1. The Role of a Technology Risk Management

• Fundamental principles of TechRisk Management
• TechRisk Management as an outcome
• TechRisk Management as a role, function, or organisational department
• TechRisk Management as a set of activities
• TechRisk Management as a business enabler
• Popular best practices and frameworks for TechRisk Management

2. Defining the Tech Risk Approach

• Understanding the organisation and its context for TechRisk Management
• Articulating drivers and benefits of a TechRisk Management Framework (TRMF) implementation
• Understanding the difference between TechRisk Management processes and TechRisk Management Function
• Initiating a TRMF project (based on a capability assessment / gap analysis)
• Developing the business case, including definition of the scope and coverage for the TRMF implementation
• Designing and implementing TechRisk Management Framework (TRMF) using a lifecycle-based approach
  • Defining TechRisk governance, including leadership and commitment
  • Determining responsibility for TechRisk management roles and activities
  • Defining and socialising TechRisk Appetite
  • Defining the approach and methodology for TechRisk Assessment and Treatment
• Do’s and Don’ts of a TRMF implementation and maintenance

3. Understanding the organisation and its technology related risks, opportunities, and associated business objectives

• Identifying TechRisks using Top-Down and PARI One-pagers ™ methodologies
• Alignment with the Enterprise Risk Management approach and practices
• Explore automation possibilities for TechRisk recording and reporting
• Creating an inventory of TechRisk Classification and Categories
• Defining and building the appropriate risk culture

4. Understand technology and information management related controls and the operational environment

• Understanding Technology Capability Framework / IT Operating Models
• Leveraging Technology or IT capabilities for effectively managing TechRisks, including:
  • Strategy and Enterprise Architecture
  • Data Governance / Information Lifecycle Management
  • Innovation and Emerging Technology Enhancements
  • IT Operations and Service Management
  • Project Management
• Determining and addressing potential dependencies and integration with broader technology governance, compliance, and assurance requirements including Cyber Security, Privacy, Business Continuity, Vendor Governance / Assurance, Due diligence

5. Continual Improvement using TRMF

• Monitoring and communicating risk profile through performance evaluation, KPI’s and KRI’s
• Build-Your-Own Capability maturity model for TRMF improvement
• Risk process improvement

6. TechRisk Management Lead Implementer Exam