Enterprise & Cyber Risk Management
Bridge the divide between technical vulnerabilities and boardroom decision-making. Quantify cyber and operational risk into financial terms using FAIR and NIST frameworks, set corporate risk appetites, and architect mitigation roadmaps that executives fund.
What you will be able to do
The skills employers screen for in Risk Management roles, practised through live case work rather than slides.
Curriculum
Delivered across live sessions. The depth of each module scales with the plan you choose.
1Risk fundamentals
- Enterprise, cyber and operational risk
- Risk appetite and tolerance
- Common vocabulary across frameworks
2Risk frameworks
- NIST RMF steps
- COSO ERM components
- Choosing a framework for an organisation
3Threat scenarios and qualitative scoring
- Writing scenarios executives understand
- Heat maps and their limits
4Quantitative risk with FAIR
- Loss event frequency and loss magnitude
- Working with ranges
- Building a Monte Carlo model in Excel
5Business impact analysis
- Critical processes and dependencies
- RTO and RPO
- Linking impact to risk ratings
6Appetite, KRIs and reporting
- Writing a risk appetite statement
- Key risk indicators
- How Archer and RiskLens support reporting
7Capstone and interview preparation
- Present a C-level risk briefing with cost-benefit analysis
Frameworks and tools you will use
The standards and platforms named in real job descriptions for this field.
Your portfolio deliverable
Build a Monte Carlo cyber risk simulation in Excel, author an Enterprise Risk Appetite Statement, and produce a C-Level Risk Briefing Deck with prioritized mitigation cost-benefit analysis.
Where this track leads
Roles our Risk Management learners prepare for, with median salaries in the US and UK.
Cybersecurity Risk Analyst
Most common first role from this track
$95,000 / £65,000
Enterprise Risk Manager (ERM)
Also within reach
$120,000 / £82,000
Operational Risk Specialist
Also within reach
$110,000 / £75,000
Salary figures are indicative US and UK medians and vary by city, employer and experience.
Who this track is for
Questions about the Risk Management track
Do I need a technical background for the Risk Management track?
No formal prerequisite. You will use Excel for the quantitative modules, so being comfortable with formulas helps. We cover the statistics you need.
Is the training live or recorded?
Live. Every session is taught online by a practitioner in real time, with time for questions and case work. There are no pre-recorded lectures.
How many hours of training do I get?
That depends on the plan you choose: Node is 10 hours, Lattice is 20 hours and Nexus is 35 hours. Nexus also includes all six tracks.
What will I have built by the end?
Build a Monte Carlo cyber risk simulation in Excel, author an Enterprise Risk Appetite Statement, and produce a C-Level Risk Briefing Deck with prioritized mitigation cost-benefit analysis.
Do you help with finding a job?
Yes. Lattice and Nexus include ATS-friendly resume rebuilding, LinkedIn profile updates, a mock interview and ongoing career mentorship. Nexus adds 1-on-1 executive coaching and priority placement support.
Is a certification exam included?
You receive an OMNyra certificate of completion. External certification exams and their fees are not included. If you plan to sit CRISC, ask on your free call how this track maps to it.
Is there a discount for groups?
Yes. Friends or colleagues enrolling together as a group of 3 or more get group pricing, and organisations can book a dedicated cohort with custom scheduling.
Pair it with another track
Not sure Risk Management is the right fit?
Book a free 1-on-1 call. We will look at your background and target market, then recommend a track and plan.