Enterprise Risk Management for Change Professionals

Description:

This course introduces change professionals to the core concepts of enterprise risk management and their relevance during large-scale business transformation. It prepares learners to collaborate effectively with senior risk stakeholders such as CISOs, CROs, auditors, and compliance managers. Key topics include the principles of enterprise risk management, importance of due care and due diligence to enterprise governance, understanding of third-party and regulatory risk, and the role of organisational resilience strategies such as incident response, disaster recovery, and business continuity planning. The course provides practical insight into how enterprise risk is governed, communicated, and embedded within major change programmes.

Objectives:

By the end of this course, you will be able to:

• Explain how enterprise risk management relates to business change initiatives.

• Identify key risk stakeholders and describe their roles and concerns (e.g. CISO, CRO, audit, compliance).

• Understand the meaning of risk acceptance, transfer, and management, and provide practical examples of each.

• Define and discuss core concepts such as due care and due diligence.

• Discuss how incident response, and business continuity planning contribute to resilience.

• Evaluate how to measure the effectiveness of a cybersecurity or risk management programme

• Contribute to the development of a business case for improved cyber-risk management.

Level: Intermediate

Duration: 2 days

Delivery mode: In person or virtual

Download further details about the Enterprise Management for Change Professionals course.