Risk, Security and Compliance
Risk management in an organization using ISO 31000:2018
Stationary | 2 days
Why is it worth it?
- You will master 12 essential tools for risk analysis and assessment
- You will learn over 40 tools that you can use to analyze and estimate risks in more complex organizations and projects.
- You will learn the practical side of the risk management process, based on the international standard ISO 31000:2018
- You will learn where, when and why it is necessary to analyze and estimate risks in an organization and what can happen if you do not do it properly
- You will learn how to meet the requirements and guidelines for risk analysis and assessment in ISO standards: 9001, 14001, 45001, IATF, 50001, etc.
- You will learn how to plan working groups to support the risk analysis and assessment process.
- You will learn how to convince the organization's management to make the necessary investments using the results of risk management analyses.
- You will prove your competences by obtaining a certificate - the training ends with a problem-based exam
Training duration: 2 days / 16 hours
Document confirming: The "Risk Management Representative according to ISO 31000" certificate is issued by Quality Austria - Polska Sp. z o. o.
It is also possible to obtain the international "Risk Management Representative" certificate for an additional fee of PLN 200 + VAT
During the training, in addition to understanding the model based on the ISO 31000:2018 standard, you'll also practice selected tools useful for risk analysis and assessment. Drawing on experience, your trainer will advise you on what mistakes to avoid and what to pay attention to when conducting analysis in your work.
- ETA (Event Tree Analysis)
- FTA (Fault Tree Analysis)
- SWOT analysis
- FMEA (Cause and Effect Analysis)
- Brainstorming
- Riskscan (risk identification)
- Risk score
- Risk matrix
Gift:
By signing up for the training, you will receive access to a recording of the over 90-minute webinar "Risk - meet the requirements of the new ISO 9001:2015 and ISO 14001:2015 standards".
This excellent introduction to risk management will familiarize you with our approach and provide a deeper understanding of the practical issues we'll cover during the training. The video also provides guidance on how to meet the requirements of ISO 9001 and ISO 14001 for risk analysis and assessment.
The training is aimed at:
- Management System Representatives (including ISO 9001, ISO 14001, Occupational Health and Safety) who want to consolidate their knowledge of risk management methods and tools
- Internal auditors responsible for the Management System who want to expand their risk knowledge
- Representatives, Directors and Risk Managers who want to systematize information
- Business Continuity Officers, Directors and Managers who want to expand their knowledge of risk management
- Presidents and Board Members interested in the topic of risk management in organizations
- People responsible for information security in an organization who want to better identify, define, and assess risks (risk identification)
- People who want to improve their qualifications in risk management
Additionally, the training is aimed at people who:
- Would like to expand their knowledge of methods and tools for identifying, analyzing and estimating risk
- They are not satisfied with the current effectiveness of the company's management and would like to improve it
- They want to increase the effectiveness of implementing the current strategy and increase the effectiveness of achieving strategic and operational goals
- They are not satisfied with the current state of integration of risk management with the Management System
- They are looking for answers on how to increase management efficiency and enforce the implementation of company, institution or organization goals based on risk management principles.
- They would like to add value to the company through effective risk management
- Want to learn how to integrate the ISO 9001 Quality Management System, ISO 14001 Environmental Management System, ISO 27001 and ISO 31000
- They are planning development in the field of Risk Management
Module I: Introduction to Risk Management
- Risk management basics
- Presentation of standards, guidelines and methodologies for risk management
- Principles of effective risk management
- Overview of the legal framework and standards
- Risk management structure according to ISO 31000
- Risk management principles and how to translate them into a framework and processes
- Risk management principles in ISO 31000
- Risk construction
- Design (understanding the organization, establishing policy, accountability, integration with processes, resources, methods of internal and external communication and reporting)
- Implementation of risk management, monitoring, review and continuous improvement of the structure
- Overview of the risk management process
- External and internal communication and consultation
- Risk analysis and risk assessment methods (ISO 31010)
Module II: Risk Management Processes and Risk Analysis
- Risk management process
- Establishing risk management procedures
- Establishing context and risks (system of context)
- Defining the context
- Defining organizational goals
- Defining the external and internal environment
- Context of the risk management process
- Risk analysis
- Consequences
- Probability
- Evaluation of existing control measures
- Determining the level of risk
- Qualitative and quantitative approaches to risk analysis
- Risk management
- Risk communication within the organization
Module III: Practical risk management workshops
- Design work using risk identification and analysis tools
- Jointly conducting a risk analysis on a model organization using the tools and methods discussed
- Exercises allowing: practical use of acquired theoretical knowledge and presented tools and methods
- Discussing cases of incorrect approach to risk analysis
- Preparation of design work using the tool for:
- Risk analysis
- Risk assessments
- Control
Module IV: Risk Documentation, Analysis, and Planning for Effective Reviews
- Internal organization and tasks in the risk management process
- Monitoring and reviewing the risk management process
- Documenting the risk management process
- Threats and crisis management
- ISO 22316 Security and Resilience
- Implementation of risk management into organizational processes
- Use of scenarios and risk registers
- Discussion of implementation methods for identifying threats in monitoring and assessing the effectiveness of activities
- Discussing the elements of a risk management process review
Module V: Exam The exam lasts: 90 minutes and consists of two parts: a single-choice ABCD test and a descriptive part during which the recommendations of the standard and the tool must be applied.
Tools:
During training, we will use the following tools and methods in the form of exercises and analyses:
- ETA (Event Tree Analysis)
- FTA (Fault Tree Analysis)
- SWOT analysis
- FMEA (Cause and Effect Analysis)
- Brainstorming
- Riskscan (risk identification)
- Risk score
- Risk matrix
