Course overview
Risk decisions fail when organisations cannot connect strategic objectives, financial exposures, operational weaknesses and control evidence. Leaders need clear answers: which risks could prevent delivery, how much loss is plausible, where appetite is exceeded, who owns the response, and whether controls are working. This course equips participants to build those answers using structured risk management methods suitable for banks, public bodies, NGOs, multinationals and large corporates.
Participants work through the full risk management cycle: governance, risk appetite, context setting, identification, assessment, quantification, treatment, control design, monitoring and reporting. The course addresses market, credit, liquidity, operational, fraud, cyber, third-party and project risks, while showing how these exposures interact. Participants apply ISO 31000, COSO ERM, Basel concepts and IFRS 9 principles where relevant, using risk registers, risk and control self-assessments, key risk indicators, stress tests, scenario analysis and board reporting.
Instruction combines focused briefings with financial and operational cases, group analysis, simulations and structured application planning. Participants progressively develop a risk management pack during the course, starting with objectives and risk criteria, then adding assessment, control, treatment and reporting components. They leave with reusable templates and a completed capstone risk management plan that can be adapted to their own function or organisation. The 10-day programme is delivered in a classroom in more than 50 cities or live online, with approximately 6.5 contact hours each day. Participants receive a certificate of completion.
The course is suited to professionals who already work with budgets, controls, projects, audit findings, compliance obligations or management reporting and need to make risk information more decision-useful.