NEVADA | PROFESSIONAL EXPERIENCE

Program Professional Framework

Governance, Risk and Compliance (GRC)

Program Overview

GRC brings together three disciplines that are often managed separately: how an organisation is directed and controlled, how it manages uncertainty, and how it meets its legal and regulatory obligations. This foundation course explains each element and how they connect, using the IIA Three Lines Model, ISO 31000, COSO Internal Control and ISO 37301 as anchors. Participants learn to read governance structures, build a simple risk register, map compliance obligations and understand how audit and assurance fit together, with examples from GCC public bodies, banks and listed companies.

Learning Outcomes

✓Explain the roles of the board, management, risk, compliance and internal audit within the Three Lines Model.
✓Interpret a governance structure, including committee mandates and delegation of authority.
✓Build a basic risk register with ratings, owners and treatment actions using ISO 31000 concepts.
✓Map key regulatory obligations for a business area and link them to controls.
✓Describe how internal and external audit provide assurance over governance, risk and controls.

Target Audience

New staff in risk, compliance and internal audit functions
Department managers acting as risk or compliance focal points
Board secretariat and governance support staff
Finance and operations professionals moving into control roles

Detailed Program Modules

01Introduction to GRC

Why governance, risk and compliance must connect
Typical GRC failures and their consequences
GRC expectations in GCC regulated sectors

02Governance Essentials

Boards, committees and management roles
Delegation of authority and policies
Ethics and codes of conduct

03Risk Management Essentials

ISO 31000 risk process
Risk rating and heat maps
Building a basic risk register

04Compliance Essentials

Identifying regulatory and contractual obligations
Compliance controls and monitoring
Breach reporting and remediation

05Internal Control and Assurance

COSO Internal Control components
The IIA Three Lines Model
Internal audit, external audit and regulators

06Working in an Integrated Way

Shared taxonomy and common ratings
Joint reporting to management
Practical first steps for an integrated programme

Training Methodology

Interactive expert-led sessions grounded in workplace examples

Case studies and practical exercises drawn from the region

Group workshops with peer review of decisions and deliverables

Formative feedback against clear performance criteria

Applied Project & Assessment

Applied Project

Participants prepare a starter GRC map for their department: a governance chart, a short risk register, an obligations list linked to controls and a one-page summary of who provides assurance over each area.

Assessment

Short diagnostic at the start, practical tasks linked to each learning outcome, and evaluation of the applied project against published criteria.

University Certificate & International Accreditation

Professional Certificate accredited by University of Malaya in Governance, Risk and Compliance (GRC)

International accreditation: International Auditors Group (IAG)