ISO 31000 Foundation

About This Course

Risk is an inherent part of every organisation's operating environment, and the ability to manage it effectively is a defining characteristic of resilient, well-governed institutions. ISO 31000:2018 — the international standard for risk management — provides a universally applicable framework that helps organisations of all sizes and sectors identify uncertainties, make informed decisions, and protect value. Adopted by thousands of public and private organisations worldwide, ISO 31000 has become the benchmark language of enterprise risk management.

The ISO 31000 Foundation course from TrainingComplex is designed to give professionals a solid, structured introduction to this standard. Over five intensive days, participants explore the principles that underpin effective risk management, the governance framework that enables it, and the practical process through which risks are identified, analysed, evaluated, treated, and monitored. Real-world case studies and interactive exercises ground every concept in organisational reality, ensuring participants leave with not just theoretical knowledge but practical confidence.

Whether you are building a risk management function from the ground up, contributing to an existing programme, or simply seeking to understand the language and logic of ISO 31000, this course provides the essential foundation. Upon completion, participants will be equipped to contribute meaningfully to risk discussions, support risk governance activities, and pursue further professional development in risk management — including practitioner and lead implementer certifications.

Who Should Attend

• Risk officers and risk coordinators seeking a formal grounding in ISO 31000
• Compliance and internal audit professionals responsible for organisational governance
• Project managers and programme officers who manage uncertainty across initiatives
• Strategic planners and business analysts involved in decision-making under uncertainty
• Senior managers and team leaders accountable for departmental risk oversight
• Governance, legal, and policy professionals supporting enterprise risk frameworks
• Quality assurance and operational excellence practitioners
• NGO, government, and public sector officers managing institutional risk

Learning Objectives

• Explain the purpose, structure, and key terminology of ISO 31000:2018
• Describe the eleven core principles of risk management as defined by the standard
• Outline the components and attributes of an effective risk management framework
• Apply the ISO 31000 risk management process — from context establishment through to communication and monitoring
• Conduct risk identification using structured techniques appropriate to organisational context
• Perform qualitative and semi-quantitative risk analysis and evaluation
• Select and apply appropriate risk treatment options aligned with organisational risk appetite
• Design and maintain a risk register consistent with ISO 31000 guidance
• Explain the roles of leadership and governance in creating and sustaining a risk culture
• Distinguish ISO 31000 from related standards and frameworks including ISO 9001, ISO 27001, and COSO

Course Modules

Requirements & Prerequisites

Participants should have a basic understanding of organisational operations and governance structures. No prior formal risk management training or certification is required, as this is a foundation-level course designed for those new to ISO 31000. A general familiarity with business concepts such as objectives, planning, and performance monitoring will be beneficial.

Training Methodology

• Structured presentation of ISO 31000:2018 clauses with annotated standard excerpts and guided reading exercises
• Case study analysis drawn from real public and private sector risk events across Africa and the Middle East
• Facilitated group workshops where participants build a risk register for a simulated organisational scenario
• Risk identification exercises using techniques including brainstorming, SWOT analysis, and cause-and-effect mapping
• Risk matrix construction and scoring exercises using qualitative likelihood and consequence scales
• Role-play discussions exploring how risk owners, risk managers, and governing bodies interact within a framework
• Template-based practical work using ISO 31000-aligned risk register, treatment plan, and monitoring report tools
• End-of-day reflection sessions linking daily learning to participants' own organisational contexts
• Pre- and post-module knowledge checks to consolidate understanding and identify gaps
• A culminating individual exercise in which each participant drafts a brief risk management plan for their own workplace scenario

Organisational Benefits

• Builds a common, internationally recognised risk management language across the organisation
• Strengthens governance and accountability structures through structured risk oversight
• Reduces the likelihood and impact of operational, financial, and reputational risks
• Supports regulatory compliance and demonstrates due diligence to stakeholders and auditors
• Improves decision-making quality by embedding risk thinking into planning and strategy
• Enhances project and programme outcomes through proactive risk identification and treatment
• Creates a pipeline of qualified risk professionals for internal succession and capacity building
• Positions the organisation for ISO-aligned certification journeys and international benchmarking

Where Is ISO 31000 Foundation Training Offered?

This course runs in-person across: Cape Town, Dubai, Nairobi, Abuja, Kigali, Johannesburg, Riyadh, Kisumu, Nakuru, Arusha, Mombasa, Addis Ababa, Zanzibar, Pretoria, Accra, Naivasha, Kampala, Lagos, Dar es Salaam, plus Live Virtual (online) cohorts. Browse live dates for your city below.

Upcoming Schedules

+237 more dates — view live schedule →

Frequently Asked Questions