Enterprise Risk Management
Overview
Enterprise risk management helps organisations see the full picture of their risks and take them deliberately. This course covers ERM frameworks and the complete risk process: setting risk appetite, identifying and assessing risks, responding, monitoring and reporting, and building a risk-aware culture.
Who should attend
Risk managers and officers, internal auditors, compliance staff, and managers responsible for risk in their areas.
Training methodology
Interactive presentations, practical exercises, case studies, group discussions, role-plays where relevant, and a personal action plan that participants apply in their own work.
Objectives
By the end of this course, participants will be able to:
- Explain leading ERM frameworks and standards
- Define risk appetite and tolerance
- Identify, assess and prioritise risks
- Design risk responses and controls
- Monitor, report and embed risk management
Course outline
Day 1ERM Foundations
- Risk concepts
- ISO 31000 and COSO ERM
- Roles in risk management
- ERM maturity
- Assessment
Day 2Risk Appetite and Context
- Risk appetite statements
- Tolerance and limits
- Linking risk and strategy
- Context setting
- Drafting exercise
Day 3Risk Assessment
- Risk identification techniques
- Likelihood and impact
- Risk registers
- Heat maps
- Workshop
Day 4Risk Response
- Treatment options
- Controls and owners
- Key risk indicators
- Emerging risks
- Case study
Day 5Monitoring and Culture
- Risk reporting to boards
- Risk reviews
- Risk culture
- ERM implementation roadmap
- Action plan
