Skip to content

Illustrative: likelihood by impact as columns with score as height and colour, risks moving across it as controls act

Risk Academy, led by the Nexus Consortium · Risk Science and Methods · Department of Risk Management

ISO 31000 and COSO, appetite and tolerance, registers and the Three Lines Model

Enterprise risk management and risk frameworks

Enterprise risk management states how an organisation identifies, assesses, treats and reports its risks as one process.

01Wigo

What the discipline covers

The subtopics its courses and maabara teach.

Kozi
In preparation
Ngazi
L1 Introductory, L4 Integrative
Maabara
Network lab
  • ISO 31000 principles and process
  • COSO enterprise risk management
  • Risk appetite and tolerance
  • Risk registers and taxonomies
  • The Three Lines Model
  • Integrating risk disciplines
  • ERM maturity
  • Reporting risk to boards
02Maps

Build a twin of any place

Search any place or open the world; the layers and generators follow enterprise risk management and risk frameworks on the planet map, the globe and in 3D.

The central Apennines: L'Aquila, Amatrice and Norcia: a flat plan of the faculty twin. Terrain 24 to 2,805 m; 3 reference earthquakes, M6.2 to M6.6; Earthquakes M4.5 and above, past week: read live when the 3D twin opens; USGS ShakeMap intensity contours: read live when the 3D twin opens. Contours every 500 metres from the elevation grid; reference earthquakes as marks.
The central Apennines: L'Aquila, Amatrice and Norcia, Italy. Flat plan of the same data: relief, the three reference epicentres with magnitude and depth, and the numbers below; the sampler's figure shows one precomputed field with its parameters. The 3D twin opens on devices that can draw it, once its data and code have been checked.
  • Terrain 24 to 2,805 m
  • 3 reference earthquakes, M6.2 to M6.6
  • Earthquakes M4.5 and above, past week: read live when the 3D twin opens
  • USGS ShakeMap intensity contours: read live when the 3D twin opens
Credits and dates per layer are listed under the stage. Relief in the twin is exaggerated ×1.5 for legibility.

Drag to move, right drag or Shift with a drag to turn and tilt, Ctrl with the wheel to zoom. Keyboard: arrows move, Shift with arrows turn and tilt, + and – zoom, 0 resets, V steps through the views, Escape clears.

Flat plan of the same data: relief, the three reference epicentres with magnitude and depth, and the numbers below; the sampler's figure shows one precomputed field with its parameters. The 3D twin opens on devices that can draw it, once its data and code have been checked.

The boundaries, names and designations shown do not imply any judgement on the legal status of any territory, or any endorsement or acceptance of such boundaries. Countries: Natural Earth (public domain).

03The subject

The subject, methods and measures and debates and bodies

The field and its scope

For risk officers, internal auditors, strategists and board advisers who need to set up, run or challenge an organisation-wide risk framework and show how it informs decisions.

04The method

From a register line to an appetite test: likelihood, impact, treatment and the residual that remains

A register line holds a likelihood and an impact; their product is inherent exposure; a treatment removes a stated share of it; what remains is compared with the appetite the board has written down, and that comparison, not the colour of a cell, is the decision.

Sources: ISO 31000:2018 Risk management, Guidelines (2018); COSO, Enterprise Risk Management: Integrating with Strategy and Performance (2017); Kaplan and Garrick, On the quantitative definition of risk, Risk Analysis (1981); Cox, What's wrong with risk matrices? Risk Analysis (2008); The IIA's Three Lines Model: an update of the Three Lines of Defense (2020).

05At a glance

At a glance, with 5 related topics

Enterprise risk management and risk frameworks at a glance

risksacademy.comrisk-sciencediscipline

Enterprise risk management and risk frameworks: 0 primary courses open, 3 in preparation and 1 also taught here, across 8 subtopics. Courses: RAF-107 L1 in preparation, RAF-108 L1 in preparation, RAS-415 L4 in preparation, RAT-207 L2 also taught here.L1L2L3L430
Enterprise risk management and risk frameworks at a glance
  • Open, 0
  • In preparation, 3
  • Also taught here, 1
  • Subtopics, 8
Course codes from the curriculum; study levels L1 to L4.
Twin builderBuild a twin of any placeWorked example: the central Apennines: L'Aquila, Amatrice and Norcia · 4 generators · 7 layers · 4 instruments
06Maabara

How the subject is practised in labs

LabWhat you do in itCourses using it
Network labBuild dependency graphs, find critical nodes, trace cascades1
07Dashibodi

How Enterprise risk management and risk frameworks is taught, as a process you can run

Press Play to run this process from this page's own data.

Process explorer

How Enterprise risk management and risk frameworks is taught

17 steps6 stages

08Learning

Learning, practice and connections

Achievements in this discipline

09Shiriki

Take part in Risk Science and Methods

Anza na wewe ni nani.

10References

Core references and where to begin

Start with International Organization for Standardization, then Kaplan, then Kaplan.

11Maswali

Maswali, majibu na istilahi muhimu

Je, kusoma hapa ni bure?
Ndiyo. Kila kozi na nyenzo ya kujifunzia ya Risk Academy, inayoongozwa na Nexus Consortium, ni bure kusoma, kwa kasi yako mwenyewe au pamoja na kundi. Ushiriki wa kawaida hauna ada. Kazi inayolipwa, mafunzo kazini na ushirika wa kitaaluma ni mipango tofauti.
Kukamilisha kozi kunanipa nini?
A completion record: the course, its version, the date and what was assessed, private by default and shared by you. It stacks into discipline, department and programme achievements. A record states what was studied and assessed and does not certify competence. A record is not a licence, a professional title or an employment status.
Data na maeneo yanatoka wapi?
Every faculty teaches on a twin of a real place built from open data. Each layer carries its provider, licence and date, and every result on the Academy states its source. Maps and figures are indicators for teaching, never an assessment of a place.
How do I take part beyond the courses in enterprise risk management and risk frameworks?
Unda seli ya umahiri ya watu watatu hadi saba, soma njia ya mafunzo ya pamoja, chukua kazi inayosimamiwa katika Vikundi Kazi vya Kitaifa, au leta kundi la wanafunzi kutoka taasisi yako. Open the page for organisations.

Istilahi kuu

Istilahi

Risk appetite

The amount and type of risk an organisation is willing to pursue or retain.

Istilahi

Risk register

A record of identified risks with their owners, assessments and treatments.

Istilahi

Risk owner

The person accountable for managing a risk.

Istilahi

Inherent and residual risk

Risk before and after controls are applied.

RipotiChangia

Changia ushahidi kutoka ukurasa huu.

Reports ni chapisho la robo mwaka la Muungano. Unachojua kuhusu mada hii kinaweza kuwa ushahidi, mfano au marekebisho katika toleo lijalo, kikitajwa kwa jina lako na kuchapishwa chini ya CC BY 4.0 pale kinapokuwa kazi yako mwenyewe.

Risk Academy
Enterprise risk management and risk frameworks

Prepare with a related course

Open courses in connected disciplines teach the methods this discipline will build on.