Nairobi, Kenya

254721214795

Executive Masterclass: Enterprise Risk Management & Internal Control (COSO Framework)

The Enterprise Risk Management & Internal Control masterclass provides executive leaders, risk practitioners, and governance teams with an authoritative framework for embedding risk inte...

img 10 Topics

img 5 Days

img 40 Sessions

Project Management Trainings
Click to Register

ONSITE OR VIRTUAL

Programme Overview
Training Description

1) Public sector auditors 
2) Banking and financial services professionals 
3) Regulators and inspectors 
4) Internal auditors 
5) Risk managers 
6) Compliance officers 
7) Governance and assurance professionals 
8) Audit managers and directors 
9) Finance and accounting professionals 

Session Objectives
  • Seamlessly integrate the 5 core components, 17 internal control principles and points of focus into organizational governance structures.
  • Formulate Risk Appetite Statements to evaluate how strategic choices impact corporate risk exposure and performance.
  • Deploy structured tools to identify and evaluate operational, financial, cybersecurity, and change management risks while designing robust anti-fraud mechanisms.
  • Implement preventive, detective, manual, and automated technology controls—enforcing segregation of duties, approvals, and reconciliations.
  • Enforce General IT controls, application security, internal controls over financial reporting (ICFR), and regulatory compliance systems.
About the Course

The Enterprise Risk Management & Internal Control masterclass provides 
executive leaders, risk practitioners, and governance teams with an authoritative 
framework for embedding risk intelligence directly into corporate strategy, 
financial control, and operational decision-making. Grounded in both the COSO 
ERM Framework (Integrating with Strategy and Performance) and the 
COSO Internal Control – Integrated Framework, this program bridges the gap 
between high-level board oversight and day-to-day operational execution. 
Rather than treating risk as a siloed compliance exercise, this executive 
masterclass focuses on value creation, value preservation, and fraud 
deterrence. Over 10 intensive modules, participants will master COSO’s 5 core 
ERM components, 17 internal control principles, IT general controls, and control 
testing methodologies—learning how to establish an ethical corporate culture, 
calibrate enterprise risk appetite, design automated internal controls, and 
leverage predictive risk analytics. The course equips institutions to protect 
assets, ensure regulatory compliance, and build audit-ready operational 
resilience across public and corporate sectors.

Curriculum & Topics

10 Topics | 40 Sessions

  • play Workshop 1.1: Overview of COSO Evolution, Purpose, and Scope of Internal Control

  • play Workshop 1.2: Interrelationship Between Governance, Risk, Internal Controls, and Ethics

  • play Workshop 1.3: Enforcing Integrity, Core Ethical Values, and Tone at the Top

  • play Workshop 1.4: Board Oversight, Organizational Structures, Authority, and Talent Competence

  • play Workshop 2.1: Deploying Structured Risk Identification, Analysis, and Evaluation Methodologies

  • play Workshop 2.2: Assessing Fraud Risk Exposures, Anti-Fraud Controls, and Whistleblowing Mechanisms

  • play Workshop 2.3: Navigating Change Management Risks, Emerging Threats, and Vulnerabilities

  • play Workshop 2.4: Formulating Actionable Risk Response Strategies and Mitigation Plans

  • play Workshop 3.1: Designing Preventive, Detective, Manual, and Automated Control Mechanisms

  • play Workshop 3.2: Establishing Authorizations, Approvals, Reconciliations, and Verifications

  • play Workshop 3.3: Enforcing Strict Segregation of Duties and Access Authorization Workflows

  • play Workshop 3.4: Formulating Standard Operating Policies, Procedures, and Execution Protocols

  • play Workshop 4.1: Ensuring Quality, Reliability, and Integrity of Enterprise Information

  • play Workshop 4.2: Establishing Effective Internal Communication Channels and Reporting Lines

  • play Workshop 4.3: Structuring External Communication Protocols and Stakeholder Feedback Mechanisms

  • play Workshop 4.4: Designing Executive and Board Audit Committee Dashboard Architectures

  • play Workshop 5.1: Deploying Ongoing Monitoring Techniques and Control Self-Assessments (CSA)

  • play Workshop 5.2: Conducting Periodic Independent Evaluations and Internal Control Audits

  • play Workshop 5.3: Systematic Tracking, Escalation, and Remediation of Control Deficiencies

  • play Workshop 5.4: Embedding Continuous Improvement Strategies into Operational Workflows

  • play Workshop 6.1: Practical Application of the Seventeen COSO Internal Control Principles

  • play Workshop 6.2: Aligning Design Considerations with Specific Points of Focus

  • play Workshop 6.3: Establishing Evidence Standards for Internal Control Effectiveness

  • play Workshop 6.4: Structuring Assurance Maps, Process Mapping, and Control Documentation

  • play Workshop 7.1: Harmonizing Internal Controls with the COSO ERM Framework Architecture

  • play Workshop 7.2: Defining and Calibrating Enterprise Risk Appetite and Operating Tolerances

  • play Workshop 7.3: Aligning Strategic Planning, Business Performance, and Risk Governance

  • play Workshop 7.4: Integrating Risk Governance Across Multi-Layered Institutional Structures

  • play Workshop 8.1: Implementing General IT Controls (GITCs) and Infrastructure Governance

  • play Workshop 8.2: Enforcing Automated Application Controls and Data Integrity Checks

  • play Workshop 8.3: Cybersecurity Architecture, Identity Access Management, and Privilege Controls

  • play Workshop 8.4: Aligning Technology Governance with Statutory Data Integrity Mandates

  • play Workshop 9.1: Executing Internal Controls Over Financial Reporting (ICFR) and Financial Close Protocols

  • play Workshop 9.2: Optimizing Operational Efficiency, Quality Management, and Performance Controls

  • play Workshop 9.3: Establishing Regulatory Compliance Systems and Statutory Assurance Mechanisms

  • play Workshop 9.4: Ensuring Disclosure Integrity, Accuracy, and Compliance Oversight

  • play Workshop 10.1: Conducting Design and Operating Effectiveness Testing, Sampling, and Evaluation

  • play Workshop 10.2: Constructing Process Maps and Comprehensive Risk and Control Matrices (RCMs)

  • play Workshop 10.3: Utilizing Maturity Assessment Models to Drive Continuous Improvement Roadmaps

  • play Workshop 10.4: Establishing Control Ownership, Accountability Frameworks, and Sustainable Culture

General Notes

This course will be delivered by our experts and professionals in data 
analysis with vast experience. The workshop will be highly interactive   
Training manuals and additional reference materials are provided to the 
participants. 
Upon successful completion of this course, participants will be issued 
with a certificate. 
The training will be conducted by PB Institute of Research and 
Technology  
The training fee covers tuition fees, training materials, lunch and 
training venue. Accommodation and airport transfer are arranged for our 
participants upon request. 
Payment should be sent to our bank account before the start of training 
and proof of payment sent to: info@pebblesinstitute.org

img

$ 1,500


Availability Calendar

Find a schedule that works for you. Click any available session to submit a booking.

Selected Session:
This Programme Includes

Certificate of completion

Training manual

10 O'clock Tea

Lunch

4 O'clock

Course Highlights
  • icon 5 Days Intensive Training

  • icon 10 Core Learning Topics

  • icon 40 Professional Sessions

  • icon Unknown Expert-led Delivery

FAQs

Frequently Asked Questions

Explore detailed answers to the most common questions about our platform and services.

What happens if I need to cancel or defer my training slot?

If you are unable to attend, you must notify us in writing at least 7 days before the course start date. You may choose to nominate a qualified substitute colleague at no additional cost or defer your enrolment to the next scheduled cohort for that program.

Most of our professional short courses are structured as intensive 5- or 10-day programs to minimize extended workplace absence while maximizing skill acquisition. We also offer compressed 1-to-3-day masterclasses.

Yes. We specialize in corporate capacity building. Corporate sponsorships and group registrations can be coordinated directly through our admissions team. We also offer customized, in-house versions of our courses if you have a team of five or more participants.

Yes. Participants who successfully complete a training program and meet the minimum attendance requirements will be awarded a globally recognized Certificate of Proficiency from the Pebbles Institute of Research and Technology.

Registering is simple. Browse our training catalog, select your desired course, and click the "Book to Register" button. Fill out the brief registration form with your details, and a training coordinator will contact you within 24 hours to provide the admission letter and payment details.

Our primary residential and corporate training programs are hosted in premium, fully equipped conference facilities in Nairobi, Kenya. We also coordinate regional and international training locations depending on the specific cohort and organizational requirements. Exact venue details are communicated in your admission letter.