Banking Corporate Governance and Compliance Training Course

Duration 10 days 21 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Board secretaries and governance officers, Compliance managers and officers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-CG-058

Before you join: Participants should understand basic banking products, bank organisational structures and common risk categories such as credit, liquidity, operational and conduct risk.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Banks operate with concentrated risk, public confidence obligations, prudential supervision and significant conduct exposure. Directors and senior managers must make defensible decisions while maintaining effective oversight of capital, liquidity, credit, operational resilience, financial crime controls, customer outcomes and regulatory commitments. Weak governance can obscure emerging risks, dilute accountability, delay escalation and create avoidable supervisory findings. This course addresses the practical governance and compliance arrangements required to direct, challenge and control a banking business.

Participants examine board and committee structures, director duties, governance policies, risk appetite, internal control, compliance management, regulatory engagement and conduct governance. They learn to map decision rights, test committee effectiveness, assess management information, identify control weaknesses and prepare evidence for regulators and internal assurance functions. The course connects governance architecture to core banking risks, including credit, market, liquidity, operational, cyber, financial crime and conduct risk. It also addresses subsidiaries, outsourcing, related-party transactions, remuneration and crisis governance.

Teaching combines focused briefings with banking cases, document reviews, group analysis, governance simulations and application planning. Participants progressively build a bank governance and compliance pack using their own institution or a realistic banking case. The final deliverable is a board-ready governance improvement plan containing a governance map, committee terms of reference, risk appetite measures, compliance monitoring plan, issue escalation protocol and implementation roadmap. The course is suited to bank managers, risk and compliance professionals, governance officers, internal auditors and senior specialists preparing for wider accountability.

What you will be able to do

  • Assess bank governance structures against prudential expectations and board accountabilities
  • Design board and committee terms of reference with clear decision rights
  • Develop a risk appetite statement with measurable limits and escalation triggers
  • Apply the Three Lines Model to allocate risk, compliance and assurance responsibilities
  • Evaluate internal control design using COSO principles and control testing evidence
  • Build a compliance monitoring plan linked to regulatory obligations and risk assessments
  • Prepare board reporting that supports challenge, escalation and documented decisions
  • Present a governance and compliance improvement plan for a banking institution

Benefits of attending

For you

  • Greater confidence briefing directors on governance, risk and compliance matters
  • Practical evidence for committee secretary, compliance or risk leadership roles
  • A repeatable method for assessing board and committee effectiveness
  • Stronger ability to challenge unclear accountabilities and weak escalation routes
  • A portfolio-quality governance improvement plan for current workplace use

For your organisation

  • Clearer board oversight of prudential, conduct and operational risks
  • More consistent compliance monitoring and regulatory issue escalation
  • Reduced ambiguity between management, risk, compliance and internal audit
  • Better quality committee papers, minutes, decisions and action tracking
  • A prioritised governance remediation roadmap linked to accountable owners

Course modules

21 modules over 10 days

Participants can explain how bank governance supports prudential safety, soundness and public confidence.

  • Board accountabilities under banking law, licence conditions and prudential expectations
  • Safety and soundness objectives translated into governance responsibilities
  • Stakeholder interests: depositors, shareholders, customers, regulators and taxpayers
  • Bank business models and governance implications for risk oversight
  • Prudential supervision, conduct supervision and financial crime supervision compared
  • Governance failures behind major bank conduct and risk events

Participants can assess board composition, director responsibilities and effectiveness evidence.

  • Director fiduciary duties, care standards and collective accountability
  • Independence criteria for non-executive directors and committee chairs
  • Skills matrices covering banking, risk, technology, finance and conduct
  • Board induction, continuing education and succession planning controls
  • Annual board effectiveness reviews using interviews, evidence and action plans
  • Meeting agendas structured around decisions, oversight and strategic challenge

Participants can map governance bodies, delegated authorities and escalation paths.

  • Governance maps linking boards, committees, executives and control functions
  • Delegated authority matrices defining approvals, limits and reserved matters
  • RACI analysis for key risk, control and compliance decisions
  • Legal entity governance across parent banks, subsidiaries and branches
  • Management committees aligned with board oversight and decision cadence
  • Escalation routes for breaches, incidents, emerging risks and exceptions

Participants can draft practical committee mandates with clear scope and authority.

  • Audit committee responsibilities for financial reporting, controls and assurance
  • Risk committee mandates covering appetite, exposures and risk strategy
  • Compliance committee responsibilities for obligations, breaches and remediation
  • Remuneration committee oversight of incentives, malus and conduct outcomes
  • Quorum, voting, conflicts and minute requirements within committee charters
  • Annual committee workplans linked to reporting cycles and regulatory deadlines

Participants can construct a risk appetite structure for board approval and monitoring.

  • Risk appetite statements connecting strategy, capital, liquidity and conduct
  • Quantitative limits, qualitative statements and early warning indicators
  • Risk taxonomy covering credit, market, liquidity, operational and conduct risks
  • Threshold calibration using capacity, tolerance, appetite and target ranges
  • Breach escalation protocols specifying owners, timelines and remediation decisions
  • Board dashboards showing trend, limit utilisation, exceptions and management actions

Participants can allocate ownership, oversight and assurance responsibilities across three lines.

  • IIA Three Lines Model applied to banking accountability structures
  • First-line ownership of products, customers, controls and operational risks
  • Second-line challenge by risk, compliance and financial crime functions
  • Third-line assurance independence, audit planning and reporting rights
  • Avoiding duplicated testing, assurance gaps and unclear control ownership
  • Control function access to boards, committees and protected escalation channels

Participants can assess control design and testing evidence using COSO principles.

  • COSO Internal Control framework: environment, risk assessment, activities, information, monitoring
  • Preventive, detective and corrective controls mapped to material risks
  • Control objectives written with risk events, actions and evidence
  • Walkthroughs tracing transactions, approvals, system controls and reconciliations
  • Design effectiveness testing against policy requirements and process realities
  • Operating effectiveness evidence from samples, exceptions and issue records

Participants can design a compliance management system with accountable monitoring and reporting.

  • ISO 37301 principles applied to banking compliance management systems
  • Regulatory obligation registers linking requirements, owners, controls and evidence
  • Compliance risk assessments prioritising customer, prudential and reporting exposures
  • Annual compliance plans based on risk ratings and regulatory change
  • Monitoring programmes defining scope, samples, testing steps and reporting
  • Breach registers recording root cause, impact, remediation and notifications

Participants can manage regulatory change and prepare structured supervisory responses.

  • Regulatory horizon scanning using source registers and impact assessments
  • Change governance assigning sponsors, owners, milestones and control validation
  • Supervisory correspondence logged through commitments, deadlines and accountable executives
  • Regulatory examinations prepared with evidence inventories and response protocols
  • Management action plans addressing findings, root causes and validation
  • Constructive challenge during supervisory meetings, inspections and thematic reviews

Participants can establish governance controls that identify and address conduct risks.

  • Conduct risk frameworks linking behaviours, incentives, products and customer outcomes
  • Product governance approvals covering target markets, value and foreseeable harm
  • Customer complaint data analysed for root causes and systemic issues
  • Sales incentive controls addressing pressure, mis-selling and unsuitable products
  • Vulnerable customer governance through policies, training, monitoring and escalation
  • Conduct dashboards combining complaints, cancellations, errors and remediation indicators

Participants can define board oversight and control responsibilities for financial crime risk.

  • Financial crime governance covering money laundering, sanctions, fraud and bribery
  • Board-approved financial crime risk appetite and tolerance statements
  • Customer risk assessments using products, geographies, channels and behaviour
  • Transaction monitoring governance for alerts, investigations and suspicious activity reports
  • Sanctions control oversight covering screening, escalation and payment holds
  • Financial crime reporting lines, independence and management information requirements

Participants can identify governance requirements for core prudential risk decisions.

  • Credit approval authorities, portfolio limits and independent credit challenge
  • Impairment governance for models, overlays, judgements and audit trails
  • Capital planning oversight through ICAAP assumptions, stress testing and buffers
  • Liquidity governance through ILAAP, contingency funding and survival horizons
  • Asset liability committee mandates for funding, pricing and interest-rate risk
  • Model risk governance covering validation, approval, change and performance monitoring

Participants can oversee operational resilience, cyber risk and technology dependencies.

  • Important business services identified through customer, prudential and market impact
  • Impact tolerances set for disruption duration, volume and customer harm
  • Scenario testing for cyber incidents, payment outages and third-party failures
  • Technology governance covering architecture, change approvals and system access
  • Cyber risk reporting using threat, vulnerability, control and incident metrics
  • Operational incident reviews linking root cause, lessons and remediation ownership

Participants can govern outsourced services through risk assessment, controls and exit planning.

  • Outsourcing inventories distinguishing material, critical and non-critical service arrangements
  • Due diligence covering financial strength, security, resilience and subcontracting
  • Contract clauses for audit rights, service levels and incident notification
  • Third-party risk assessments scored by concentration, criticality and substitutability
  • Ongoing vendor monitoring using performance, control and financial indicators
  • Exit strategies covering data return, service continuity and transition testing

Participants can implement governance controls for conflicts, connected dealings and ethical decisions.

  • Conflict-of-interest registers recording interests, recusal decisions and attestations
  • Related-party transaction policies defining approvals, pricing and disclosure requirements
  • Connected lending controls separating business sponsorship from credit decisions
  • Gifts, hospitality and outside interests assessed through approval thresholds
  • Whistleblowing arrangements protecting confidentiality, investigation independence and non-retaliation
  • Ethics frameworks linking values, expected behaviours and disciplinary consequences

Participants can align remuneration and accountability arrangements with prudent risk-taking.

  • Remuneration governance linking compensation outcomes to risk-adjusted performance
  • Balanced scorecards incorporating financial, customer, control and conduct measures
  • Malus and clawback provisions for misconduct, losses and control failures
  • Senior manager accountability maps documenting prescribed responsibilities and delegations
  • Fitness and propriety assessments for directors and senior management
  • Performance reviews incorporating risk events, audit findings and compliance outcomes

Participants can prepare concise board reporting that supports oversight and challenge.

  • Board paper templates separating decision requests, evidence, risks and recommendations
  • Executive summaries stating material issues, choices and required board action
  • Key risk indicators designed with thresholds, trends and accountable owners
  • Management information quality tests for accuracy, completeness, timeliness and relevance
  • Exception reporting highlighting breaches, ageing actions and residual exposures
  • Minutes documenting challenge, decisions, dissent and follow-up commitments

Participants can govern material issues from identification through verified closure.

  • Issue management taxonomies classifying severity, impact, root cause and ownership
  • Material incident escalation criteria for boards, regulators and affected customers
  • Root cause analysis using five whys, fault trees and causal mapping
  • Remediation plans defining actions, milestones, resources, dependencies and success measures
  • Independent validation testing closure evidence before issue declassification
  • Lessons-learned reporting feeding policies, controls, training and risk assessments

Participants can coordinate assurance plans while preserving internal audit independence.

  • Risk-based internal audit planning aligned with enterprise risk assessments
  • Audit universe design covering entities, products, processes and technology
  • Assurance mapping across management testing, compliance reviews and internal audit
  • Audit findings rated by significance, root cause and remediation urgency
  • Audit committee reporting on coverage, independence, resources and overdue actions
  • Quality assurance reviews supporting consistent audit methodology and evidence

Participants can establish governance arrangements for stressed conditions and recovery actions.

  • Crisis management structures defining authority, communications and decision records
  • Recovery plan triggers linked to capital, liquidity and operational resilience
  • Emergency board meetings managed through information discipline and delegated authority
  • Stakeholder communications for regulators, customers, investors and staff
  • Decision logs capturing assumptions, approvals, actions and subsequent review
  • Post-crisis governance reviews identifying control failures and capability gaps

Participants can build, review and present a complete bank governance and compliance improvement plan.

  • Current-state governance assessment using documented roles, controls and reporting evidence
  • Material gap analysis against board accountabilities, risk appetite and compliance requirements
  • Target governance map with committees, decision rights and escalation routes
  • Prioritised remediation roadmap assigning owners, milestones, dependencies and success measures
  • Board reporting pack containing indicators, breaches, actions and decision requests
  • Peer review against supervisory expectations, control evidence and implementation feasibility

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Bank governance architecture map
  2. Board and committee terms-of-reference templates
  3. Risk appetite statement and indicator library
  4. Compliance obligations register and monitoring plan
  5. Material issue escalation and remediation tracker
  6. Governance and compliance improvement roadmap

Who should attend

  • Board secretaries and governance officers — responsible for board processes, records and committee support
  • Compliance managers and officers — responsible for regulatory obligations, monitoring and breach escalation
  • Risk managers — responsible for risk appetite, reporting and second-line challenge
  • Internal audit managers — assessing governance, risk management and internal control effectiveness
  • Senior bank managers — preparing for accountable executive and committee responsibilities
  • Legal and regulatory affairs specialists — interpreting regulatory requirements and coordinating responses

Skills and tools covered

Board governance designRisk appetite managementCompliance monitoringInternal control assessmentRegulatory reportingCommittee effectiveness

Tools and standards

Basel Committee Corporate Governance Principles for Banks, COSO Internal Control Framework, ISO 37301 Compliance Management Systems, IIA Three Lines Model

How the course runs

Training methodology

The course uses short instructor briefings to establish banking governance principles, followed by case work drawn from retail, corporate and digital banking settings. Participants review board papers, committee mandates, risk reports, compliance registers and supervisory findings. Group exercises test decision rights, challenge quality, incident escalation and regulatory responses. Simulations place participants in board, risk committee and executive management roles. Application planning begins in the first week and develops into a bank-specific governance and compliance improvement pack during the second week.

Requirements and prerequisites

Participants should understand basic banking products, bank organisational structures and common risk categories such as credit, liquidity, operational and conduct risk. Experience in a bank, financial institution, regulator, internal audit function, risk team, compliance team, legal function or governance office is useful. Participants should be comfortable reading policies, management reports and regulatory communications. Prior board experience is not required. The course does not require legal qualification, accounting qualification, prior internal audit certification or detailed knowledge of one country’s banking rulebook. Jurisdiction-specific requirements are discussed through adaptable principles and examples.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need basic familiarity with banking operations and common risk categories. Board experience, legal qualifications and prior compliance certification are not required.

Participants should bring a current governance challenge, such as a committee redesign, regulatory finding, control weakness or reporting problem. Non-confidential policies, committee terms of reference or reporting formats can support application planning.

The course is designed for governance, compliance, risk, audit, legal and senior management professionals in banks and financial institutions. It is particularly useful for people supporting boards and committees or taking on broader accountable responsibilities.

This course focuses on the prudential, conduct, financial crime, capital, liquidity and operational resilience responsibilities specific to banking. General corporate governance courses usually give less attention to regulatory supervision, risk appetite and control function independence.

Participants build reusable governance documents and assess their own institution or a realistic bank case throughout the course. The final roadmap can be adapted for committee approval, a regulatory remediation programme or an internal governance review.

Each day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes governance architecture, risk, controls and compliance systems; the second week applies these methods to reporting, assurance, resilience and the final capstone.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.