Who should attend
CPS 230 implementation and project teams, operational and enterprise risk managers (line 1 and line 2), auditors and assurance providers, legal and compliance professionals, procurement and third-party management teams, and anyone involved in risk and compliance maturity uplift.
Investment
Online attendance will cost registrants $450 + GST.
Workshop Content
1. Introduction
a. Introductions
b. Course objectives
c. Administration
2. Why was CPS 230 needed?
a. The drivers of the standard
b. The key principles and guidelines
c. How to address the standard. - The importance of a mindset shift and not a “tick the box” activity
d. Timelines for implementation – where should you be now?
3. What are the key principles of the standard?
a. Principles and guidelines
b. The importance of having an outcome view: - linking risk management with strategy and objectives
c. Process vs. siloed view of risk
d. Moving to an integrated risk profile
e. Integrating your risk appetite
4. What are the key components of the standard?
a. Operational risk and compliance management
b. Controls management
c. Operational resilience and business continuity management
d. Third party risk management
e. Roles and responsibilities
f. Risk management framework – and uplift
g. Risk culture and a mindset shift
5. How do I meet the requirements of the standard?
a. Understanding the business and mapping your end to end value chain/ processes
b. Operational risk and compliance management
c. Controls management
d. Operational resilience and business continuity management (BCM)
- How does operational resilience and BCM relate
- Identifying and setting you impact types and tolerance levels.
- Critical operations for resilience
- Mapping resources, risks and controls including third party dependencies
- Developing and running severe but plausible scenarios
- Testing your process against tolerance levels
e. Third party risk management
- Identifying material service providers
- The essential components of managing third parties
- Onboarding, ongoing monitoring and off boarding – what is required?
6. Bringing it all together – an enterprise value chain view of risk
a. Understanding your interdependencies
b. Linking the parts through data linkages
c. Creating and reporting an integrated risk profile
7. Roles, responsibilities and accountabilities
a. Who needs to do what?
b. Integrating with the FAR regime
c. Building a cultural mindset shift and a focus on risk culture
8. When do we need to get ready?
a. The milestones for preparation
b. How far along should you be now?
c. A roadmap for readiness
d. Ensuring a sustainable legacy
9. Conclusions and takeaways
a. Key conclusions
b. Key takeaways
Please note
1. Booking
On submission of this online course form, Protecht will accept your offer by entering your booking onto the course and sending you an email confirming that you have been booked together with information on the course enrolment details and payment instructions.
2. Payment
An invoice will be issued and sent to you as part of the booking confirmation. Payment must be made within 7 business days of issue, and no later than 5 days business days before the course commencement. Payment can be made via Direct Deposit or Credit Card.
No cancellation policy within 5 business days of the course date except by discretion of extenuating circumstances approved by Protecht.
