Operational risk has become one of the most critical threats to organisational success in an increasingly volatile and interconnected world. The Certified Operational Risk Officer (CORO) executive programme is designed specifically for senior professionals who need to anticipate, manage, and respond to operational disruptions—whether from cyber threats, regulatory shifts, third-party breakdowns, or unforeseen crises. Through interactive modules, participants will learn to design and implement a full Operational Risk Management (ORM) Framework, develop Key Risk Indicators (KRIs), conduct Risk and Control Self-Assessments (RCSAs), and integrate operational risk into broader enterprise strategy and governance.
Overview
Office of Admission
Programme Structure
Foundations of Operational Risk Management
Governance and Regulatory Alignment
Risk Identification, Measurement & Analysis
Monitoring & Control Mechanisms
Mitigation, Reporting & Integration
Key Outcomes
Upon completion,
participants will
be able to:
participants will
be able to:
- Establish and implement a robust Operational Risk Management (ORM) framework
- Identify, measure, monitor, and mitigate a wide range of operational risks
- Integrate risk indicators and RCSAs into strategic business processes
- Conduct effective scenario analysis, stress testing, and root cause evaluations
- Align operational risk practices with strategic business goals
- Build organisational risk culture and embed accountability across the three lines of defence
- Apply international standards such as ISO 31000, COSO ERM 2017, and Basel II/III/IV
Learning
&

Participants are expected to actively contribute and apply their own professional context throughout the programme. All learning tools and templates are designed for immediate relevance and use within their organisations.
Assessments
Learning Approach
Immersive case-based learning drawn from actual operational risk incidents
Facilitated group discussions and breakout exercises
Step-by-step implementation frameworks
One-on-one coaching and expert feedback
Peer-to-peer engagement
Final Assessment
Each participant will complete a case study based on either:
- Their own organisation (preferred), or
- An approved case study provided by the programme team
This practical assignment requires participants to demonstrate mastery of key concepts by:
- Designing a complete Operational Risk Management (ORM) Framework
- Establishing Key Risk Indicators (KRIs) and Risk & Control Self-Assessments (RCSAs)
- Identifying root causes of operational risks across categories (e.g., market, credit, compliance, cyber)
- Implementing risk monitoring tools, escalation mechanisms, and reporting structures
Who Should Attend
This programme is ideal for:
Minimum Requirements:
- Senior risk managers and compliance leaders
- Heads of internal audit, operations, or governance
- Executives overseeing enterprise risk and regulatory strategy
- Executives overseeing enterprise risk and regulatory strategy
- At least 3 years of experience in risk, audit, compliance, or financial services
- A solid understanding of capital markets and financial systems