One place to find explanations, practical guides and resources.
Learn how to assess risk likelihood and impact, build a 5×5 risk matrix, justify risk scores and understand the limitations of qualitative scoring through practical examples.
Learn how to conduct a risk assessment from start to finish, including risk identification, scoring, control evaluation, residual risk, appetite and treatment planning, using a realistic fintech case study.
Learn how to write clear, actionable risk statements using the Cause–Event–Impact method, with practical cybersecurity, operational and third-party risk examples.
Understand inherent and residual risk, how controls influence risk exposure, and how to perform evidence-based assessments using realistic GRC examples.
Learn how to use the free GRC Workshop ERM Toolkit with this step-by-step guide. Discover how to document risks, assess inherent and residual risk, evaluate controls, monitor risk appetite, track treatment actions, and interpret dashboards using a realistic, fictional business scenario.
Download a free Excel-based ERM Toolkit designed to support risk assessments, documentation, and monitoring. Suitable for beginners and experienced practitioners looking to develop practical risk management skills or strengthen their existing processes.
A practical introduction to Enterprise Risk Management (ERM), covering risk identification, assessment, treatment, monitoring, and reporting. Learn how organisations manage risk and how GRC professionals apply these principles in real-world scenarios.
Explore the day-to-day responsibilities of a GRC analyst, from risk assessments and vendor due diligence to security control testing and compliance monitoring. Discover the skills, tools, and practical workflows needed to succeed in a GRC role.