Introduction
Advanced enterprise risk management, covering establishing and running the ERM unit, is a 1-week course for risk function leads, internal audit and governance managers and risk officers, ending with an ERM Unit Establishment and Facilitation Pack for the participant's own entity. Many entities adopt a risk framework on paper yet have no unit with a mandate, no calibrated register and no agreed appetite, so risk information never reaches a decision. Nominees already maintain registers or report risk to committees, and teaching is by case study on procurement and payroll files. CoreConcept Training Center delivers this enterprise risk management course.
Course Objectives
- Establish an ERM unit mandate, organisational position, reporting line and staffing profile for an entity
- Build an editable risk register and scoring toolkit covering causes, consequences, control effectiveness, residual risk and risk owners
- Define measurable risk appetite statements, tolerance thresholds and breach escalation protocols with named approval responsibilities
- Design a register review calendar, management and Board dashboards and overdue mitigation action reporting
- Assemble facilitator material of manuals, workbooks and competency rubrics for internal risk sessions
- Facilitate a risk identification session for colleagues and evidence facilitation competence against an assessment rubric
Target Audience
- Managers responsible for establishing or re-launching an enterprise risk management function within their entity
- Internal audit and governance managers responsible for assurance mapping and risk reporting to committees
- Risk officers responsible for maintaining the risk register, risk ownership and treatment action tracking
- Strategy and performance managers responsible for linking risk information to objectives and Board reporting
- Learning and capability managers responsible for delivering risk awareness sessions inside their own organisation
Course Outline
Day 1: Risk Function Baseline and Unit Mandate
- ERM Unit Mandate Types and Organisational Positioning Options
- Risk Maturity Assessment Baseline for the Existing Function
- Three Lines Model Mapping of Current Assurance Roles
- Public-Sector Operations Case Introduction and Scope Setting
- ERM Unit Charter Reporting Line and Staffing Profiles
Day 2: Core Risk Standards and Register Design
- ISO 31000 Principles Framework and Process Structure Walkthrough
- COSO ERM Components Compared With ISO 31000 Scope
- ISO 31073 Risk Vocabulary Applied to Entity Terminology
- Risk Register Field Design With Inherent Likelihood and Impact
- Risk Scoring Matrix Calibration and Worked Scoring Examples
Day 3: Register Build, Controls and Indicators
- Bow Tie Analysis of Procurement and Payroll Failure Paths
- Control Effectiveness Rating and Residual Risk Derivation Rules
- Risk Register Toolkit Build in a Spreadsheet Environment
- Key Risk Indicator Design With Escalation Trigger Thresholds
- Risk Owner Assignment and Treatment Action Deadline Tracking
Day 4: Appetite, Reporting and Facilitator Material
- Risk Appetite Statement Drafting With Measurable Appetite Criteria
- Tolerance Threshold Setting and Breach Escalation Protocol Design
- Management and Board Dashboard Build With Traffic-Light Indicators
- Register Review Calendar and Overdue Mitigation Action Reporting
- Facilitator Manual Participant Workbook and Competency Rubric Design
Day 5: Case Study Work and the ERM Unit Establishment Pack
- Case Entity Diagnosis Using the Maturity Baseline Checklist
- Register Population and Scoring From Case Procurement Documents
- Facilitated Risk Identification Session Delivered Against the Rubric
- Expert Feedback Panel on Appetite and Dashboard Deliverables
- ERM Unit Establishment and Facilitation Pack Completion
Skills You Will Gain
- ERM Operating Model Design
- Risk Register Architecture
- Risk Scoring Calibration
- Control Effectiveness Assessment
- Risk Appetite Articulation
- Board Risk Reporting
- Risk Session Facilitation
Why Attend This Course
- Deliver an ERM Unit Establishment and Facilitation Pack to the risk committee, the audit committee and the entity's executive leadership
- Decide which risks sit inside appetite, which breach tolerance and which must escalate, against criteria agreed before the breach
- Avoid the register that is populated once, scored inconsistently and never reviewed, and the dashboard nobody acts on
- Pass on facilitator manuals, participant workbooks and competency rubrics to directorate risk coordinators
Conclusion
Back at work, the participant presents the ERM Unit Establishment and Facilitation Pack to the risk committee and the executive leadership. They use it to approve the unit's mandate, staffing and reporting line, to adopt the appetite statements and tolerance thresholds, and to set the register review calendar. After the first reporting cycle, the entity should compare dashboard movements and overdue action counts against the baseline in the pack, note which escalation triggers fired and revise the scoring criteria accordingly.
Frequently Asked Questions (FAQ)
What should participants know before an advanced enterprise risk management course on establishing the ERM unit?
Participants should already work with a risk register or report risk to a committee. Bringing the entity's current register, organisation chart and any existing risk policy lets them build the unit blueprint and the appetite statements around their own structure rather than a generic one.
How does an advanced enterprise risk management course differ from a risk framework awareness course?
Framework awareness courses explain the standards and stop there. This course builds the function: the unit mandate and staffing, a calibrated register and scoring matrix, measurable appetite and tolerance, the reporting dashboards, and the facilitator material needed to run risk sessions internally.
How can an ERM unit show that enterprise risk management changed a decision?
By recording which risks breached tolerance, which escalation triggers fired and what the approving body decided in response, then tracking overdue treatment actions and dashboard movements against the baseline set when the register and the appetite thresholds were first approved.
What do participants take back from an advanced enterprise risk management course?
Participants take back an ERM Unit Establishment and Facilitation Pack: a unit blueprint, an editable risk register with a scoring matrix and worked examples, appetite statements with tolerance thresholds, a review calendar with dashboards, and facilitator manuals with workbooks and rubrics.
