What's covered
Programme outline
- 1
Risk governance and appetite
Three lines of defence, board and management responsibilities, and writing a risk appetite statement your executives can apply to real decisions.
- 2
Identification and assessment
Workshops, interviews and loss data as identification techniques; scoring likelihood and impact consistently across departments.
- 3
Registers and key risk indicators
Designing a register that stays alive, setting KRI thresholds and escalation triggers, and reporting movement rather than static scores.
- 4
Controls and testing
Mapping controls to risks, designing test plans, evidencing operating effectiveness and closing remediation actions on time.
Outcomes
What your team leaves with
Every session is built to produce something usable, not just notes.
A drafted risk appetite statement for your organisation
A working risk register template populated with your own top risks
A KRI dashboard structure for board reporting
