A tailored course, built for your situation
Deeper command of the ISO 31000 risk framework
Master the architecture behind enterprise risk decisions
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
IC-level practitioner supporting risk-informed operations in a managed services environment
Who this is not for
This is not for consultants selling ISO 31000 implementation or auditors focused on certification checklists.
What you walk away with
- Fluency in the intent and application of each ISO 31000 principle
- Ability to map organisational actions back to framework clauses with confidence
- Sharper preparation of inputs for leadership reviews using standard-aligned reasoning
- Templates and playbooks that reflect real-world application of the framework
- Confidence to contribute in risk discussions with internal stakeholders
The 12 modules (with all 144 chapters)
Module 1. Introduction to ISO 31000 principles
Establish foundational understanding of the framework's intent, scope, and structure. Explore how it differs from compliance-driven standards and why it's gaining traction in strategic risk conversations.
12 chapters in this module
- What ISO 31000 is designed to achieve
- How it differs from ISO 27001 and SOC 2
- Core components of the framework
- The role of context in risk assessment
- Principles versus guidelines
- Integrating risk into decision making
- Leadership and commitment requirements
- Designing the risk management framework
- Understanding risk criteria
- The risk management process model
- Scope and boundaries
- First steps in implementation
Module 2. Risk framework design
Learn how to structure a risk management framework tailored to organisational context. Focus on integration with existing processes and long-term sustainability.
12 chapters in this module
- Assessing organisational context
- Defining risk governance structure
- Assigning roles and responsibilities
- Integrating with strategy processes
- Linking to performance management
- Establishing communication flows
- Resource allocation for risk
- Developing risk policies
- Creating framework documentation
- Aligning with legal requirements
- Setting risk criteria thresholds
- Maintaining framework relevance
Module 3. Risk assessment process
Master the end-to-end risk assessment cycle, from identification to analysis. Emphasize practical techniques for accuracy and defensibility.
12 chapters in this module
- Defining the risk assessment scope
- Identifying risk sources
- Stakeholder engagement techniques
- Risk event identification
- Cause and effect mapping
- Likelihood assessment methods
- Impact evaluation frameworks
- Risk analysis approaches
- Use of qualitative scales
- Data quality in risk assessment
- Documentation standards
- Review and validation
Module 4. Risk treatment options
Evaluate strategies for responding to risk. Understand how to select, implement, and monitor risk treatment plans effectively.
12 chapters in this module
- Risk treatment as decision making
- Avoidance versus reduction
- Transfer mechanisms
- Acceptance criteria
- Sharing risk with partners
- Designing controls
- Cost-benefit of treatments
- Implementation planning
- Monitoring effectiveness
- Updating treatment plans
- Escalation protocols
- Documentation of decisions
Module 5. Communication and consultation
Develop skills for effective risk dialogue across levels. Learn what to share, when, and how to ensure understanding.
12 chapters in this module
- Internal communication planning
- Consultation with stakeholders
- Tailoring risk messages
- Reporting formats
- Using visual aids
- Managing expectations
- Feedback mechanisms
- Escalation paths
- Documentation requirements
- Confidentiality handling
- Cultural considerations
- Timing of updates
Module 6. Monitoring and review
Implement systems to track risk performance and framework effectiveness over time. Focus on continuous improvement.
12 chapters in this module
- Key indicators for risk
- Frequency of reviews
- Performance measurement
- Audit integration
- Framework maturity assessment
- Corrective action process
- Trend analysis
- Benchmarking against peers
- Stakeholder feedback collection
- Reporting to leadership
- Update triggers
- Version control of documents
Module 7. Integration with governance
Align risk management with governance practices. Ensure risk informs oversight without becoming a compliance burden.
12 chapters in this module
- Governance expectations
- Board-level risk oversight
- Executive accountability
- Risk appetite statements
- Tone from the top
- Escalation to leadership
- Policy alignment
- Delegation frameworks
- Accountability mapping
- Performance incentives
- Ethical considerations
- Whistleblower mechanisms
Module 8. Application in managed services
Adapt ISO 31000 to environments where risk spans client and provider. Focus on clarity of boundaries and shared understanding.
12 chapters in this module
- Shared risk responsibilities
- Service level agreements
- Client onboarding risks
- Change management
- Incident response coordination
- Data handling protocols
- Third-party dependencies
- Contractual risk allocation
- Service continuity planning
- Client communication
- Audit readiness
- Escalation workflows
Module 9. Documentation and evidence
Build clear, defensible records that support compliance and learning. Focus on efficiency and reusability.
12 chapters in this module
- Document hierarchy design
- Risk register structure
- Policy writing standards
- Template creation
- Version control
- Retention policies
- Access controls
- Audit trails
- Worked examples
- Cross-referencing
- Automated workflows
- Storage and retrieval
Module 10. Stakeholder influence
Develop techniques to shape risk outcomes through non-authority. Build credibility and impact across teams.
12 chapters in this module
- Building trust with peers
- Presenting risk insights
- Using data to support claims
- Framing recommendations
- Managing pushback
- Collaborative decision making
- Escalation strategies
- Influencing without authority
- Developing executive summaries
- Anticipating objections
- Storytelling with risk
- Follow-up protocols
Module 11. Continuous improvement
Embed learning into the risk process. Focus on adaptive frameworks that evolve with organisational needs.
12 chapters in this module
- Learning from incidents
- Post-implementation reviews
- Feedback integration
- Updating risk criteria
- Revising treatment plans
- Training needs analysis
- Knowledge transfer
- Lessons learned systems
- Benchmarking progress
- Adjusting for growth
- Technology changes
- Regulatory updates
Module 12. Final implementation review
Consolidate learning into a personal action plan. Ensure fluency and confidence in real-world application.
12 chapters in this module
- Self-assessment of understanding
- Gap analysis
- Action planning
- Prioritizing next steps
- Resource identification
- Timeline setting
- Stakeholder alignment
- Risk communication plan
- Documentation finalization
- Review of templates
- Playbook customization
- Next steps and support
How this maps to your situation
- Supporting risk-aware decisions in managed services
- Preparing documentation that aligns with ISO 31000
- Contributing to leadership discussions with confidence
- Building reusable artefacts for ongoing use
Before vs. after
Before
Risk documentation feels scattered, and contributions to discussions require extra validation.
After
Inputs are grounded in framework logic, and risk decisions are shaped with confidence.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for steady progress with real-world application.
How this compares to the alternatives
Unlike generic risk courses, this program focuses exclusively on ISO 31000 application in operational environments, giving you targeted command rather than broad awareness.
Frequently asked
Who is this course for?
IC-level practitioners supporting risk and compliance functions in managed services or complex IT environments.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me pass a certification?
This course builds practical mastery of ISO 31000, not exam preparation, though it strengthens foundational knowledge.
$199 one-time. Approximately 3 hours per module, designed for steady progress with real-world application..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours