Content Outline

1. Introduction to ISO 31000, 31010, and 27005 risk management

   • Nature and impact of risk
   • Principles of risk management
   • Review of ISO 31000
   • Achieving the benefits of ERM

2. Enterprise risk management Architecture and Strategy

   • Planning and designing
   • Creating an ERM Policy and supporting documentation
   • Implementing and benchmarking
   • Measuring and monitoring
   • Improving and reporting
3. Risk Assessment and Risk Treatment Methodology (Protocol)

Establish a firm program starting point by using ISO 31000 to build out the initial ERM core policy. Throughout the class, your expert instructor will instruct how to convert ISO standard concepts and requirements into a real ISO-conforming Enterprise Risk Policy. 

• Complete ERM Policy
• ERM Context and Scope Document
• ERM Risk Assessment and Risk Treatment Methodology
• Document Procedure for Training and Development Needs Analysis
• ERM Program project kick-off document Procedure for Identification of ERM Project Requirements
• Procedure for Identification of Statutory, Regulatory, and Contractual Requirements

* ISO Standards are NOT included in this risk management training, nor provided in class. Students are encouraged to bring their own hard-copies of the standards to the class. ISO standards are available for purchase at www.iso.org.