Cyber Cultura course
ISO 31000: Enterprise Risk Management
A risk program that supports decisions and prioritizes investments.
Teaches how to build an enterprise-wide, cross-functional risk management program that supports decisions and the prioritization of investments. ISO 31000 is a guidelines standard: it guides the framework and the process, and is not certifiable.
- Workload
- 5 hours
- Format
- Online or in-company
- Investment
- On request
We’ll reply with dates, format and investment.
Who it’s for
- Enterprise risk managers and analysts.
- Compliance, internal controls and audit teams.
- Leaders who bring risks to committees and boards.
What you’ll develop
- Apply the principles, framework and process of ISO 31000, with appetite and tolerance.
- Define criteria and run the risk assessment end to end.
- Prioritize and treat risks with plans, owners, deadlines and benefits.
- Integrate strategic, operational, financial, cyber and continuity risks.
- Report to the committee and the board with KRIs, heatmaps and one-pagers.
Syllabus
5 hours
01ISO 31000 fundamentals
- Principles
- Framework: leadership and commitment, integration, design, implementation, evaluation and improvement
02Process
- Communication and consultation
- Scope, context and criteria
- Risk identification
- Risk analysis
- Risk evaluation
- Risk treatment
- Recording and reporting
- Monitoring and review
03Simulated example and practical artifacts
What the course includes
- Simulated example
- Practical artifacts
For your team
This course is also offered in-company, on-site or remote, as a private class for your company.
Cyber Cultura course
ISO 31000: Enterprise Risk Management
We’ll reply with dates, format and investment.
cyber@cyberconsulting.com.br