Certificate in Advanced Governance, Risk and Compliance (GRC)

Program Overview

Organisations that already run separate risk, compliance and audit functions often struggle with duplicated assessments, inconsistent ratings and fragmented reporting to the board. This advanced course addresses integration: defining risk appetite and tolerance, aligning ERM under COSO ERM and ISO 31000 with a compliance management system based on ISO 37301, applying the IIA Three Lines Model, building combined assurance maps, and selecting GRC technology. Cases draw on the expectations of GCC central banks, capital market authorities and state-owned enterprise governance frameworks, where regulators increasingly ask for one coherent view of risk and control.

Learning Outcomes

• ✓Draft a risk appetite statement with quantitative tolerances and escalation triggers for key risk categories.
• ✓Align ERM, compliance and internal audit taxonomies into a single risk and control library.
• ✓Build a combined assurance map that shows coverage and gaps across the three lines.
• ✓Design an integrated GRC reporting pack for the board and audit and risk committees.
• ✓Evaluate GRC platform requirements and define a phased implementation roadmap.
• ✓Assess GRC maturity using a structured capability model and prioritise improvements.

Target Audience

• Chief risk officers and heads of ERM
• Heads of compliance and regulatory affairs
• Chief audit executives and senior internal auditors
• Governance and board secretariat leaders

Detailed Program Modules

Training Methodology

Applied Project & Assessment