The COVID-19 pandemic highlighted critical weaknesses in governance, risk, and compliance (GRC) across organisations worldwide. Boards of Directors and senior executives must now embed GRC into strategy setting, oversight, and execution to protect enterprises from unpredictable risks while ensuring regulatory compliance and resilience. The Certified Governance, Risk and Compliance Officer (CGRCO™) executive programme equips senior professionals with the knowledge, frameworks, and leadership capabilities to design and implement integrated GRC systems. Participants will learn to align governance, risk, and compliance with corporate strategy, build enterprise-wide risk cultures, and apply global standards including COSO ERM (2017) and ISO 31000 (2018).
Overview
Office of Admission
Programme Structure
Understanding GRC Fundamentals
Risk, Appetite, and Culture
Behavioural Finance and GRC Impact
Developing the GRC Framework
Aligning GRC with Strategic Planning
Establishing an Embedded GRC Process
Risk Identification and Evaluation Techniques
Risk Mitigation Strategies
Aligning Business Risks to Planning
Emergence of Information Security Risks
Governance in the GRC Framework
Managing Governance Risks in Financial Crime
Establishing GRC Systems in Emerging Countries
The Evolution of the Chief GRC Officer
Key Outcomes
Upon completion,
participants will
be able to:
participants will
be able to:
- Assess organizational risk maturity to support GRC framework development.
- Identify, manage, and mitigate GRC risks from unexpected events.
- Establish early warning mechanisms and Key Risk Indicators (KRIs).
- Align GRC management with strategic planning and Board-level oversight.
- Build a comprehensive GRC framework for monitoring and control.
Learning
&

The CGRCO™ programme is delivered through an intensive five-day face-to-face workshop or a ten-week online format. It blends strategic insights with practical application, ensuring participants can implement GRC frameworks within their organisations immediately.
Assessments
Learning Approach
Fully interactive sessions with group discussions and case studies.
Step-by-step guidance in developing and implementing a GRC framework.
Coaching from trainers to ensure understanding and application of concepts.
Final Assessment
Each participant will complete a case study based on either:
- Their own organisation (preferred), or
- An approved case study provided by the programme team
This assessment requires participants to:
- Design and implement a complete GRC framework.
- Establish KRIs and conduct root cause analysis of risks.
- Developing risk measurements and controls, and establishing a reporting structure.
Who Should Attend
This programme is ideal for:
Minimum Requirements:
- Senior executives in risk, compliance, or governance functions.
- Heads of internal audit, legal, or regulatory affairs.
- Board members and directors responsible for oversight of risk and compliance.
- Professionals tasked with strengthening enterprise-wide GRC systems.
- At least 3 years of experience in risk management, audit, or compliance.
- Foundational knowledge of finance, capital markets, or corporate governance.