Course Outline:

Module 1: Introduction to Enterprise Risk Management

• Defining ERM and its importance

• Evolution of risk management practices

• Key drivers of enterprise risk

• Overview of ERM frameworks (ISO 31000, COSO)

• Case Study: ERM failure analysis in a global organization

Module 2: Risk Governance and Culture

• Risk management roles and responsibilities

• Board and executive oversight of risk

• Establishing a risk-aware culture

• Defining and communicating risk appetite and tolerance

• Group Exercise: Developing a risk governance model using STP

Module 3: Risk Identification and Assessment

• Risk categories: strategic, financial, operational, compliance

• Risk identification techniques (SWOT, PESTLE, interviews, workshops)

• Qualitative and quantitative risk assessment

• Risk heat maps and scoring matrices

• Workshop: Conducting a risk assessment for a strategic initiative

Module 4: Risk Response and Integration

• Risk response strategies: avoid, reduce, transfer, accept

• Embedding risk management into business processes

• Controls, monitoring, and mitigation plans

• Integrating ERM with performance management and decision-making

• Case Study: Selecting appropriate responses to a business risk scenario

Module 5: Risk Monitoring, Reporting, and Communication

• KPIs and KRIs for risk tracking

• Risk dashboards and reporting templates

• Communicating risk to stakeholders

• Continuous improvement of the ERM process

• Capstone Project: Developing a complete ERM framework for a mock company