Description

A focused course, tailored for you

The AVP Risk Officer Quarterly Self-Assessment Pack

A working pack for an AVP risk officer at a US regional bank preparing the quarterly risk self-assessment, the CCAR-adjacent commentary, and the issues-aging roll-up the Chief Risk Officer's office actually reads.

The CRO Office wants the issues-aging roll-up by end of week, with commentary on every line that has aged more than two quarters, and the residual ratings have to reconcile to what the first line attested.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

An AVP risk officer at a US regional bank sits between the first-line business owners who write the attestations and the CRO Office that decides which lines get challenged on the quarterly Risk Committee deck. The submission is rarely rejected outright. It comes back with redlines on the commentary, questions on why a residual rating moved without a control change, and a request to reconcile the issues-aging roll-up to the prior quarter. Most of the rework lands in the 48 hours before the Risk Committee read-out. The pack pulls the canonical narrative templates, the CCAR-adjacent commentary tone, the residual-rating change-log discipline, and the issues-aging cross-tab into one place an AVP can run from cover to cover.

What you walk away with

Submit a self-assessment narrative that does not come back with redlines from the CRO Office.
Write CCAR-adjacent commentary that reads in the same voice as the CFO narrative the regulators already see.
Reconcile the issues-aging roll-up to the prior quarter without manual cross-checking.
Defend a residual-rating change in the Risk Committee read-out with a one-page change log.
Cut the 48-hour rework cycle before Risk Committee to a single review pass.

The 12 modules

Module 1. The self-assessment narrative an AVP risk officer can defend

The CRO Office reads narrative first, ratings second. This module walks the structural template the senior risk committee accepts without redlines: the opening line that names the process domain in the same words the prior quarter used, the residual-rating sentence that ties to the change log, and the closing line that signals which items moved to Watch versus Closed. Worked example based on a commercial lending self-assessment.

Module 2. CCAR-adjacent commentary tone for the quarterly submission

Your self-assessment commentary sits in the same document family as the CFO's CCAR narrative the regulators read. The module covers the tone discipline that keeps the two consistent: hedging language that survives second-line review, qualifier words the CRO Office accepts, phrases that draw an OCC question and the safer alternatives. Includes a side-by-side rewrite exercise.

Module 3. The issues-aging roll-up the CRO Office actually reads

Past Due, Watch, Closed, Reopened. The taxonomy is standard but the roll-up that lands in the Risk Committee deck is read for three things: lines aged more than two quarters with no remediation evidence, lines that moved Closed without a tested control change, and lines that reappeared after a prior Closure. The module gives you the cross-tab structure and the commentary skeleton for each of the three flagged categories.

Module 4. Residual-rating change log discipline

A residual rating that moves from Moderate to Low without a corresponding control change is the single most common redline. The module walks the one-page change log structure that the CRO Office accepts: the inherent rating anchor, the control effectiveness rating with the test evidence reference, the residual derivation, and the change-since-prior-quarter line with the trigger event named. Worked example for an operational risk domain and a compliance risk domain.

Module 5. First-line attestation reconciliation

The first-line business owners write attestations. The second-line self-assessment has to reconcile to those attestations or explain the variance. This module covers the variance-explanation language that survives challenge, the cross-reference table that links attestation lines to self-assessment lines, and the escalation trigger when the first-line attestation is materially inconsistent with the residual rating you are about to file.

Module 6. Control test evidence linkage

Every Closed item needs control test evidence linked. The module walks the evidence-linkage discipline the CRO Office wants: test of design separate from test of operating effectiveness, sample size reasoning, the tester independence statement, and the remediation-validation note. Includes the linkage matrix template that compresses the evidence review from a two-hour task to a 20-minute one.

Module 7. Internal audit coordination the week before Risk Committee

Internal audit runs an independent test of selected self-assessment lines. The module covers the coordination cadence that keeps the audit findings out of the Risk Committee deck as last-minute surprises: the weekly status call agenda, the issue-pre-walk discipline, the language that signals a finding will be raised so the self-assessment commentary can pre-empt it, and the escalation rule when the audit conclusion contradicts the self-assessment rating.

Module 8. Risk Committee read-out preparation

The 48 hours before Risk Committee is when most of the rework lands. The module covers the read-out preparation discipline that compresses the cycle: the slide-template the CRO chairs, the commentary alignment between deck and self-assessment, the residual-rating defence one-pager for each line likely to be questioned, and the pre-read distribution rule that gives committee members enough context to ask informed questions instead of clarifying ones.

Module 9. OCC and Federal Reserve exam preparation

The self-assessment file is the primary evidence source when an OCC or Federal Reserve exam team requests the risk-management file for a process domain. The module covers the file-organisation discipline the exam teams expect: the narrative-rating-evidence linkage, the change-log audit trail across quarters, the management response file for prior exam findings, and the consistency check between the self-assessment file and the CFO narrative the same exam team has already read.

Module 10. Issue remediation tracking that survives quarterly review

An issue with a remediation owner, a target close date, a milestone log, and a tested control change at closure. That is the minimum bar. The module walks the remediation-tracking discipline that prevents the CRO Office from reopening lines: the milestone-evidence discipline, the close-out validation testing, the post-closure surveillance period, and the escalation rule when a remediation slips past its second target close date.

Module 11. Cross-domain consistency across business units

The bank-wide self-assessment is read for cross-domain consistency: the same control gap rated Moderate in one division and Low in another draws a CRO Office question on rating discipline. The module covers the divisional benchmarking the AVP risk officer can run before submission, the cross-reference table that surfaces inconsistencies, and the explanation language that defends a divergent rating when the underlying control environment genuinely differs.

Module 12. Annual refresh and the year-over-year trend narrative

The annual self-assessment cycle closes with a year-over-year trend narrative that the Board Risk Committee reads. The module covers the trend-narrative discipline: which lines to highlight as improving, which to flag as deteriorating without sounding the alarm prematurely, the quantitative-anchor table that supports the qualitative narrative, and the forward-look commentary on the next cycle's planned focus areas. Worked example based on an operational and compliance risk roll-up.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

The quarterly self-assessment template lands in inbox.

The issues-aging roll-up is due to the CRO Office by end of week.

Risk Committee read-out is 48 hours after submission.

An OCC or Federal Reserve exam team requests the risk-management file.

What you get with this course

Twelve text-based modules with worked examples for commercial lending, operational risk, and compliance risk domains.
Downloadable narrative templates, residual-rating change-log template, issues-aging cross-tab structure, and evidence-linkage matrix.
A hand-built implementation playbook delivered alongside course access, tailored to the buyer's business unit and submission cycle.
A 30-day money-back guarantee.

What you will have in hand by Day 1, Week 1, Month 1

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

Modules one through four cover the immediate submission discipline and can be worked in the first week.

Modules five through eight cover the cross-function coordination and the Risk Committee preparation.

Modules nine through twelve cover exam readiness, remediation tracking, cross-domain consistency, and the annual trend narrative.

Before and after

Before

The self-assessment submission comes back with redlines on commentary, residual-rating questions without control changes, and reconciliation requests on the issues-aging roll-up. Most of the rework lands in the 48 hours before Risk Committee.

After

The submission lands clean, the issues-aging roll-up reconciles to the prior quarter, the residual-rating change log defends every movement, and the Risk Committee read-out is a single review pass rather than a 48-hour scramble.

What happens if you do not address this

The CRO Office redlines do not get easier with seniority. An AVP risk officer who runs the same submission pattern through another four quarterly cycles starts accumulating a record of rework that the VP of Risk notices. The course compresses the rework loop while the seniority window is open.

Who it is for

An AVP-level risk officer at a US regional or super-regional bank, sitting in second line, owning the quarterly self-assessment for a business unit or a process domain. Reports to a VP or Director of Risk. Coordinates with first-line control owners, internal audit, and the CRO Office. Has run the self-assessment before, knows where the redlines usually land, and wants to compress the rework cycle.

Who this is NOT for. Not for first-line business owners writing attestations for their own process. Not for internal audit running the independent test of the self-assessment. Not for a VP or Director of Risk owning the divisional roll-up. The course is sized for the AVP doing the submission work and the Risk Committee prep.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Roughly six to eight hours across the twelve modules. Worked alongside a live quarterly submission cycle, the course pays back within the first submission.

Why $199 is the right number

Internal bank training programmes focus on first-line attestation discipline and broad risk-framework literacy. External GRC vendor courses focus on tool configuration. Neither covers the AVP risk officer submission discipline at this granularity. The closest alternative is sitting next to a VP of Risk for a full quarterly cycle, which is rarely available.

FAQ

Is this aligned to a specific bank's self-assessment template?

No. The course covers the structural discipline shared across US regional and super-regional bank self-assessment templates. The implementation playbook is the tailoring layer.

Will the templates work in the GRC tool my bank uses?

The narrative templates and change-log structures are tool-agnostic. They translate into Archer, ServiceNow GRC, OpenPages, and MetricStream form factors. The implementation playbook will note the field-mapping for your tool.

How is the implementation playbook different from the course?

The course teaches the discipline. The implementation playbook is hand-built for your business unit, your submission cycle, and your CRO Office's known redline patterns. It arrives alongside course access in the learning environment.

Do I need approval from my Risk leadership to take this?

Most AVPs do not. The course is a personal-development purchase that translates into better submissions. The implementation playbook is yours to apply at your own discretion.

What if my division does not run a quarterly self-assessment?

The course is built around the quarterly cadence. If your division runs an annual or semi-annual cycle the discipline still applies, but the pacing of modules one through four will be different. Note your cadence at purchase and the implementation playbook will adjust.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.