Certificate Course in Strategic Risk Management

Participants can define strategic context, critical assumptions and external sources of uncertainty.

• Purpose, value proposition and strategic objectives translated into risk criteria
• PESTLE analysis identifying political, economic and regulatory uncertainty
• Porter's Five Forces testing industry profitability and competitive pressure
• SWOT and TOWS converting exposures into strategic response options
• Stakeholder mapping of power, interest, expectations and risk influence
• Strategic assumptions register with owners, evidence and review triggers

Participants can define risk appetite and translate it into measurable management limits.

• Risk appetite statements tied to objectives, capital and stakeholder commitments
• Appetite, tolerance, capacity and limits distinguished through practical thresholds
• Quantitative appetite metrics for liquidity, credit, conduct and operations
• Qualitative boundaries for reputation, safety, compliance and customer harm
• Cascading board appetite into business-unit limits and delegated authorities
• Exception reporting, breach escalation and corrective-action governance processes

Participants can create a risk universe and identify material risks systematically.

• Risk taxonomy design linking causes, events, impacts and controls
• Risk universe coverage across strategic, financial, operational and external categories
• Process mapping to locate failure points, handoffs and concentration risks
• Cause-and-effect analysis using fishbone diagrams and causal chains
• Structured risk workshops using prompt lists and stakeholder interviews
• Emerging-risk scanning through horizon scanning, weak signals and trend analysis

Participants can build a usable risk register with clear ownership, controls and treatment actions.

• Risk register fields: objective, cause, event, impact, owner and treatment
• Clear risk statements separating causes, events and consequences
• Inherent and residual risk ratings recorded with supporting rationale
• Ownership assignments using RACI and accountable executive designation
• Control descriptions identifying preventive, detective and corrective measures
• Action plans with milestones, resources, dependencies and closure evidence

Participants can assess, compare and prioritise risk exposures using defensible criteria.

• Likelihood and impact scales calibrated with defined rating criteria
• Heat maps used within their limits and decision context
• Risk velocity, persistence and interconnectedness assessed alongside probability
• Control effectiveness ratings supported by design and operating evidence
• Risk matrices aggregated without concealing material tail exposures
• Prioritisation rules combining exposure, objective criticality and management attention

Participants can select and interpret quantitative methods for material financial and strategic risks.

• Expected loss, value at risk and conditional tail measures
• Monte Carlo simulation inputs, distributions, correlations and output interpretation
• Sensitivity analysis isolating drivers of earnings, cash flow and capital
• Scenario analysis comparing plausible narratives, assumptions and financial consequences
• Decision trees valuing contingent choices under uncertain outcomes
• Data quality tests for completeness, accuracy, timeliness and lineage

Participants can analyse financial exposures and incorporate them into risk management decisions.

• 13-week rolling cash forecasts built from receipts, payroll and supplier data
• Liquidity risk metrics: survival horizon, concentration and funding maturity
• Working-capital scenarios linking inventory, receivables, payables and cash conversion
• Foreign-exchange exposures measured by transaction, translation and economic risk
• Interest-rate sensitivity assessed through repricing gaps and duration measures
• Capital adequacy scenarios connecting losses, buffers and financing capacity

Participants can select risk treatments and specify controls proportionate to residual exposure.

• Risk treatment selection: avoid, accept, reduce, transfer or share
• Cost-benefit analysis for controls, insurance and contingency investment
• Bow-tie analysis linking threats, preventive barriers and recovery controls
• Control design specifications with frequency, evidence, owner and automation
• Residual exposure accepted through documented authority and review conditions
• Treatment plans aligned to budgets, strategic milestones and dependencies

Participants can create risk reporting that supports executive decisions and board oversight.

• Key risk indicators designed with thresholds, trends and accountable owners
• Risk dashboards combining exposure, controls, actions and forward indicators
• Board reports distinguishing decision requests from routine management information
• Risk-adjusted performance measures linking returns, capital and downside exposure
• Escalation triggers for limit breaches, incidents and deteriorating indicators
• Management narratives explaining uncertainty, assumptions and recommended decisions

Participants can assess strategic options using performance, risk and resource implications.

• Strategy maps linking objectives, initiatives, capabilities, risks and measures
• Balanced Scorecard perspectives translated into risk-aware performance measures
• Strategic option appraisal using NPV, real options and risk-adjusted returns
• Make-buy-partner decisions tested for control, resilience and concentration exposure
• Resource allocation under uncertainty using portfolio matrices and scenario ranges
• Execution roadmaps sequencing initiatives, dependencies, ownership and decision gates

Participants can analyse enterprise-wide risk interactions, concentrations and risk capacity.

• Enterprise risk aggregation considering correlations, concentrations and common-cause failures
• Risk interdependency maps identifying contagion paths and amplification points
• Portfolio views separating diversifying exposures from concentrated downside risks
• Risk capacity tested against capital, liquidity, people and operational constraints
• Strategic trade-offs documented through risk-return and stakeholder-impact comparisons
• Management prioritisation balancing risk reduction, opportunity and resource consumption

Participants can integrate business continuity and crisis arrangements into the risk framework.

• Business impact analysis setting recovery time and recovery point objectives
• ISO 22301 continuity requirements translated into programme governance
• Critical service mapping across people, premises, technology and suppliers
• Incident command structures defining authority, communications and decision cadence
• Crisis communications protocols for regulators, customers, staff and media
• Recovery exercises testing alternate sites, manual workarounds and restoration priorities

Participants can assess, monitor and manage risks arising from suppliers and outsourced services.

• Third-party segmentation based on criticality, data access and substitutability
• Due diligence covering financial health, sanctions, conduct and information security
• Contractual controls for audit rights, service levels and incident notification
• Supplier concentration analysis measuring dependency, geographic exposure and switching barriers
• Ongoing monitoring using performance data, adverse media and control attestations
• Exit plans covering transition support, data return and continuity safeguards

Participants can frame cyber and data risks in terms of business consequences and ownership.

• Cyber risk scenarios connecting threat actors, vulnerabilities and business impacts
• NIST Cybersecurity Framework functions mapped to enterprise risk ownership
• Information asset classification guiding protection requirements and risk treatment
• Access-control risks assessed through privileged accounts, segregation and recertification
• Technology resilience metrics covering availability, recovery testing and change failure
• Data breach response obligations linked to notification and stakeholder decisions

Participants can incorporate compliance, conduct and fraud exposures into enterprise risk management.

• Compliance obligations mapped to processes, controls, owners and evidence
• Conduct risk scenarios addressing incentives, sales practices and customer outcomes
• Anti-bribery controls using risk assessments, gifts registers and due diligence
• Fraud risk assessment covering opportunity, pressure, rationalisation and controls
• Whistleblowing arrangements tested for confidentiality, investigation quality and retaliation safeguards
• Regulatory change management tracking obligations, gaps and implementation evidence

Participants can assess climate, ESG and reputation risks using decision-relevant evidence.

• Climate scenarios assessing physical hazards, transition costs and asset impairment
• TCFD disclosures linking governance, strategy, risk management and metrics
• Nature, human-rights and supply-chain risks incorporated into enterprise assessments
• ESG data controls addressing boundaries, estimates, assurance and traceability
• Stakeholder materiality assessments distinguishing financial and impact materiality
• Greenwashing risk controls governing claims, approvals and supporting evidence

Participants can conduct stress tests and define credible recovery and contingency actions.

• Reverse stress testing identifies scenarios that threaten organisational viability
• Severe-but-plausible scenarios constructed from linked macroeconomic and operational shocks
• Stress-test assumptions challenged for correlations, management actions and second-order effects
• Contingency funding plans specify triggers, sources, authority and communications
• Capital and liquidity buffers evaluated against stress-test losses
• Recovery options assessed for feasibility, timing and stakeholder consequences

Participants can establish a practical risk management operating cycle and assurance plan.

• Annual risk management plan aligning assessments, reporting cycles and assurance
• Risk-based internal audit planning using residual exposure and control maturity
• Control testing methods: walkthroughs, sampling, reperformance and evidence inspection
• Issue management workflows tracking remediation, validation and overdue actions
• Management review calendars synchronising strategy, budgets, risks and performance
• Maturity assessments identifying target-state capabilities and implementation priorities

Participants can build, review and present a complete strategic risk management dossier for executive and board consideration.

• Strategic context and objectives documented with material assumptions and constraints
• Enterprise risk register populated with calibrated ratings, controls and owners
• Scenario and stress-test analysis quantifying priority financial and operational exposures
• Risk appetite, limits and escalation rules aligned to executive decisions
• Treatment roadmap prioritising actions, resources, milestones and assurance evidence
• Board-ready dashboard and presentation defending trade-offs, residual exposures and recommendations