NEVADA | PROFESSIONAL EXPERIENCE

Program Professional Framework

Certified Governance, Risk and Compliance Professional – GRC

Program Overview

Practitioners working in GRC teams need hands-on skills to turn policies and frameworks into daily routines. This practitioner course walks through building a working GRC programme: a policy management lifecycle, risk and control self-assessment, a risk and control matrix, compliance monitoring, issue and action tracking, and integrated reporting. It uses ISO 31000, COSO Internal Control and ISO 37301 as reference points and works through cases from GCC banks, insurers and energy companies, where supervisors expect documented, testable controls and timely remediation of findings.

Learning Outcomes

✓Run a policy management lifecycle from drafting and approval to attestation and periodic review.
✓Facilitate a risk and control self-assessment workshop and record results consistently.
✓Build a risk and control matrix linking processes, risks, controls, owners and test steps.
✓Test the design and operating effectiveness of key controls and document exceptions.
✓Track issues and remediation actions to closure with clear ownership and deadlines.
✓Compile an integrated GRC dashboard for senior management.

Target Audience

GRC analysts and officers
Internal control and SOX-style control specialists
Operational risk officers
Compliance monitoring and testing staff

Detailed Program Modules

01GRC Programme Building Blocks

Governance, risk and compliance as one operating model
Roles across the three lines
ISO 31000, COSO Internal Control and ISO 37301 reference points

02Policy Management

Policy hierarchy and templates
Approval, communication and attestation
Policy exceptions and review cycles

03Risk and Control Self-Assessment

Workshop planning and facilitation
Inherent and residual risk rating
Documenting control descriptions

04Risk and Control Matrices and Testing

Designing a risk and control matrix
Test of design and test of operating effectiveness
Sampling and evidence standards

05Issues, Incidents and Remediation

Issue logging and severity rating
Action plans and follow-up
Loss events and lessons learned

06Integrated Reporting and Tools

KRIs and compliance metrics
GRC dashboards for management
Using GRC software for workflow and records

Training Methodology

Interactive expert-led sessions grounded in workplace examples

Case studies and practical exercises drawn from the region

Group workshops with peer review of decisions and deliverables

Formative feedback against clear performance criteria

Applied Project & Assessment

Applied Project

Participants build a GRC package for one business process: a risk and control matrix with ten key controls, test scripts with sample results, an issues log with remediation actions and a one-page GRC dashboard.

Assessment

Short diagnostic at the start, practical tasks linked to each learning outcome, and evaluation of the applied project against published criteria.

University Certificate & International Accreditation

Professional Certificate accredited by University of Malaya in Certified Governance, Risk and Compliance Professional – GRC

International accreditation: International Auditors Group (IAG)