The Global Centre for Risk and Innovation (GCRI)
Risk Academy, a Nexortium programmeRisk Science and MethodsDepartment of Risk Management
ISO 31000 and COSO, appetite and tolerance, registers and the Three Lines Model
Enterprise risk management states how an organisation identifies, assesses, treats and reports its risks as one process.
risksacademy.comrisk-sciencediscipline
Twin figures for the central Apennines: L'Aquila, Amatrice and Norcia, counted from its layers at their stated dates.
For Enterprise risk management and risk frameworks: the faculty's twin of L'Aquila on the planet map, the globe and in 3D. Pick a generator, switch layers, run the instruments; every layer prints its provider and date.
Drag to move, right drag or Shift with a drag to turn and tilt, Ctrl with the wheel to zoom. Keyboard: arrows move, Shift with arrows turn and tilt, + and - zoom, 0 resets, V steps through the views, Escape clears.
Flat plan of the same data: relief, the three reference epicentres with magnitude and depth, and the numbers below; the sampler's figure shows one precomputed field with its parameters. The 3D twin opens on devices with WebGL once its data and library have been checked.
The map loads from this site as it nears the view (MapLibre 6.9.1, checked by hash).
The discipline teaches the principles, framework and process of ISO 31000:2018 (under revision at ISO/TC 262), emerging risks under ISO 31050:2023, enterprise risk management under COSO (2017), risk appetite and tolerance, risk registers and taxonomies with owners and criteria, the Three Lines Model of 2020, ERM maturity and reporting risk to boards, with the twin's fitted values and their standard errors as the running example of a figure a register has to carry with its uncertainty. A graduate can design a register, set an appetite statement a board can test, and report against it.
This area covers the principles, framework and process of risk management for an organisation as set out in ISO 31000, enterprise risk management under COSO, risk appetite and tolerance, registers and taxonomies, and the Three Lines Model as the frame that the other risk disciplines plug into. It is taught in the department of Risk Management, Faculty of Risk Science and Methods, through 3 courses with it as primary discipline and 1 more that also teach it.
8 subtopics, taught across its courses and labs.
Recent developments in enterprise risk management and risk frameworks, each with its source; sources checked on 16 October 2026. Summaries are short readings of the source; follow the link for the full account.
News and research as they are published, per discipline, with the faculty's other tools.
The newest research, preprints, news and humanitarian reports for Enterprise risk management and risk frameworks, each with its source and date, load here. Open the research and news hub
From the Academy's risk taxonomy: the discipline's own entries and those of its primary courses, with how many courses teach each.
No course with this primary discipline is open yet; these are planned, so you can prepare with the courses also taught here.
These courses count in their own primary discipline and also teach this one; they do not count towards its achievement as primary courses.
Also taught here1 courses that count in another discipline
Cited as places where the subject is practised; the institutions named are sources here, and Risk Academy hosts every course.
Nexus Foundry system pages describe what each system and its rooms are designed to do; they are not a service on offer, and studying here gives no access to them.
| Lab | What you do in it | Courses using it |
|---|---|---|
| Network lab | Build dependency graphs, find critical nodes, trace cascades | 1 |
Open courses in connected disciplines teach the methods this discipline will build on.