The course helps individuals develop a core understanding and skills to integrate governance, risk management and compliance in one capability.
This course also prepares you to successfully pass the GRC Professional (GRCP) certification exam and become individually certified as a GRCP. The GRCP certification shows the individual has the core understanding and skills to integrate corporate governance, risk management, internal control and compliance activities
Develop a GRC strategic plan
Align governance, risk and compliance in context of the organisation
Understand, define, and enhance organisational culture as it relates to performance, risk, and compliance
Implement effective, efficient and agile GRC processes using the OCEG GRC Capability Model
Motivate and inspire desired conduct through the concept of Principled Performance
Understand technology’s role in GRC
Develop ongoing monitoring and continuous improvement of GRC activities through metrics and measurement
Explain the value of Principled Performance, and an integrated approach to GRC, to management and board
Internal auditors
Compliance professionals
Governance professionals
Risk management professionals
GRC professionals
Legal professionals
IT professionals dealing with GRC
Managers responsible for GRC activities
Executives and board member
Introduction to OCEG
The use of frameworks
Available GRC individual certifications
Business context and the need for a GRC approach and Principled Performance
The "Big" picture of business illustration
Defining Principled Performance
Advantages of Principled Performance
Defining common GRC terms
GRC Concepts
GRC roles and responsibilities (e.g. audit, legal, human resources, IT, compliance, risk management, ethics, the boards etc.)
Gaining commitment from senior management and the board
Overview of the OCEG GRC Capability Model
Implementing the OCEG GRC Capability Model at an organisation
Understanding the external context of your organisation
Understanding the internal context of your organisation
Understanding and assessing culture
Understanding relevant stakeholders and developing a stakeholder relations plan
Setting direction and management decision-making criteria in accordance with mission, vision and values
Defining high-level and lower-level objectives
Identifying opportunities, threats and requirements for your organisation
Assessing levels of reward, risk and compliance - inherent and residual basis
Designing relevant options and controls in order to respond to levels of reward, risk and compliance
Determining the right mix of proactive, detective, and responsive internal controls
Developing relevant policies and procedures
Providing communication to the right people, in the right way, at the right time
Delivering education to relevant individuals
Designing and implementing appropriate incentives
Designing notification methods to detect desired and undesirable events
Designing inquiry methods to detect desired and undesirable events
Responding to desired and undesirable events
Monitoring the GRC capability
Providing assurance on the GRC capability
Making improvements to the GRC capability
Elements of a GRC strategic plan
Completing risk and compliance assessments as a starting point - Fraud risk assessment, Organisational risk assessment, Compliance gap analysis
Moving from the current state to desired state
Degrees of integration and maturity models
Building and explaining the business case for integrated GRC
Because supervisory levels are the link between the executive and senior management levels, achieving the organization's objectives, increasing productivity and overall performance of the organization, affects the effectiveness and efficiency of supervisors' performance.
And because of the skills of supervisors in any organization in need of continuous development, and to acquire advanced tools and methods that reflect on the deepening of these skills and activate their role in motivating individuals working, and push them to commit to the goals of the organization.
You need this conference to learn about supervisory skills and advanced methods, to be able to play an effective and supervisory role in your organization.
We often hear record-breaking athletes say; I owe it to my coach; That’s because however talented they are, athletes need a coach to improve their performance and competitiveness. Likewise, Companies and Organizations need to create a culture where coaching and feedback occur as a routine part of each day. Towards this strategic end. This innovative and motivating course, explains a structured approach to coaching which is effective whether a professional is working with a recruit or seeking improvement from an experienced player. Being less of a boss and more of a coach is fundamental to modern management. Urging people to do better won’t work unless they know how to do it better. Good coaching builds trust and a collaborative climate between professionals and teams.
Managing an office has become an increasingly sophisticated and complex job. The increased demand for speed and accuracy, knowledge of new technology and an increasingly diverse workforce bring challenges and also opportunities for growth. This dynamic and in-depth course explores some of the more advanced skills which can help an office manager to work more confidently, creatively, and effectively
The program has been designed to be interactive with several case studies and group exercises. A modular approach will take the delegates through the four stages of Crisis Management - Preparation, Planning, Response, and Recovery. Participative lectures will involve the use of PowerPoint, handout material, work manual with all instructor notes and slides, examples of best practice, and appropriate video/DVD material. The use of flip-charts, syndicate workshops, and reporting back sessions will encourage a fully participative and enjoyable event.
This course will provide participants with in-depth knowledge and practical skills to plan, deliver and monitor IT/cybersecurity to internal and external clients encompassing a complete, conjoined set of disciplines in the areas of IT policies, Security-Operational-Run-Book, security/penetration testing, ethical hacking, and black hat hacking.
It will also cover WiFi security, Website security, human factors, cyber forensics, cybersecurity team management, Secure Operations Center (SOC), and Computer Security Incident Response Team (CSIRT) infrastructures.
As part of the course, participants will conduct a risk assessment of two different deployments based on the ISO27001 to identify any direct, or indirect threats, security exposures, or potentials for vulnerabilities. Participants will also respond to an example of security incident and identify the best practices which could be applied to secure their own organization and associated assets. All participants will be given copies of Run Books to deal with cyber extortions, Distributed Denial of Service (DDoS/DoS), and forensic investigations.