ERM in practice
From policy to daily operation: framework architecture, the risk appetite statement, risk registers and reporting.
For: Management, risk, compliance and internal audit
WHO IT IS FOR
From the boardroom to the front line.
Practitioner-led training, delivered by someone who has built and run these frameworks inside regulated institutions.
Boards and directors
Oversight of risk appetite, committee effectiveness and the questions directors should be asking of management.
Executive and senior management
Owning risk in the business: appetite, limits, assessments, escalation and reporting that holds up in front of the board and regulator.
Risk, control and governance functions
Risk, compliance, internal audit, governance, finance, operations and cybersecurity teams: the working mechanics of ERM, from registers, KRIs and policies to monitoring and the three lines of defence.
Business and front-line staff
Risk awareness for the front line: what to recognise, what to record and when to escalate.
PROGRAMMES
Core programmes.
Each can be delivered as it stands or combined and adapted to your priorities.
Risk indicators, limits and escalation
Designing KRIs and limits that trigger action, and escalation routes that work under pressure.
For: Management, risk and finance
Board and committee effectiveness
Charters, agendas, reporting packs and challenge: how risk and audit committees add real oversight, including oversight of AI.
For: Boards, directors and governance teams
Three lines of defence
Clear roles for business, risk, compliance and audit, and how to avoid gaps and duplication.
For: All levels, including internal audit
Operational risk management
Risk and control self-assessment, loss events, KRIs, controls and BCP.
For: Operations, risk and internal audit
Stress testing, liquidity and ALM
Stress testing, liquidity buffers, asset-liability management, and sovereign risk.
For: Finance, treasury and risk
Cybersecurity risk governance
Core principles, policies, oversight and monitoring. Not a technical deep-dive.
For: Cybersecurity, technology, risk and internal audit
AI oversight for boards and executives
A non-technical briefing on bringing AI inside the risk framework across its core pillars: governance and accountability, legal and regulatory compliance, ethics and fairness, security and privacy, and reputational and strategic risk.
For: Boards, executives, risk and internal audit
Crisis and operational resilience
Business continuity, scenario planning and command structures, drawing on first-hand pandemic experience.
For: Management, operations and risk
FORMATS
Practical and case-based.
Delivered in person across Pakistan and the GCC, and elsewhere in Asia on request.
Board briefings
60 to 90 minutes, focused on oversight and the right questions.
Workshops
Half-day or full-day, practical and case-based.
Programmes
Multi-session courses for teams building or rebuilding a function.
Institution-specific programmes
On request, we review your policies and build them into the training. Scoped and priced case by case.