Description

A focused course, tailored for you

The Hyperscaler Risk Function Operating Manual

How a risk lead inside a global platform company runs product, infra, and policy risk on one operating cadence the CEO can read.

Your dashboard has to show platform integrity, ads policy, regulator exposure, infra resilience, and youth safety on one page. Right now it shows five different formats from five different functions.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

Risk inside a global platform company is not the same job as risk inside a bank or an enterprise SaaS. The exposures are user-generated content moderation at scale, ads policy enforcement, sanctioned-region access, model and recommender harms, integrity attacks on civic events, child safety regulation in the UK, the EU DSA designation regime, the Brazil ANPD posture, the India IT Rules takedown clock, the US FTC consent order obligations, and the always-on resilience expectation of an infra stack that touches a third of the planet. Each of these is owned by a different function. Each reports in a different language. The risk lead has to translate them into one CEO-readable signal, week after week, while the underlying surfaces ship product daily. The friction is rarely the underlying data. It is that product PMs report risk on their roadmap timeline, infra reports it on SEV scoring, policy reports it on enforcement queue length, legal reports it as open investigations, and trust and safety reports it as escalations cleared. The risk lead is asked to render one operating picture out of five non-overlapping artefacts, and to do it on a cadence the CFO can sign and the board can sit through.

What you walk away with

A single one-page risk dashboard the CEO and CFO read on the same cadence.
A scoring model that lets product, infra, policy, legal, and trust and safety speak one language.
A 90-minute escalation grammar from SEV1 finding to executive readout.
A regulator readout template that maps to DSA, FTC, ANPD, India IT Rules, and UK OSA without re-engineering.
A quarterly risk cadence the board signs without redrafting.

The 12 modules

Module 1. The hyperscaler risk taxonomy

A taxonomy that survives a global org chart with product, infra, policy, legal, trust and safety, and regulator response all speaking different dialects. Maps each exposure class to a single accountable executive and a single artefact that proves the exposure is being managed. Includes the test for collapsing overlapping categories and the test for splitting one category into two when scope grows past one owner.

Module 2. The one-page CEO dashboard

The layout, the scoring, the colour grammar, and the source-of-truth map for a dashboard the CEO reads in under three minutes. Covers the rule for what gets a line, what stays in the appendix, and what gets retired. Includes the worked example of a Q1 dashboard that survived a CFO challenge and the worked example of one that did not.

Module 3. The unified scoring model

A scoring framework that lets product PMs, SREs, policy operators, legal counsel, and trust and safety leads score risk in their own dialect and have the numbers roll up to one signal. Covers likelihood, impact, velocity, and reversibility. Includes the calibration session pattern that gets product, infra, and policy to agree on a single 7 versus 8 score in 40 minutes.

Module 4. Platform-integrity exposure

Civic integrity, election integrity, coordinated inauthentic behaviour, recommender-system harm, and the running operational picture of attacks against the surface. Covers how to score active attack campaigns alongside chronic baseline harm, how to brief the CEO on a live integrity incident, and the readout pattern for a head-of-state-level external escalation.

Module 5. Ads policy and revenue surface risk

Enforcement queue length is a lagging indicator, not a risk score. This module covers the leading indicators that predict ads-policy blowups, the relationship between policy enforcement and ad revenue, the regulator-facing readout for political ads transparency, and the grammar for explaining an enforcement gap to the CFO without making it look like a revenue choice.

Module 6. Infra resilience and SEV translation

Infra reports risk in SEV terms. The CEO reads it in business terms. This module covers the translation layer between SEV1 to SEV4 scoring and platform-level resilience risk, the cadence for joint risk and reliability reviews, and the pattern for a single resilience score that aggregates third-party dependency, regional failover capacity, and recovery-time history.

Module 7. EU DSA designation regime

Operating under the Digital Services Act as a designated Very Large Online Platform. Covers the systemic-risk assessment cycle, the independent auditor relationship, the transparency-report cadence, the trusted-flagger handling pattern, and the operating-cost grammar for explaining DSA obligations to the CFO and the board.

Module 8. US FTC consent-order operations

Running risk under an active FTC consent order. Covers the privacy programme reporting cadence, the assessor relationship, the materiality threshold for self-reporting a programme deviation, the internal escalation grammar for a potential breach of order, and the pattern for briefing the board on consent-order health each quarter.

Module 9. ANPD, India IT Rules, and UK OSA

Brazil's ANPD posture, India's IT Rules takedown clock, and the UK Online Safety Act child-safety regime. Covers the operating cadence each regulator expects, the local-team-to-global-risk reporting line, the readout template each regulator wants, and the pattern for explaining a multi-jurisdiction enforcement event without losing the CEO in the third paragraph.

Module 10. Model and recommender risk

Recommender-system harm, generative-model output risk, training-data exposure, and the running risk picture for the AI surfaces. Covers the scoring overlay for AI-specific exposure on top of the unified scoring model, the pattern for a model-risk review board, and the grammar for the CEO readout when a model behaves outside its design envelope.

Module 11. The 90-minute escalation grammar

From SEV1 product-integrity finding to executive readout in 90 minutes. Covers the trigger criteria, the on-call risk lead pattern, the first-page brief layout, the question the CEO will ask before reading the second paragraph, and the rule for what gets escalated immediately versus what goes into the next scheduled risk review.

Module 12. Quarterly board risk readout

The cadence, the artefact, the pre-read sequence, and the rule for what survives into the board pack versus what stays in the executive risk committee. Covers the scoring trend chart the board reads first, the regulatory-exposure heat map, the worked example of a board pack that closed a session in 25 minutes, and the worked example of one that ran two hours over.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

Module 1 to 3 land the operating language. Taxonomy, dashboard, scoring.

Module 4 to 6 cover the three big internal exposure surfaces. Integrity, ads policy, infra.

Module 7 to 10 cover the regulator regimes that drive the calendar. DSA, FTC, ANPD, OSA, IT Rules, model risk.

Module 11 and 12 land the escalation grammar and the board cadence.

What you get with this course

12 written modules in the Art of Service learning environment.
Downloadable one-page CEO dashboard template.
Unified scoring model spreadsheet with calibration worked examples.
Regulator readout templates for DSA, FTC consent order, ANPD, UK OSA, India IT Rules.
90-minute escalation brief template.
Quarterly board risk readout template with two worked examples.
Hand-built implementation playbook sized to your three highest-exposure surfaces.

What you will have in hand by Day 1, Week 1, Month 1

Within 24 hours your account in the learning environment is provisioned and the hand-built implementation playbook lands alongside it.

Module 1 to 3 are typically completed in week one.

Module 4 to 10 are paced across weeks two to five.

Module 11 and 12 are completed alongside the first live board readout you draft using the templates.

Before and after

Before

Five functions reporting risk in five dialects. The CEO gets a stitched-together picture each Monday and the CFO has to ask three follow-up questions before signing.

After

One dashboard, one scoring model, one cadence. The CEO reads the platform risk picture in three minutes and signs the regulator readouts without re-engineering them.

What happens if you do not address this

The cost of the current operating gap is not the cost of a regulator fine. It is the cost of executive time spent re-stitching the picture each week, the cost of an integrity event landing on the CEO's desk without a clean readout, and the cost of a consent-order coordinator catching a gap the risk function should have flagged first.

Who it is for

A risk lead inside a global consumer platform or hyperscaler. You sit between product, infra, policy, legal, trust and safety, and the regulator response team. You own the operating cadence that turns five functional dialects into one number the CEO trusts.

Who this is NOT for. Not for risk analysts inside banks running Basel capital reporting. Not for GRC consultants selling SOC 2 readiness. Not for compliance counsel running policy drafting in isolation from operations. The course assumes you already sit inside a platform business and need the operating manual, not the regulatory primer.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Roughly two to three hours per module of reading and template work, plus the time you would already spend drafting your weekly risk readout. Most learners complete the course alongside a live quarterly cycle and use the templates immediately.

Why $199 is the right number

Off-the-shelf enterprise GRC training assumes a bank or enterprise SaaS operating model. Big four advisory engagements deliver a slide deck and a maturity score. Free regulator guidance covers the obligation, not the operating cadence. This course is the operating manual specifically for a risk lead inside a global consumer platform, with the templates and the implementation playbook attached.

FAQ

Is this a regulatory primer?

No. The course assumes you already know the obligations under DSA, FTC consent orders, ANPD, OSA, and India IT Rules at a working level. The course is the operating manual that converts those obligations into one running cadence.

Does the implementation playbook reference my specific surfaces?

Yes. The playbook is hand-built to your three highest-exposure surfaces, which you nominate when your account is provisioned.

What is the delivery format?

Written modules, downloadable templates, and the hand-built implementation playbook. No streaming media.

Can I share the templates with my team?

Yes. The templates are licensed for internal team use under one risk function.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.