equivalents, gap analysis, Delphi and nominal group forecasting, workload analysis, and optimisation through combining functions and removing duplication rather than cutting people. Then the response itself: hiring under uncertainty, reducing payroll in order of damage, development with no budget, assessing quickly and choosing who goes, delivering that news, and the contingency plan. Finally recovering the operation: the efficiency checklist, a strategy session after disruption, culture as delivery, the goal system, processes and automation, structure and its five drivers, projects, cash flow, infrastructure and procurement, and the accountability table.
Every example comes from a company with employees
All six blocks were recorded for a corporate audience, and five of them for the people function. That is not a stretch, it is the argument: business continuity fails on people rather than on equipment, so a risk register, a succession plan, a headcount calculation and a crisis response are work with people by definition. The operations block is the one part about the function itself, and it carries no industry. The audit block is a method applicable to anything — the 729-item checklist is about the people function, the weighting logic and index construction are not. There is very little to translate here. If you run a network of contractors rather than a payroll, the machinery will be heavier than your situation requires.
Who is teaching this
I am Mike Pritula. I built the people system at Preply as it became a unicorn, and I have worked at Wargaming, iDeals and Alfa-Bank. More than 1.6 million students have enrolled in my courses across 185 countries, and over 150,000 specialists have gone through my programmes. I hold PHRi and SHRM-CP certifications and represent HRCI in more than ten countries.
What is included
Lifetime access to all 41 lessons
Active instructor support in the Q&A section
A Udemy Certificate of Completion
Working material: the maturity scoring, the thirteen-section audit checklist, the risk heat map, ISO 31000, the three lines of defence, the impact and risk matrix, the nine-box grid, gap analysis, and the contingency plan structure
Continuity treated as a people problem, which is where it actually breaks
Where to start
Name one person whose resignation this month would genuinely hurt, then write down who would do their work on the Monday after. If you cannot finish that sentence, you have found your first risk. Enrol now and start today.