Certified Enterprise Risk Officer (CERO™)
Enterprises face complex risks that demand structured management. Grounded in ISO 31000:2018 and COSO ERM:2017 standards, the CERO™ programme provides the tools to manage risks effectively across the organisation.
ISO 31000 & COSO Standards for Enterprise Resilience
In today’s dynamic business landscape, enterprises face complex risks that demand structured and strategic management. The Certified Enterprise Risk Officer (CERO™) programme provides participants with the knowledge, tools, and frameworks to identify, assess, and manage risks effectively across the organisation.
Grounded in ISO 31000:2018 and COSO ERM:2017 standards, the programme combines global best practices with practical applications to strengthen enterprise resilience, align ERM with corporate strategy, and build a robust risk culture.
"Resilience is built on ISO standards and structured controls."
Programme Structure & Curriculum
A professional pathway grounded in ISO 31000:2018 and COSO ERM:2017 standards.
Enterprise Risk Management Principles and Frameworks
Designing enterprise risk architectures based on ISO 31000:2018 and COSO ERM:2017 standards.
Risk Identification and Evaluation
Identifying root cause risks, building risk registers, and evaluating qualitative and quantitative exposure.
Risk Treatment and Mitigation Strategies
Conducting Risk & Control Self-Assessments (RCSAs), establishing KRIs, and designing risk mitigation controls.
Governance and Business Continuity
Embedding risk culture across all operational levels and ensuring business continuity during emerging risk crises.
Final Assessment and Application Project
The final assessment requires designing an enterprise risk register, RCSA protocol, and monitoring dashboard for an enterprise environment.
Programme Outcomes
Upon completion of the CERO™ programme, participants will be able to:
Holistic ERM Framework
Design and implement a holistic ERM framework aligned with international standards.
Enterprise Risk Mitigation
Identify, measure, monitor, control, and mitigate risks across the enterprise.
KRI & Dashboard Reporting
Establish KRIs and reporting mechanisms for strategic and operational risks.
Strategic Alignment
Align ERM strategy with corporate objectives for effective long-term planning.
Emerging Risk Governance
Address emerging risks including cyber threats, information security, and ESG factors.
Learning & Assessments
Case-Based Learning
Immersive case-based learning drawn from real-world ERM challenges.
ISO & COSO Workshops
Step-by-step application of ISO 31000:2018, COSO ERM 2017, and IEC/ISO 31010 techniques.
Guided Project Coaching
One-on-one coaching and expert feedback during guided ERM implementation project work.
Final Assessment
Participants complete a practical project establishing risk registers, RCSAs, monitoring dashboards, and escalation mechanisms aligned with corporate strategy.
Grants the Certified Enterprise Risk Officer (CERO™) designation.
Who Should Attend
- → Risk management professionals seeking to deepen their expertise
- → Executives aiming to strengthen their organization’s risk framework
- → Individuals aspiring to start a career in risk management
Minimum Requirements
At least 3 years of practical experience in risk, compliance, internal controls, or audit.
Foundational knowledge of finance and capital markets.
Master Enterprise Risk Governance
View the full program syllabus as well as details on faculty, guest speakers and key learner benefits.
SIMS Campus 1
Baarerstrasse 71, 6300 Zug, Switzerland
SIMS Campus 2
Chamerstrasse 174, 6300 Zug, Switzerland
Direct Line
+41 76 702 23 97Mon - Fri, 8:00 - 18:00 CET
