Home / Non-Accredited / Strategy, Risk, Governance & Compliance / Conquering Risk Management Course: Risk Registers and Contingency Testing (3 days)
Quick Look Course Summary:Conquering Risk Management Course: Risk Registers and Contingency Testing (3 days)
-
Length: 3 day(s)
-
Price (at your venue): 1 Person R 14,997 EX VAT 3 Person R 11,205 EX VAT 10 Person R 8,120 EX VAT
-
Certification Type:Non-Accredited
-
Locations & Venues: Off-site or in-house. We train in all major city centres throughout South Africa.
Get Free & personalised
Training Advice
Conquering Risk Management Course: Risk Registers and Contingency Testing (3 days)
A working risk register for your unit and a contingency plan that has been tested before it is needed.
A risk register that is updated once a year for the auditors protects nobody. This three-day risk management course shows managers how to run risk management as part of normal operations: identify the risks in the unit's processes, assess them consistently, plan for the ones that matter and test those plans before a real incident does it for them.
Days one and two cover the full cycle: risk management principles and the ISO 31000 process, process mapping, identification techniques, likelihood and impact ratings, risk appetite, treatment options, business impact analysis and contingency planning. Day three is a risk register workshop: delegates build or overhaul the register for their own unit, set key risk indicators, owners and review dates, and test a contingency plan through a facilitated tabletop exercise.
The extra day is what sets this course apart from the two-day version. Delegates leave with a working register and a tested plan, not only the theory. Examples are South African: health and safety duties, POPIA security compromises, infrastructure interruptions, supplier failure and fraud.
Why this course
For your organisation
- One risk method and language across units
- Risk registers that are owned, reviewed and used
- Contingency and continuity plans tested before a crisis
- Better risk information for executive, audit and risk committees
- Clear links between operational risk and health and safety, data protection and governance duties
For your delegates
- A complete risk management method, from context to review
- A risk register for your own unit, built on the workshop day
- Experience of running a tabletop test of a contingency plan
- Key risk indicators and a review routine you can keep using
What delegates will be able to do
- Explain risk management principles and the ISO 31000 process
- Relate risk to the unit's objectives, critical processes and risk appetite
- Identify and document risks using several techniques
- Analyse and evaluate risks for likelihood and impact, and set priorities
- Select risk treatments and assign owners and deadlines
- Carry out a simple business impact analysis for critical processes
- Develop contingency and continuity plans for priority scenarios
- Build and maintain a unit risk register with key risk indicators
- Test, review and revise contingency plans through exercises
- Report on risk to management and governance committees
Who should attend
Middle and senior managers, operations, branch and project managers, risk and compliance officers, internal auditors, SHE managers and business owners who need to set up or improve risk management in their area. The three-day course suits organisations that want delegates to leave with a working risk register; managers who need only the fundamentals can take the two-day course.
Course outline
Day 1 – Risk in context and risk identification
Principles of risk management
- Risk as uncertainty that affects objectives
- Risk management principles and the ISO 31000 process
- The risk framework: policy, roles and risk appetite
- Risk governance and the King Code in outline
- Why risk registers fail and how to avoid it
Business processes and objectives
- Mapping workflow and critical processes
- Linking risk to unit objectives and KPIs
- Process documentation as a risk tool
- Exercise: process map of a critical activity
Risk identification
- Brainstorming, SWOT and what-if techniques
- Gathering employee and stakeholder input
- Financial, operational, safety, environmental, information and compliance risks
- External events: infrastructure, economic and climate risks
- Writing a clear risk statement: cause, event and consequence
Case study: identifying risk in a South African operation
- Group analysis of a case organisation
- Comparing risk lists between groups
- Facilitator debrief
Day 2 – Assessing, treating and planning
Risk analysis and evaluation
- Likelihood and impact criteria
- The risk matrix and risk ratings
- Inherent versus residual risk
- Comparing risks with risk appetite to set priorities
Risk treatment
- Avoid, reduce, transfer, accept or pursue
- Designing controls and judging their effectiveness
- Cost-benefit thinking in treatment choices
- Treatment plans with owners and deadlines
Business impact analysis
- Gathering information on critical processes
- Identifying vulnerabilities and how long the unit can tolerate an outage
- Analysing impact over time
- Turning the analysis into recommendations
Contingency and continuity planning
- Defining risk scenarios and triggers
- Building action plans with resources and roles
- Disaster recovery basics: backups and hot, warm and cold sites
- Keeping documentation simple and clear
Day 3 – Risk register workshop and testing
Building the unit risk register
- Register structure: risk, cause, consequence, rating, controls, owner and actions
- Populating the register for your own unit
- Setting key risk indicators and review dates
- Peer review of registers
Testing contingency plans
- Types of test: walk-through, tabletop and full drill
- Running a facilitated tabletop exercise
- Capturing lessons and revising the plan
- Building a test schedule
Monitoring, reporting and improvement
- Risk reporting to management and committees
- Monitoring emerging risks
- Building risk into meetings and planning
- Training the team and keeping the process alive
Action plan and close
- Finalising your risk register and test plan
- Personal action plan
- Evaluation and close
How it is delivered
Three days, 08:30-16:00. In person at your offices anywhere in South Africa, at a BOTI venue, or live online. One delegate or a group of up to 20; examples drawn from your own risk register on request. Workbook, risk register template and tabletop exercise pack included. We deliver it at your offices in Johannesburg, Pretoria, Durban, Cape Town and anywhere else in South Africa, at a BOTI venue in Johannesburg, or live online for teams in different places.
What our clients say
“All training programmes were delivered in a highly professional manner, with effective coordination and strict adherence to our scheduling requirements. The facilitators demonstrated a commendable level of expertise, and the quality of delivery consistently met our expectations.”
“The course was efficiently scheduled and planned around our timetable. We were impressed by the quality of training”
“All training sessions were well-coordinated, professionally delivered, and aligned with our scheduling requirements. We were particularly impressed by the high standard of facilitation and the depth of expertise demonstrated throughout the programmes.”
Frequently asked questions
Can you run this course at our offices?
Yes. Most groups are trained at the client's premises anywhere in South Africa; we can also host it at a BOTI venue or deliver it live online.
How many delegates can attend?
From one delegate to a group of about 20. The price per delegate drops as the group grows – see the price table, or ask us for a quote.
Is the course accredited?
No. It is a non-accredited short course, and delegates receive a BOTI certificate of attendance.
Can we work on our own risk register?
Yes. In-house groups can bring their current register to the workshop day and leave with an updated version, and the tabletop exercise can be built around a scenario you choose.
Should we choose the two-day or the three-day course?
Choose the two-day Conquering Risk Management Course for risk assessment and contingency planning fundamentals. Choose this three-day course when you want delegates to build a working risk register and test a plan before they leave.
Does the course lead to ISO 31000 certification?
No. ISO 31000 is a guidance standard and organisations cannot be certified against it; the course uses it as a practical framework.
Related courses
Get your price – the more delegates, the less each pays
Change the options to see your price per person, then email yourself the quote and course outline.
Contact us now – we reply within 15 minutes during office hours
Monday to Friday, 08:00–17:00. After hours, we reply on the next working day – or call 011 882 8853.