Active Audit Agency

т: +38(044) 228-15-88

e-mail: info@auditagency.com.ua

Mastering risk assessment and optimal risk management based on ISO 31000

Summary

In this two-day intensive course participants develop the competence to master a model for implementing risk management processes throughout their organization using the ISO 31000:2009 standard as a reference framework. Based on practical exercises, participants acquire the necessary knowledge and skills to perform an optimal risk assessment and manage risks in time by being familiar with their life cycle. During this training, we will present the ISO 31000 general risk management standard, the process model it recommends, and how companies may use the standard

Who should attend?

  • Risk managers 
  • Business Process Owners
  • Business Finance Managers
  • Business Risk Managers
  • Regulatory Compliance Managers
  • Project Management
  • Persons responsible for information security or conformity within an organization

Learning objectives

  • To understand the concepts, approaches, methods and techniques allowing an effective risk management according to ISO 31000
  • To understand the relationship between the risk management and the compliance with the requirements of different stakeholders of an organization
  • To acquire the competence to implement, maintain and manage an ongoing risk management program according to ISO 31000
  • To acquire the competence to effectively advise organizations on the best practices in risk management

Course Agenda

Day 1: Introduction, risk management framework according to ISO 31000

  • Concepts and definitions related to risk management
  • Risk management standards, frameworks and methodologies 
  • Implementation of a risk management framework
  • Understanding an organization and its context

Day 2: Risk identification and assessment, risk evaluation, treatment, acceptance, communication and surveillance according to ISO 31000

  • Risk identification 
  • Risk analysis and risk evaluation 
  • Risk treatment
  • Risk acceptance and residual risk management
  • Risk communication and consultation
  • Risk monitoring and review
  • Certified ISO 31000 Risk Manager Exam (2 hours) 

Prerequisites

None

Educational approach

  • This training is based on both, theory and practice:
    • Sessions of lectures illustrated with examples based on real cases
    • Practical exercises 
    • Review exercises to assist the exam preparation
    • Practice test similar to the certification exam
  • To benefit from the practical exercises, the number of training participants is limited

Exam

  • The “Certified ISO 31000 Risk Manager” exam fully meets the requirements of the PECB Examination and Certification Program (ECP). The exam covers the following competence domains:
    • Domain 1: Fundamental principles and concepts in risk management
    • Domain 2: Risk management program
    • Domain 3: Risk assessment
    • Domain 4: Risk treatment
    • Domain 5: Risk communication, monitoring and improvement 
  • The “Certified ISO 31000 Risk Manager” exam is available in different languages (the complete list of languages can be found in the examination application form)
  • Duration: 2 hours 
  • For more information about the exam, refer to the PECB section on ISO 31000 Risk Manager Exams

Certification

  • After successfully completing the “ISO 31000 Risk Manager” exam, participants can apply for the credentials of Certified ISO 31000 Provisional Risk Manager or Certified ISO 31000 Risk Manager, depending on their level of experience. 
  • A certificate will be issued to the participants who successfully pass the exam and comply with all the other requirements related to the selected credential

General information

  • A student manual containing over 200 pages of information and practical examples will be distributed to the participants
  • A participation certificate of 14 CPD (Continuing Professional Development) credits will be issued to the participants
  • In case of failure of an exam, the participants are allowed to retake the exam for free under certain conditions.
  • ISO 31000 is a guidance on risk management and it is not a certifiable standard for an organization