Certified Risk Management Professional
- Define risk criteria, likelihood and consequence scales, and a risk matrix suited to an organisation's objectives.
- Identify risks using structured techniques such as workshops, checklists and bow-tie analysis.
- Analyse risks qualitatively and estimate exposure quantitatively with a simple Monte Carlo model.
- Select and justify risk treatment options with owners, costs and target residual ratings.
- Design key risk indicators with thresholds and escalation rules.
- Prepare a risk report and heat map for executive management.
- Risk Management Principles and Frameworks
- ISO 31000:2018 principles, framework and process
- COSO ERM components
- Risk management in GCC government and regulated sectors
- Context and Risk Criteria
- Scope, objectives and stakeholders
- Likelihood and consequence scales
- Risk appetite and tolerance
- Risk Identification
- Workshops, interviews and checklists
- Bow-tie and scenario techniques
- Writing clear cause-event-consequence statements
- Risk Analysis and Evaluation
- Qualitative rating and heat maps
- Quantitative analysis and Monte Carlo basics
- Prioritisation against risk criteria
- Risk Treatment
- Avoid, reduce, share and accept options
- Control effectiveness and residual risk
- Treatment plans and cost-benefit
- Monitoring, Reporting and Risk Culture
- Key risk indicators and thresholds
- Risk registers and reporting cycles
- Embedding risk culture and accountability
Get the Brochure
To receive a brochure with the full course content, please complete the following form with your correct details

Program Professional Framework
Certified Risk Management Professional
Program Overview
Effective risk management gives decision-makers a clear view of what could affect objectives and what is being done about it. This course develops the full risk management cycle described in ISO 31000:2018: establishing scope and criteria, identifying, analysing and evaluating risks, selecting treatments, and monitoring and reporting. Participants apply qualitative and quantitative techniques, including bow-tie analysis and Monte Carlo simulation, set key risk indicators and risk appetite, and relate the process to COSO ERM and to the enterprise risk expectations of GCC regulators and government entities.
Learning Outcomes
- ✓Define risk criteria, likelihood and consequence scales, and a risk matrix suited to an organisation's objectives.
- ✓Identify risks using structured techniques such as workshops, checklists and bow-tie analysis.
- ✓Analyse risks qualitatively and estimate exposure quantitatively with a simple Monte Carlo model.
- ✓Select and justify risk treatment options with owners, costs and target residual ratings.
- ✓Design key risk indicators with thresholds and escalation rules.
- ✓Prepare a risk report and heat map for executive management.
Target Audience
- Risk managers and ERM officers
- Risk coordinators and risk champions in business units
- Internal auditors and compliance officers
- Strategy and planning managers
Detailed Program Modules
01Risk Management Principles and Frameworks
- ISO 31000:2018 principles, framework and process
- COSO ERM components
- Risk management in GCC government and regulated sectors
02Context and Risk Criteria
- Scope, objectives and stakeholders
- Likelihood and consequence scales
- Risk appetite and tolerance
03Risk Identification
- Workshops, interviews and checklists
- Bow-tie and scenario techniques
- Writing clear cause-event-consequence statements
04Risk Analysis and Evaluation
- Qualitative rating and heat maps
- Quantitative analysis and Monte Carlo basics
- Prioritisation against risk criteria
05Risk Treatment
- Avoid, reduce, share and accept options
- Control effectiveness and residual risk
- Treatment plans and cost-benefit
06Monitoring, Reporting and Risk Culture
- Key risk indicators and thresholds
- Risk registers and reporting cycles
- Embedding risk culture and accountability
Training Methodology
Applied Project & Assessment
Applied Project
Participants build a risk register for a selected department or project: criteria and matrix, at least ten well-written risks, a quantitative estimate for one major risk, treatment plans and a set of KRIs with an executive risk report.
Assessment
Short diagnostic at the start, practical tasks linked to each learning outcome, and evaluation of the applied project against published criteria.


