Operational risk has become one of the most critical threats to organisational success in an increasingly volatile and interconnected world. The Certified Operational Risk Officer (CORO) executive programme is designed specifically for senior professionals who need to anticipate, manage, and respond to operational disruptions—whether from cyber threats, regulatory shifts, third-party breakdowns, or unforeseen crises. Through interactive modules, participants will learn to design and implement a full Operational Risk Management (ORM) Framework, develop Key Risk Indicators (KRIs), conduct Risk and Control Self-Assessments (RCSAs), and integrate operational risk into broader enterprise strategy and governance.
Overview
Office of Admission
Programme Structure
Day 1: Foundations of Operational Risk Management
Day 2: Governance and Regulatory Alignment
Day 3: Risk Identification, Measurement & Analysis
Day 4: Monitoring & Control Mechanisms
Day 5: Mitigation, Reporting & Integration
Key Outcomes
Upon completion,
participants will
be able to:
participants will
be able to:
- Establish and implement a robust Operational Risk Management (ORM) framework
- Identify, measure, monitor, and mitigate a wide range of operational risks
- Integrate risk indicators and RCSAs into strategic business processes
- Conduct effective scenario analysis, stress testing, and root cause evaluations
- Align operational risk practices with strategic business goals
- Build organisational risk culture and embed accountability across the three lines of defence
- Build organisational risk culture and embed accountability across the three lines of defence
- Apply international standards such as ISO 31000, COSO ERM 2017, and Basel II/III/IV
Learning
&

The CERO programme is delivered through an intensive five-day experience that blends strategic insights with hands-on application. Each session is designed to help professionals translate theory into practice, using real-world scenarios and industry-tested frameworks.
Assessments
Learning Approach
Immersive case-based learning drawn from actual operational risk incidents
Facilitated group discussions and breakout exercises to deepen understanding
Step-by-step implementation of Operational Risk Management (ORM) frameworks
One-on-one coaching and expert feedback during guided project work
Peer-to-peer engagement to share insights across sectors and industries
Final Assessment
Each participant will complete a case study based on either:
- Their own organisation (preferred), or
- An approved case study provided by the programme team
This practical assignment requires participants to demonstrate mastery of key concepts by:
- Designing a complete Operational Risk Management (ORM) Framework
- Establishing Key Risk Indicators (KRIs) and Risk & Control Self-Assessments (RCSAs)
- Identifying root causes of operational risks across categories (e.g., market, credit, compliance, cyber)
- Implementing risk monitoring tools, escalation mechanisms, and reporting structures
Who Should Attend
This programme is ideal for:
Minimum Requirements:
- Senior risk managers and compliance leaders
- Heads of internal audit, operations, or governance
- Executives overseeing enterprise risk and regulatory strategy
- Professionals tasked with developing or strengthening ORM systems
- Minimum 5 years of experience in risk management or related field
- Bachelor's degree or equivalent professional qualification
- Current role in operational risk, compliance, or governance
- Basic understanding of financial services regulations