Your cart is empty.
Keep shopping
Operational Risk Management: Controls, Resilience
2,924 students
Operational Risk Management: Controls, Resilience
operational risk management | ISO 31000 risk framework | risk register | internal controls | compliance | resilience
Last updated 9/2026
English
English [Auto],
What you'll learn
- Build a risk register and score risks on a heat map with agreed criteria
- Apply the ISO 31000 cycle: identify, assess, treat, escalate, monitor
- Use the three lines of defence to say who owns which control
- Map a process and find the points where a control is missing
- Run a root-cause analysis with 5 Whys, 8D and a cause-and-effect diagram
- Verify a claim, a company or a person from open sources before acting on it
- Reduce key-person risk by capturing knowledge that lives in one head
- Run an audit of a function and turn the gaps into a prioritised roadmap
- Learn alongside Mike's 1.6 million students from 185 countries
- Get the author's experience from Preply, Wargaming, iDeals and Alfa-Bank
Explore related topics
Course content
13 sections • 35 lectures • 15h 47m total length
Requirements
- Experience working inside an organisation, in any function
- No risk, audit or compliance background required
- Access to one real process you can map. Your own is fine
- English at intermediate level or above, since all lessons are in English
- Willingness to look at something that went wrong without assigning blame first
Description
This course contains the use of artificial intelligence.
Almost no operational failure starts with a machine. It starts with a person making a decision that looked entirely reasonable at the time.
How the failure actually happens
Someone approves an exception because the client is important. Someone skips a check because the check has never once found anything. Someone knows the workaround and never writes it down, and then leaves. Six months later there is an incident review, and every individual decision in the chain was defensible. That is what operational risk is. It is not a register of unlikely disasters — it is the accumulated cost of small reasonable choices nobody was watching.
What this course covers
Thirty-three lessons in five blocks. The risk framework first: the heat map, the fraud triangle, the 4I model, cognitive bias and conflict of interest, ISO 31000, the risk hierarchy, escalation, leadership-team dynamics, risk culture, the three lines of defence and the high-reliability organisation. Then the place risk materialises — the process: mapping in five different forms, waste, standardisation, maturity, process architecture, and the full toolkit for finding a root cause, from 5 Whys and 8D through SIPOC, prioritisation matrices, DRIVE and ICOR. Then verification: checking a claim, a company or a person from open sources using Boolean search, X-ray and Google Dorks, with the ethics of it stated plainly. Then continuity: capturing what lives in one person's head, running retrospectives on mistakes, and measuring whether any of it is used. Finally the audit: express maturity scoring, a weighted checklist, four data collection methods, the RACI, the gap analysis and a roadmap with a return calculation.
A note on the folder names
Two blocks were recorded for a people-function audience. The risk material is general — ISO 31000, the three lines of defence, the fraud triangle and the high-reliability organisation do not change by department, and the function appears in two lessons out of ten as an example of a risk owner. The audit block demonstrates its method on one function, but the method itself — audit levels, weighted checklists, gap analysis, RACI, payback — transfers to any of them. The verification block comes from a course on advanced internet search, and its last two lessons are taught as recruiting and sales techniques.
Who is teaching this
I am Mike. I built the people system at Preply as it became a unicorn, and I have worked at Wargaming, iDeals and Alfa-Bank. More than 1.6 million students have enrolled in my courses across 185 countries, and over 150,000 specialists have gone through my programmes. I hold PHRi and SHRM-CP certifications and represent HRCI in more than ten countries.
What is included
Lifetime access to all 33 lessons
Active instructor support in the Q&A section
A Udemy Certificate of Completion
Working material: the heat map, the fraud triangle, ISO 31000, the three lines of defence, five map types, 5 Whys, 8D, SIPOC, DRIVE, the audit checklist and roadmap
A full audit demonstration on a real 200-person company
Where to start
Take the last thing that went wrong in your area and ask which control should have caught it. If you cannot name the control, that is the course. Enrol now and start today.
Who this course is for:
- Operations managers who own processes but have never formalised the risks in them
- Risk and compliance specialists moving from checklists to a working system
- Internal auditors who want the risk framework behind the checklist
- Team leads told to "own the risks" for their area with no method given
- Quality and process managers building controls into what they design
- Founders and small-company managers with no risk function to lean on
- Project managers whose risk register is currently a spreadsheet nobody opens