Enterprise Risk Management (ERM) Masterclass

The programme

Programme overview

In today’s fast-evolving business landscape, Enterprise Risk Management (ERM) is essential to sustaining organisational resilience, protecting stakeholder value, and driving long-term success. This practical course empowers delegates with the knowledge and tools to implement and optimise robust ERM frameworks, with an emphasis on the internationally recognised ISO 31000 and COSO ERM models — used together deliberately, not redundantly: mature organisations typically apply COSO ERM for governance and strategic risk integration while using ISO 31000’s process for operational risk management.

Participants will discover proven methodologies for identifying, analysing, prioritising, and mitigating risks — building a risk-aware culture that turns uncertainty into strategic opportunity. You will learn how to design, embed, and continuously improve an ERM system tailored to your organisational context, including how King IV, and the emerging King V code, shape board-level risk governance expectations for South African organisations specifically.

Through expert-led sessions, hands-on exercises, real-world templates, and actionable tools, you’ll gain confidence to champion risk management, align ERM to business objectives, and respond effectively to emerging threats and opportunities.

Who should attend

Who is this programme for?

• Board Members & Executives
• Risk Managers & Officers
• Internal Auditors
• Compliance Professionals
• Project Managers
• Senior Leadership, Departmental Heads
• Anyone Responsible for Strategic Planning, Performance, or Risk Oversight

Learning outcomes

What you will learn

• Understand ERM Foundations: grasp key ERM concepts and the importance of a holistic risk approach organisation-wide
• Integrate Leading Frameworks: decode and apply ISO 31000 and COSO ERM models, and understand how King IV/V's Principle 11 shapes board risk governance for South African organisations
• Implement Effective Risk Processes: use advanced techniques for risk identification, analysis, evaluation, and treatment
• Develop and Embed Risk Culture: shape risk appetite, build effective policies, and promote accountability from the boardroom to the frontline
• Drive Performance and Resilience: align risk management with strategy, ensuring business continuity and regulatory compliance
• Apply Tools and Templates: use practical resources, including AI-assisted monitoring tools, for immediate implementation and value delivery

Added Value

• Sample Risk Champion job descriptions
• Risk committee terms of reference
• Risk appetite statement templates and guidance
• Horizon scanning and scenario planning guides
• Best-practice checklists, assessment models, and policy samples

Explore the programme

Detailed programme outline

• What is Enterprise Risk Management? Benefits and drivers of ERM adoption
• The ERM lifecycle: scope, objectives, roles, and responsibilities
• Management, board, and risk officer roles, including King IV/V's Principle 11 on board risk governance (job descriptions provided)
• Risk definitions and the risk landscape
• Risk profiles, risk dialogue, and shaping organisational risk culture
• Establishing and reviewing risk appetite
• What is risk appetite, and why does it matter?
• Distinguishing appetite, capacity, tolerance, and attitude
• Developing risk appetite statements (examples provided)
• The step-by-step risk management cycle and core principles
• Top-down vs. bottom-up identification
• Scenario planning, stakeholder analysis, interviews, workshops
• Quantitative and qualitative tools, including Monte Carlo simulation and AI-assisted horizon scanning
• Grouping, prioritising, and evaluating risks
• Using risk registers, KRIs, and KPIs, including AI-assisted real-time KRI monitoring
• Structure and benefits of ISO 31000
• Adapting to changing risk contexts
• Key principles for embedding risk management
• Design and operational principles for ERM
• Best available information, inclusivity, continual improvement
• Risk architecture, strategy, protocols
• The six elements: leadership, integration, design, implementation, evaluation, improvement
• Scope, context, and criteria
• The end-to-end risk management process: assessment, treatment, communication, monitoring, reporting
• Risk in strategic selection and performance
• COSO components: governance, culture, performance, communication, review
• Integrating governance, performance, and reporting
• Organisational design, risk assessment, communication, monitoring, review
• Oversight and reporting
• Scope creep, unrealistic timelines, skills gaps, missing roles
• Solutions and preventive strategies
• Keys to practical ERM rollout
• Culture-building, stakeholder engagement, coordination, and assurance
• The role of internal audit in ERM
• Strategic, operational, project, procurement, process, and reputational risks
• Risk categorisation models and interactions
• Team-based case studies to reinforce learning and demonstrate competency

Learning approach

How you will learn

Our diverse instructional approaches ensure effective learning:

– Lectures & Presentations: Engage with expert-driven, stimulating content.– Course Material: Access well-crafted supporting resources.– Group Work: Collaborate on discussions and case studies for practical insights.– Workshops & Role-Play: Participate in immersive, scenario-based activities.– Practical Application: Focus on applying theoretical knowledge in real situations.– Post-Training Support: Receive extensive support after training for skill implementation.

Discuss your requirements

Dates, duration & arrangements

Contact Ratomac to confirm dates, duration, delivery format, entry requirements and any applicable assessment or certification before booking.