Finance, Accounting and Audit
Financial Risk and Compliance
Enterprise Risk Management (ERM)
Running a risk framework that changes a decision, rather than maintaining a register nobody reads.
- Duration
- 5 days
- Contact hours
- 30
- Level
- Intermediate
- Fee from
- On enquiry
Overview
Most enterprise risk management produces a register with a heat map attached and no evidence that anything was decided differently because of it. The usual causes are a register built in a workshop and never revisited, risks described so generally that no control could address them, appetite expressed as a sentence rather than a limit, and reporting sent to a committee with no authority to act. This week is about the parts that bite: writing a risk so it is actionable, setting appetite with numbers, and connecting risk to the decisions the organisation actually takes.
Who should attend
Risk managers and officers, executives accountable for a risk area, internal auditors who assess the framework, and board and committee members who receive the reporting.
What you will be able to do
- Write a risk so that a specific control could address it.
- Assess likelihood and impact without producing a false quantification.
- Express appetite and tolerance as limits somebody can breach.
- Connect a risk to the decision, project or budget it should influence.
- Report so that a decision follows rather than an acknowledgement.
How it is taught
Short input, then work, across 5 days of roughly 6 teaching hours each. Exercises run on situations delegates bring rather than on a case study written for a different organisation. Cohorts are capped so that everybody is asked something.
Available as classroom, live online, in house.
Programme outline
Day 1
Why registers stop working
- Risks written so broadly that no control addresses them
- A register built in a workshop and never revisited
- Heat maps, and the precision they imply and lack
- Evidence that a decision changed because of the framework
Day 2
Identifying and describing risk
- Cause, event and consequence, separated
- Risk against issue, and against a control weakness
- Emerging risk, and how it actually gets noticed
- Ownership that comes with authority
Day 3
Assessment
- Likelihood and impact without false quantification
- Inherent, residual, and the control effectiveness between them
- Correlated risks, and the scenario that triggers several
- Velocity, and how long the organisation would have
Day 4
Appetite and response
- Appetite as a limit rather than a sentence
- Tolerance, and what happens when it is exceeded
- Treat, transfer, tolerate and terminate, costed
- Accepting a risk formally, with a name against it
Day 5
Into decisions
- Risk inside a capital or project decision
- Indicators that move before the risk does
- Reporting to a body that can act
- Assurance mapping, and who is actually testing what
What you leave with
- A rewritten extract of the delegate's own register, in actionable terms.
- An appetite statement with quantified tolerances for two or three risks.
- A reporting format aimed at the decisions the recipient can actually take.
Dates and fees
| Dates | Location | Format | Fee |
|---|---|---|---|
| 23 to 27 November 2026 | Dubai, United Arab Emirates | Classroom | US$1,500 |
| 30 November 2026 to 4 December 2026 | Kampala, Uganda | Classroom | US$1,500 |
| 7 to 11 December 2026 | Lagos, Nigeria | Classroom | US$1,500 |
| 14 to 18 December 2026 | Cape Town, South Africa | Classroom | R15,000 |
Fees are per delegate and cover tuition, all programme materials and the certificate. Travel, accommodation and visas are arranged by the delegate. Registration closes two weeks before a programme starts.
Certificate
A GATI certificate recording what was attended, issued after the programme has run and attendance has been taken. Attending at least 80 per cent of the days earns a certificate of completion; attending less earns a certificate of attendance stating exactly what was attended. Every certificate carries a code that anybody can check against GATI's own record.
It records participation. and GATI does not claim one it does not hold.