Education / Course Details

Risk and Control Self Assessment  

Unlock the full potential of your risk management strategy.

About this course

The Risk and Control Self-Assessment (RCSA) course offered by The Protecht Group, in partnership with the Risk Management Institution of Australasia (RMIA) is comprehensive training, tailored specifically for experienced risk managers seeking to refine their skills and enhance their organisation’s risk management capabilities.


Course specifics

Audience: Risk managers, compliance officers, internal auditors and other risk management professionals who are responsible for overseeing and implementing risk management strategies

Cost: $770.00 (members), $924.00 (non-members)

Facilitator: The Protecht Group

Format: On-Demand

Time: 4.5 hours of video content 

CPD Points: 5

Course Facilitator:
The Protecht Group


Course details

This hands-on training is perfect for seasoned risk managers looking to refine their skills and tackle real-world challenges. You’ll get practical, actionable insights on identifying risks, assessing controls, and integrating RCSA into your organisation’s strategy. Through interactive workshops and expert guidance, you'll learn to make your risk management processes more effective and aligned with industry best practices. Elevate your expertise and drive impactful improvements in your organisation’s risk management today.

Key topics covered:

1. Objectives and purpose of RCSA

  • Objectives of RCSA

  • What is RCSA?

2. What are we assessing – risks

  • Types of risk

  • Components of risk

  • Risk bow ties

  • Measures of risk

3. What are we assessing – controls

  • Types of controls

  • How controls modify risk

  • Control classifications

4. Risk and control taxonomies

  • Objectives of taxonomies

  • Common types of taxonomies

  • Using taxonomies in RCSA

5. Risk management and RCSA frameworks

  • How RCSA integrates with other risk processes

  • Risk and reward framework

  • RCSA in an enterprise risk management framework

6.  Approaches to risk assessment

  • Tools and techniques for risk assessment 

7. RCSA methods

  • Determining what we will assess

  • Likelihood and impact scales

  • Setting likelihood scales: what measure?

  • Setting impact scales: how many types of impact?

  • Assessing risks: inherent, residual and targeted

  • Assessing the effectiveness of controls

8. RCSA process

  • Identifying business and process objectives

  • Identifying critical processes

  • Identifying risks

  • Identifying controls

  • Evaluating risks

  • Treatment methods

  • Methods for collecting information

  • Preparing for a risk workshop

  • Facilitating a risk workshop

9. RCSA reporting

  • Types of report and information

  • Information to report

  • Including RCSA in an aggregated dashboard report

  • Interpreting reports

10. When should risk assessment be carried out?

  • Periodic risk assessment

  • Dynamic risk assessment

  • Integration with other risk processes

  • Formal and informal risk assessment

11. Roles and responsibilities

  • RCSA and the three-lines model

  • Who owns risk and controls?

  • Who owns risk and control self assessment?

Learning outcomes:

  • Master RCSA Techniques: Gain advanced skills in identifying, evaluating, and managing risks within your organisation through effective RCSA practices. Learn to design and implement robust risk assessments and control evaluations that align with your organisation's objectives and regulatory requirements.

  • Apply Best Practices: Develop a deep understanding of best practices for integrating RCSA into your broader risk management framework. Learn to effectively report and communicate RCSA findings to drive continuous improvements and enhance overall risk management processes.

  • Enhance Practical Skills: Engage in interactive workshops and case studies to apply RCSA concepts to real-world scenarios. Build practical skills that will enable you to address complex risk management challenges and make informed, strategic decisions within your organisation.