Certified Enterprise Risk Management Professional/Analyst
A comprehensive professional certification designed to develop advanced skills in identifying, assessing, managing, and monitoring enterprise-wide risks. The programme follows global ERM frameworks, including ISO 31000, COSO ERM, and industry standards used by risk professionals across sectors.
Learners gain practical expertise in risk frameworks, governance structures, risk assessment tools, control environments, reporting systems, and building a risk-aware organisational culture. The course includes analytical methods, case studies, and strategic risk integration.
Module 1: Foundations of Enterprise Risk Management (ERM)
Introduces ERM concepts, risk principles, key terminology, ISO 31000 and COSO frameworks, and the strategic importance of risk management in organisations.
Module 2: Risk Governance, Roles & Organizational Structure
Covers governance frameworks, risk committees, board oversight, three lines of defence model, and integrating ERM into organisational strategy and decision-making.
Module 3: Risk Identification Techniques & Tools
Explores techniques such as risk workshops, interviews, SWOT, PESTLE, bow-tie analysis, event trees, brainstorming, scenario analysis, and industry-specific risk mapping.
Module 4: Risk Assessment, Measurement & Prioritization
Teaches qualitative and quantitative assessment, likelihood–impact scoring, heat maps, risk matrices, risk appetite and tolerance, and advanced risk quantification methods.
Module 5: Risk Treatment, Controls, Mitigation & Response Planning
Covers risk treatment options, internal controls, process controls, mitigation strategies, contingency planning, cost–benefit analysis, and selecting effective control measures.
Module 6: Risk Monitoring, Reporting & Key Risk Indicators (KRIs)
Explains risk monitoring frameworks, dashboard reporting, KRIs, audit trails, incident tracking, and continuous improvement mechanisms for ERM implementation.
Module 7: Strategic Risk Integration, Culture & Decision Support
Focuses on embedding ERM into strategic planning, project management, culture development, leadership behaviours, and using risk intelligence for decision support.
Module 8: ERM Framework Implementation, Maturity Models & Case Studies
Covers practical implementation steps, maturity assessments, benchmarking, documentation practices, and lessons from global ERM successes and failures.
ERM frameworks (ISO 31000, COSO ERM) and principles
Organisational risk governance and oversight models
Techniques for identifying organisational risks
Methods for analysing, assessing, and prioritising risks
Designing and applying risk treatment and control measures
Risk monitoring, reporting, and key risk indicators
Strategic integration of risk into leadership decisions
Implementing ERM frameworks and evaluating maturity
Risk officers and analysts
Governance and compliance professionals
Internal auditors and financial controllers
Project managers and strategy officers
Operations and business continuity staff
Students studying risk management, governance, or finance
Professionals transitioning into ERM roles
Start your journey to expertise today
Sign up to our newsletter