Enterprise Risk Management with COSO ERM 2017

• 9 – 14 November 2026

  Paris, France · In person · 09:00–12:30 · 13:30–17:00 · French · 12 places

  €3,500 excl. VATChoose this session

The COSO ERM 2017 framework ("Enterprise Risk Management — Integrating with Strategy and Performance") links risk management to an organisation's strategy and performance. This intensive six-day course gives you a practical command of it: each day covers one component of the framework, with input, industry examples and workshops built around a running company case. You leave with ready-to-use tools and a 90-day ERM action plan.

• Explain the structure of COSO ERM 2017: its 5 components and 20 principles
• Define the organisation's risk appetite and tolerances
• Identify, assess, prioritise and respond to risks with a portfolio view
• Build a risk map and key risk indicators (KRIs)
• Design an ERM rollout plan tailored to your organisation

• Chief risk officers and risk managers
• Internal control managers and internal auditors
• Chief financial officers
• Compliance officers
• SME executives and board members
• Governance and risk management consultants

A general understanding of how a business operates. No prior risk management expertise is required.

1. Day 1

   ERM and COSO 2017 fundamentals

   • –Why enterprise risk management matters
   • –From COSO 2004 to COSO ERM 2017: what changed
   • –The 5 components and 20 principles
   • –How it fits with ISO 31000 and internal control (COSO 2013)
   • –Regulatory landscape: Basel, Solvency II, Sapin II, CSRD, AMF, ACPR

2. Day 2

   Governance and culture

   • –Board risk oversight
   • –Operating structures and the three lines model
   • –Desired culture, values and behaviours
   • –Skills and accountability
   • –Workshop: risk culture assessment

3. Day 3

   Strategy and risk appetite

   • –Analysing the business context
   • –Defining risk appetite and tolerances
   • –Evaluating alternative strategies
   • –Setting objectives aligned with risk appetite
   • –Workshop: risk appetite matrix

4. Day 4

   Performance and risk mapping

   • –Identifying risks
   • –Assessing severity and prioritising risks
   • –Selecting and implementing risk responses
   • –Developing a portfolio view
   • –Workshop: risk map for the running case

5. Day 5

   Review, revision and key risk indicators

   • –Assessing substantial change
   • –Reviewing risk and performance
   • –Improving the ERM framework
   • –Designing KRIs and alert thresholds
   • –Workshop: KRI library

6. Day 6

   Information, reporting and rollout

   • –Leveraging information and technology
   • –Communicating risk information
   • –Reporting to the executive committee and the board
   • –90-day ERM rollout plan
   • –Final case study

40% input, 60% workshops. A running company case connects all six days. Groups are limited to 12 participants to encourage discussion.

• Full course handbook (PDF)
• Risk map template (Excel)
• Risk appetite matrix
• Risk management policy template
• Key risk indicator (KRI) library
• Board report template

A quiz at the end of each day and a final case study. An Onarcle certificate of achievement is awarded from a 70% score; otherwise, a certificate of attendance.

Price per participant, course materials included. Reduced rate from 3 participants from the same organisation. If your employer or a funding body will pay, contact us and we will find the right arrangement.