A tailored course, built for your situation
Direct ownership of ISO 31000 risk assessments from initiation to sign-off
Build the muscle to own end-to-end risk framing with confidence and clarity
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Mid to senior-level risk and compliance practitioners in technology services firms with exposure to enterprise risk management frameworks
Who this is not for
Entry-level staff or those without active involvement in risk assessment processes
What you walk away with
- Own ISO 31000 risk assessments from scoping through to final sign-off
- Produce audit-ready risk treatment plans with documented rationale
- Facilitate cross-functional risk workshops with structured input and output tracking
- Apply ISO 31000 principles to cloud operations and managed services contexts
- Reduce review cycles by delivering complete, consistent, and credible assessments the first time
The 12 modules (with all 144 chapters)
Module 1. Initiating the ISO 31000 risk assessment
Define scope, stakeholders, and risk criteria aligned with business objectives. Establish thresholds and tolerance levels using real-world templates.
12 chapters in this module
- Define assessment scope
- Identify key stakeholders
- Set risk criteria
- Map to business objectives
- Establish risk appetite
- Document assumptions
- Align with leadership expectations
- Secure initial buy-in
- Baseline current controls
- Identify data sources
- Schedule stakeholder interviews
- Kickoff planning
Module 2. Risk identification across cloud and managed services
Apply structured techniques to uncover risks specific to hybrid environments, third-party dependencies, and SLA-driven operations.
12 chapters in this module
- Map asset inventory
- Use threat modeling
- Interview operations teams
- Extract risks from incident logs
- Scan change requests
- Review SLAs for risk triggers
- Identify vendor-related exposures
- Catalog service dependencies
- Assess geographic dispersion risks
- Evaluate staffing models
- Flag escalation patterns
- Cluster by risk domain
Module 3. Risk analysis using ISO 31000 guidance
Conduct qualitative and semi-quantitative analysis with consistent scoring, calibrated scales, and documented assumptions.
12 chapters in this module
- Choose analysis method
- Define likelihood scales
- Define impact scales
- Calibrate across teams
- Score each risk
- Apply risk modifiers
- Document rationale
- Plot risk heat map
- Identify outliers
- Validate with SMEs
- Update based on feedback
- Finalise analysis report
Module 4. Risk evaluation and prioritisation
Compare results against risk criteria to determine treatment paths. Focus effort on what matters most to the business.
12 chapters in this module
- Apply risk criteria
- Sort by significance
- Group by treatment need
- Flag urgent risks
- Identify tolerable items
- Document acceptance rationale
- Assign treatment owners
- Set deadlines
- Define success markers
- Escalate board-level items
- Update risk register
- Prepare summary brief
Module 5. Risk treatment planning
Develop actionable treatment plans with clear ownership, timelines, and success metrics. Tie mitigation to operational workflows.
12 chapters in this module
- Assign treatment strategy
- Define action steps
- Name responsible parties
- Set deadlines
- Link to controls
- Estimate effort
- Identify dependencies
- Build tracking sheet
- Integrate with tickets
- Align with sprint cycles
- Budget for mitigation
- Finalise plan
Module 6. Documentation for review and audit
Create clear, concise, and defensible records that meet internal audit and external compliance expectations.
12 chapters in this module
- Structure assessment report
- Write executive summary
- Detail methodology
- List identified risks
- Show analysis results
- Include heat maps
- Attach risk register
- Insert treatment plans
- Add workshop notes
- Insert approvals
- Version control
- Archive securely
Module 7. Facilitating cross-functional risk workshops
Lead effective sessions with technical and non-technical stakeholders to gather input, resolve conflicts, and gain alignment.
12 chapters in this module
- Set workshop goals
- Invite right participants
- Send pre-reads
- Design agenda
- Use facilitation techniques
- Manage group dynamics
- Capture decisions
- Resolve disagreements
- Assign actions
- Summarise outcomes
- Follow up promptly
- Update risk register
Module 8. Stakeholder communication strategies
Tailor messaging for different audiences , engineers, managers, auditors , to maintain engagement and ensure clarity.
12 chapters in this module
- Identify audience types
- Adjust technical depth
- Choose communication channel
- Write status updates
- Prepare leadership briefs
- Respond to queries
- Escalate appropriately
- Manage expectations
- Report progress
- Highlight risks
- Celebrate completions
- Maintain transparency
Module 9. Review and approval workflows
Navigate internal processes to secure timely sign-off from risk owners and senior sponsors.
12 chapters in this module
- Map approval chain
- Submit for review
- Track feedback
- Incorporate changes
- Clarify rationale
- Resubmit if needed
- Escalate delays
- Record approvals
- Update documentation
- Notify stakeholders
- Close review cycle
- Archive approval trail
Module 10. Continuous monitoring and review
Implement ongoing tracking to ensure treatment plans stay on course and new risks are detected early.
12 chapters in this module
- Set review frequency
- Monitor action completion
- Track risk triggers
- Scan for new threats
- Update likelihood impacts
- Reassess treatment plans
- Adjust for changes
- Report status
- Renew risk register
- Revalidate assumptions
- Schedule reassessment
- Update documentation
Module 11. Integrating ISO 31000 with other frameworks
Align risk assessments with SOC 2, ISO 27001, and NIST CSF to reduce duplication and strengthen overall posture.
12 chapters in this module
- Map to SOC 2
- Cross-reference ISO 27001
- Link to NIST CSF
- Align with COBIT
- Integrate PCI DSS
- Support GDPR compliance
- Harmonise control language
- Reduce assessment burden
- Avoid conflicting outputs
- Build unified view
- Share evidence
- Improve audit efficiency
Module 12. Building institutional risk capability
Turn individual expertise into repeatable, scalable practices that survive team changes and leadership transitions.
12 chapters in this module
- Document playbooks
- Train new staff
- Standardise templates
- Automate workflows
- Share lessons learned
- Measure improvement
- Update guidance regularly
- Collect feedback
- Scale to new domains
- Mentor junior staff
- Present results
- Institutionalise practice
How this maps to your situation
- When starting a new risk assessment
- While coordinating with engineering and ops teams
- During internal audit preparation
- Ahead of executive review
Before vs. after
Before
Reliant on guidance from others to initiate and structure risk assessments, with inconsistent documentation and frequent rework.
After
Confidently lead ISO 31000-aligned risk assessments from start to finish, delivering complete, credible, and sign-off-ready outputs on time.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed to be completed at your own pace over 6, 8 weeks.
If nothing changes
Continuing to operate without a structured, repeatable approach to risk assessment increases exposure to audit findings, delays in decision-making, and missed opportunities to demonstrate leadership in risk ownership.
How this compares to the alternatives
Unlike generic risk courses, this program is tailored to practitioners in cloud and managed services environments, with direct application to ISO 31000 and integration points to SOC 2, ISO 27001, and NIST CSF.
Frequently asked
Is this course suitable for someone in a technical delivery role?
Yes, especially if you're involved in risk assessment, compliance, or internal audit processes within cloud services or managed infrastructure environments.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me prepare for internal audits?
Yes, the course includes templates and examples specifically designed to meet internal and external audit expectations for ISO 31000 compliance.
$199 one-time. Approximately 3 hours per module, designed to be completed at your own pace over 6, 8 weeks..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours