Clear explanations of the concepts behind governance, risk and compliance. No assumed expertise. No unnecessary jargon.
Learn how to assess risk likelihood and impact, build a 5×5 risk matrix, justify risk scores and understand the limitations of qualitative scoring through practical examples.
Learn how to conduct a risk assessment from start to finish, including risk identification, scoring, control evaluation, residual risk, appetite and treatment planning, using a realistic fintech case study.
Learn how to write clear, actionable risk statements using the Cause–Event–Impact method, with practical cybersecurity, operational and third-party risk examples.
Understand inherent and residual risk, how controls influence risk exposure, and how to perform evidence-based assessments using realistic GRC examples.
A practical introduction to Enterprise Risk Management (ERM), covering risk identification, assessment, treatment, monitoring, and reporting. Learn how organisations manage risk and how GRC professionals apply these principles in real-world scenarios.
Explore the day-to-day responsibilities of a GRC analyst, from risk assessments and vendor due diligence to security control testing and compliance monitoring. Discover the skills, tools, and practical workflows needed to succeed in a GRC role.