Enterprise Risk Management

Identify uncertainty affecting organisational objectives and assess how existing controls respond. You will distinguish risk ownership, treatment and assurance, then develop monitoring information suited to management decisions. Cases include operational interruption, fraud, compliance failures and financial exposure.

Learning outcomes

• Build a risk register
• Assess control effectiveness
• Recommend a proportionate treatment

Main topics

• Risk context
• Identification
• Assessment
• Controls
• Treatment options
• Risk reporting

Practical task

Prepare a risk-control assessment for a fictional enterprise process.

Assessment

Assessment combines applied exercises, a documented case or practical portfolio and an individual written or oral explanation. Judgement considers technical accuracy, reasoning, evidence quality and the feasibility of recommendations.