Diploma in Enterprise and Operational Risk Management

The Diploma in Enterprise & Operational Risk Management provides a professional-level understanding of how enterprise risk management and operational risk management are designed, integrated and sustained across an organisation. It is intended for learners who already understand basic risk concepts and now need to apply them in a more structured, practical and management-focused way.

Across eight modules, learners explore how ERM connects with strategy, planning, performance, governance, compliance, assurance, reporting and continuous improvement. The course goes beyond foundational risk awareness by focusing on how risk management is actually embedded into operating models, decision-making structures, controls, committees, management information and improvement cycles.

Learners begin by examining the Integrated ERM Operating Model, which shows how ERM fits into the way an organisation runs rather than existing as a separate process. They then explore decision rights, committees, escalation thresholds and accountability through the Risk Governance Decision Rights Matrix. The course also examines operational risk management through a practical lifecycle covering event identification, assessment, control, monitoring, response and learning.

A key focus of the diploma is the integration of enterprise, operational, compliance and regulatory risk. Learners will explore how regulatory obligations align with ERM, controls and assurance through the Compliance-as-Risk Integration Model, and how professional risk and control self-assessment can create credible links between risks, controls, effectiveness and residual risk. Later modules address treatment, assurance, oversight, dashboards, escalation and ERM maturity.

By the end of the course, learners will be able to understand and support the design of integrated ERM and operational risk frameworks, clarify governance and decision rights, contribute to professional RCSA activity, align compliance with the wider risk system, improve risk reporting, and support the ongoing maturity and sustainability of ERM within an organisation.