Governance, risk & compliance (GRC) training
Practical training for boards, managers and specialists on governance, risk, compliance and resilience.
Learn how to run governance, risk and compliance as one system.
This course explains what governance, risk and compliance are, how they fit together, and how to connect them with business continuity, cyber and third-party risk. It uses recognised standards and real examples, and is adapted to your sector and region. Delivery is online or in person, in public or in-house sessions.
Background reading: What is Governance, Risk & Compliance (GRC)?. For advice rather than training, see our GRC consulting.
Audience and outcomes.
Board and senior managers
Understand responsibilities, oversight questions and the reports to ask for.
Risk, compliance and audit staff
Build practical skills in registers, controls, testing and reporting.
Business continuity and resilience managers
Link continuity, incident and supplier risk to wider governance.
IT, security and procurement
Work with shared control sets, third-party risk and evidence.
After the course, participants should be able to explain the three disciplines, map key obligations, use a risk and control framework, contribute to policies and reports, and recognise how continuity and resilience fit in.
Modules.
GRC fundamentals
Definitions, purpose, benefits, the three lines model and how GRC links to ERM and operational resilience.
Governance
Boards and committees, decision rights, delegated authority, ethics and culture, accountability and reporting.
Risk management
Risk appetite, identification, assessment, treatment, registers, key risk indicators and links to ISO 31000 and COSO.
Compliance
Mapping laws, regulations, standards and contracts to controls. ISO 37301, ISO 27001, ISO 22301, sector rules and regional examples.
Controls and assurance
Control design and testing, internal audit, evidence, audit readiness and handling findings.
Third-party, concentration and cyber risk
Supplier tiering, due diligence, exit plans, concentration risk and cyber governance.
Continuity, incident and crisis governance
How continuity plans, incident management, crisis arrangements and emergency planning are overseen.
Reporting, tools and improvement
Dashboards, metrics, GRC tools, lessons from incidents and continual improvement.
Formats and style.
In-house
Delivered for your organisation, using your policies, risks and regulators as examples.
Public sessions
See the course calendar for dates.
Online or in person
Live online or classroom sessions in the Gulf States and Middle East.
Workshops and exercises
Case studies, group exercises, and a tabletop exercise on a governance or resilience scenario.
GRC training questions.
How long is the course?
Is this a BCI certification course?
Can the course use our own policies and risks?
Do you provide GRC consulting too?
Talk to ADVOX about GRC training.
We aim to reply to your enquiry within 2 hours during working hours.