Risk Management Training Course

Duration 10 days 18 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Risk Managers, Finance Managers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 9 Nov 2026 Course code SD-RM-049

Before you join: Participants should understand basic financial statements, budgeting, internal controls and management reporting.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Risk decisions fail when organisations cannot connect strategic objectives, financial exposures, operational weaknesses and control evidence. Leaders need clear answers: which risks could prevent delivery, how much loss is plausible, where appetite is exceeded, who owns the response, and whether controls are working. This course equips participants to build those answers using structured risk management methods suitable for banks, public bodies, NGOs, multinationals and large corporates.

Participants work through the full risk management cycle: governance, risk appetite, context setting, identification, assessment, quantification, treatment, control design, monitoring and reporting. The course addresses market, credit, liquidity, operational, fraud, cyber, third-party and project risks, while showing how these exposures interact. Participants apply ISO 31000, COSO ERM, Basel concepts and IFRS 9 principles where relevant, using risk registers, risk and control self-assessments, key risk indicators, stress tests, scenario analysis and board reporting.

Instruction combines focused briefings with financial and operational cases, group analysis, simulations and structured application planning. Participants progressively develop a risk management pack during the course, starting with objectives and risk criteria, then adding assessment, control, treatment and reporting components. They leave with reusable templates and a completed capstone risk management plan that can be adapted to their own function or organisation. The 10-day programme is delivered in a classroom in more than 50 cities or live online, with approximately 6.5 contact hours each day. Participants receive a certificate of completion.

The course is suited to professionals who already work with budgets, controls, projects, audit findings, compliance obligations or management reporting and need to make risk information more decision-useful.

What you will be able to do

  • Apply ISO 31000 and COSO ERM to structure a risk management process
  • Define risk appetite, tolerance, capacity and escalation thresholds for management decisions
  • Construct risk registers using cause, event, consequence, control and ownership fields
  • Assess inherent and residual risk using calibrated criteria and control effectiveness evidence
  • Quantify financial exposures through expected loss, value-at-risk, sensitivity analysis and stress testing
  • Design risk treatments, control plans, key risk indicators and remediation actions
  • Prepare board-level risk reports linking appetite, exposures, trends and required decisions
  • Present a complete risk management plan supported by scenarios, controls and implementation priorities

Benefits of attending

For you

  • Produce defensible risk assessments supported by clear criteria and evidence
  • Discuss market, credit, liquidity and operational exposures with finance specialists
  • Build risk reports that identify decisions, thresholds and accountable owners
  • Assess control effectiveness beyond checklist-based compliance reviews
  • Lead structured risk workshops and challenge unsupported risk ratings

For your organisation

  • More consistent risk registers, scoring criteria and ownership records
  • Earlier identification of liquidity, control and concentration pressures
  • Clearer escalation of appetite breaches and overdue risk treatments
  • Better linkage between risk reporting, financial planning and assurance activity
  • Actionable board reporting supported by quantified scenarios and control evidence

Course modules

18 modules over 10 days

Participants can explain the core risk management process, roles and terminology.

  • ISO 31000 principles, framework and process terminology for risk management
  • COSO ERM components linked to strategy, performance and reporting
  • Risk owner, control owner and assurance roles distinguished clearly
  • Three Lines Model responsibilities mapped for board and management
  • Risk taxonomy structured by strategic, financial, operational and compliance categories
  • Risk event, cause, consequence and control relationships documented precisely

Participants can define risk appetite and assign governance responsibilities for risk decisions.

  • Board-approved risk appetite statements translated into measurable operating limits
  • Appetite, tolerance, capacity and limits differentiated using financial examples
  • Risk committees, mandates and escalation thresholds designed for accountability
  • Key risk indicators selected with thresholds, owners and reporting frequency
  • Delegated authorities aligned with credit, market and liquidity exposures
  • Risk culture indicators assessed through conduct, challenge and incident data

Participants can establish the context, criteria and data requirements for a risk assessment.

  • Strategic objectives converted into risk assessment criteria and decision boundaries
  • Internal and external context assessed using PESTLE and stakeholder analysis
  • Assumptions, constraints and interdependencies recorded in a risk assessment charter
  • Risk criteria calibrated for likelihood, impact, velocity and persistence
  • Materiality thresholds set for financial loss, service disruption and compliance
  • Data sources evaluated for completeness, timeliness, lineage and bias

Participants can identify material risks and document them in a usable risk register.

  • Facilitated risk workshops use prompts, process maps and structured interviews
  • Bow-tie analysis identifies threats, preventive controls and consequence barriers
  • Risk and control self-assessment captures process-level exposures and controls
  • Incident, loss and near-miss data reveal recurring risk patterns
  • Emerging risks sourced from horizon scanning, scenarios and expert judgment
  • Risk register entries specify cause, event, impact and accountable owner

Participants can assess inherent and residual risk using calibrated ratings and control evidence.

  • Likelihood-impact matrices calibrated to avoid false precision and score inflation
  • Inherent and residual risk ratings calculated after control effectiveness assessment
  • Control design and operating effectiveness tested using evidence-based criteria
  • Risk velocity, interconnectedness and reversibility added to prioritisation decisions
  • Heat maps interpreted with limitations, aggregation effects and risk correlations
  • Risk prioritisation combines ratings, appetite breaches and management judgment

Participants can apply selected quantitative methods to estimate and test risk exposure.

  • Probability distributions selected for loss frequency and severity modelling
  • Expected loss, unexpected loss and value-at-risk calculated from scenarios
  • Monte Carlo simulation estimates aggregated losses under correlated assumptions
  • Sensitivity analysis tests key drivers, parameter uncertainty and model risk
  • Stress testing applies severe but plausible financial and operational shocks
  • Model assumptions, validation checks and limitations documented for review

Participants can identify and measure major financial risk exposures affecting performance and capital.

  • Financial statements analysed for earnings volatility, covenant pressure and concentration
  • Foreign exchange exposure measured through transaction, translation and economic positions
  • Interest rate repricing gaps and duration measure rate sensitivity
  • Commodity price exposures mapped to procurement commitments and revenue contracts
  • Counterparty concentrations assessed by obligor, sector, geography and collateral
  • Risk-adjusted return measures inform pricing, limits and capital allocation

Participants can assess market risk and establish appropriate limits, testing and valuation controls.

  • Market risk factors mapped to portfolios, benchmarks and valuation models
  • Historical simulation, parametric and Monte Carlo VaR compared critically
  • Backtesting compares daily profit and loss against VaR estimates
  • Stressed VaR and scenario analysis expose tail loss vulnerabilities
  • Greeks quantify option sensitivity to price, volatility, time and rates
  • Position limits, stop-loss limits and independent valuation controls established

Participants can assess borrower, counterparty and portfolio credit exposures using structured methods.

  • Credit risk assessment integrates financial ratios, cash flows and qualitative factors
  • Probability of default, loss given default and exposure estimated
  • Five Cs of credit structure borrower assessment and approval rationale
  • Credit scoring models tested for discrimination, calibration and override governance
  • Collateral valuation, covenants and guarantees reduce loss severity
  • Expected credit loss staging linked to IFRS 9 requirements

Participants can assess liquidity pressures and prepare practical contingency funding responses.

  • Cash conversion cycle analysis identifies working-capital funding pressures
  • Thirteen-week rolling cash forecasts model receipts, payroll and supplier payments
  • Liquidity gaps measured by maturity buckets, committed facilities and contingency sources
  • Liquidity coverage ratio and net stable funding ratio interpreted
  • Contingency funding plans define triggers, actions, owners and communications
  • Bank covenant headroom monitored under base case and stress scenarios

Participants can identify operational failure points and define continuity-focused risk controls.

  • Operational risk taxonomy covers people, process, systems and external events
  • Process mapping locates handoffs, failure points and manual control dependencies
  • Loss event data classified by Basel operational risk event types
  • Key control indicators distinguish preventive, detective and corrective performance
  • Business continuity impact analysis sets recovery time and recovery point objectives
  • Root cause analysis uses five whys and fishbone diagrams

Participants can assess fraud, cyber and supplier risks and define relevant control requirements.

  • Fraud risk assessments map incentives, opportunities and rationalisation indicators
  • Red flags identify payment fraud, procurement collusion and expense abuse
  • Segregation of duties matrices expose incompatible access and approval rights
  • Cyber risk scenarios assess confidentiality, integrity, availability and recovery impacts
  • Third-party due diligence evaluates financial stability, sanctions and control evidence
  • Vendor contracts assign security, continuity, audit and incident notification obligations

Participants can select treatments and convert risk decisions into controlled action plans.

  • Risk treatment options compare avoidance, reduction, transfer and acceptance
  • Control libraries link objectives, risks, activities, evidence and owners
  • Insurance programmes evaluated for exclusions, deductibles, limits and claims procedures
  • Derivatives hedging separates economic exposure, hedge effectiveness and accounting treatment
  • Cost-benefit analysis prioritises treatments using residual exposure and feasibility
  • Action plans specify milestones, resources, dependencies and closure evidence

Participants can monitor risks, test controls and track remediation to verified closure.

  • Key risk indicators designed with leading, lagging and threshold measures
  • Control testing plans define population, samples, evidence and exceptions
  • Risk registers updated through incidents, audits, changes and management review
  • Risk acceptance decisions recorded with expiry dates and approval authorities
  • Issue management tracks remediation ownership, overdue actions and validation
  • Continuous monitoring uses dashboards, reconciliations and exception reporting

Participants can prepare concise risk reporting that supports management and board decisions.

  • Board risk reports connect appetite, exposures, trends and decisions required
  • Risk dashboards use concise metrics, thresholds, commentary and forward indicators
  • Risk aggregation addresses common causes, concentrations and correlation effects
  • Escalation protocols distinguish breaches, near breaches and emerging concerns
  • Management information reconciles risk data to finance and operational records
  • Risk narratives explain uncertainty, assumptions and actions without obscuring evidence

Participants can build scenarios that test risk resilience and recovery decisions.

  • Scenario design combines drivers, transmission paths, impacts and management responses
  • Reverse stress testing identifies conditions that make business models unviable
  • Interconnected risks model contagion between liquidity, credit, operations and reputation
  • Scenario workshops challenge assumptions using alternative futures and signposts
  • Recovery plans sequence stabilisation actions, decision rights and communications
  • Crisis simulations test escalation, information flows and response coordination

Participants can integrate risk management into planning, assurance, change and resource decisions.

  • Risk-based planning aligns assurance coverage with material exposures and control gaps
  • Capital allocation considers risk-adjusted returns, buffers and concentration limits
  • Project risk registers integrate scope, schedule, cost and supplier exposures
  • Change risk assessments address migration, adoption, controls and benefit realisation
  • Implementation roadmaps sequence governance, data, controls and reporting improvements
  • Risk maturity assessments benchmark current practices against target-state criteria

Participants can build, review and present a complete risk management plan for a defined business case.

  • Capstone brief defines objectives, scope, stakeholders and decision context
  • Risk register built with causes, events, impacts, ratings and owners
  • Quantitative scenarios estimate financial exposure, liquidity strain and control failures
  • Treatment plan assigns controls, indicators, actions, deadlines and accountabilities
  • Board report presents appetite position, top risks and escalation requests
  • Peer review challenges assumptions, evidence, scoring consistency and proposed responses
  • Final presentation defends the risk management plan before a review panel

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. ISO 31000-aligned risk register template
  2. Risk appetite statement and threshold matrix
  3. Risk and control self-assessment template
  4. Stress-testing and scenario-analysis model
  5. Key risk indicator dashboard specification
  6. Board risk report and treatment plan

Who should attend

  • Risk Managers — need consistent methods for assessment, treatment and reporting
  • Finance Managers — need to quantify exposures affecting cash, earnings and capital
  • Internal Auditors — need risk-based assurance plans and control evaluation criteria
  • Compliance Managers — need to connect regulatory obligations with risk ownership
  • Treasury Professionals — need stronger management of liquidity, market and counterparty exposures
  • Operational Managers — need practical tools for process, supplier and continuity risks

Skills and tools covered

Risk appetite designRisk assessmentFinancial risk measurementControl evaluationScenario analysisBoard risk reporting

Tools and standards

ISO 31000, COSO ERM Framework, Basel III, IFRS 9

How the course runs

Training methodology

The course uses short instructor briefings to establish methods, followed by cases drawn from financial services, public programmes, procurement, treasury and operational delivery. Participants analyse risk events, assess controls, calculate selected exposure measures and interpret management information. Group exercises develop risk registers, appetite statements, scenarios, treatment plans and board reports. Simulations test escalation and crisis decisions under changing conditions. Individual application planning helps participants adapt the course tools to a current risk issue, process or reporting requirement.

Requirements and prerequisites

Participants should understand basic financial statements, budgeting, internal controls and management reporting. Experience in finance, audit, compliance, treasury, operations, projects or business management is expected, ideally with responsibility for decisions, processes or reporting. Participants should be comfortable interpreting percentages, ratios and simple spreadsheet outputs. Prior risk management training is not required, and advanced mathematics, programming, derivatives trading or a specialist audit qualification are not assumed. The course explains quantitative techniques step by step before applying them to risk decisions.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

You should understand basic financial statements, controls and management reporting, or have equivalent experience in operations, audit, compliance or projects. Prior formal risk management training and advanced quantitative skills are not required.

Bring a laptop for working with templates, calculations and case materials. If permitted by your employer, bring a current risk register, audit finding, project issue or reporting challenge to use during application planning.

The course suits risk, finance, treasury, audit, compliance, operations and project professionals with responsibility for decisions, controls or reporting. It is particularly useful for managers moving into a formal risk ownership role.

Internal audit focuses on independent assurance, while compliance focuses on meeting legal, regulatory and policy obligations. This course covers the management process for identifying, measuring, treating and reporting risks, including financial and operational exposures.

Participants can use the templates to refresh a risk register, define appetite thresholds, assess controls, build scenarios or improve board reporting. The capstone structure can be adapted to a live business unit, programme, treasury exposure or supplier risk issue.

Each day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first part develops core methods and initial working documents; the second part applies quantitative analysis, specialised risk areas, reporting and the final capstone presentation.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.