Risk & Compliance Banking Course

An end to end view of how banks identify, assess, control, monitor, report and respond to financial, operational and conduct risks.

Risk Foundations & Governance

Risk Management Foundations — Risk, control, exposure, appetite, tolerance and residual risk
Three Lines Model — Business ownership, independent oversight and internal audit
Risk Appetite Framework — Statements, metrics, limits, triggers and escalation
Enterprise Risk Taxonomy — A common language for classifying bank risks
Risk Committees & Governance — Board, executive and specialist committee responsibilities
Policies, Standards & Procedures — How governance expectations become operational controls
Issues, Actions & Exceptions — Control gaps, remediation ownership, due dates and closure evidence
Risk Culture & Accountability — Decision behaviour, challenge, ownership and consequence management

Credit Risk — Default risk, obligor assessment, collateral and portfolio concentration
Counterparty Credit Risk — Exposure arising from derivatives, securities financing and settlement
Market Risk — Interest rate, FX, equity, commodity and spread movements
Liquidity & Funding Risk — Cash obligations, funding stability and stress liquidity
Interest Rate Risk in the Banking Book — Earnings and economic value sensitivity to rate changes
Concentration Risk — Excess exposure to sectors, geographies, products or counterparties
Country & Sovereign Risk — Political, transfer, convertibility and sovereign default exposure
Capital Adequacy — Capital structure, risk weighted assets and capital planning
Basel Framework — Pillar 1, Pillar 2, Pillar 3 and supervisory expectations
Stress Testing — Scenario design, loss estimation and management response
Recovery & Resolution Planning — Recovery options, resolution strategies, resolvability and crisis readiness

Operational Risk — Events, losses, control failures and risk assessment
Operational Resilience — Important business services, impact tolerances and recovery
Business Continuity & Crisis Management — Preparedness, command structures, testing and communication
Technology Risk — Change, availability, capacity, obsolescence and technology controls
Cyber Risk Governance — Cyber accountability, threat oversight and control assurance
Third Party & Outsourcing Risk — Due diligence, contracting, monitoring, concentration and exit
Data Risk — Data quality, lineage, ownership, privacy and regulatory use
Model Risk — Model inventory, validation, limitations, monitoring and governance
People & Conduct Risk — Misconduct, incentives, competence, conflicts and customer harm
Physical Security & External Events — Facilities, geopolitical disruption, natural hazards and safety

Financial Crime Framework — Governance across AML, sanctions, fraud, bribery and tax evasion
Customer Due Diligence & KYC — Identity, ownership, purpose, expected activity and customer risk rating
Know Your Business (KYB) — Legal entities, beneficial ownership, control and business legitimacy
Enhanced Due Diligence — Higher risk customers, source of wealth and source of funds
Politically Exposed Persons — Identification, approval, monitoring and associated persons
Transaction Monitoring — Scenarios, thresholds, alerts, investigation and tuning
Sanctions Compliance — List screening, payment screening, ownership rules and escalation
Anti Bribery & Corruption — Gifts, intermediaries, public officials and control expectations
Fraud Risk Management — Prevention, detection, response, recovery and customer protection
Suspicious Activity Reporting — Decisioning, confidentiality, filing and law enforcement interaction
Correspondent Banking Due Diligence — Respondent risk, nested relationships and payable through accounts
Trade Based Money Laundering — Invoice manipulation, goods, routes and trade finance red flags
Tax Crime & Evasion Facilitation — Tax transparency, facilitation risk and reporting obligations
De-risking & Offboarding Governance — Policies and frameworks for exiting customers or markets due to unmanageable risk
Information Sharing & Public-Private Partnerships — Governance for sharing intelligence safely with other institutions or public bodies

Regulatory Architecture — Legislators, regulators, supervisors, central banks and industry bodies
Regulatory Change Management — Horizon scanning, impact assessment, implementation and evidence
Compliance Risk Assessment & Obligations — Obligation inventories, applicability, risk assessment, ownership and control mapping
Licensing & Permissions — Activities a bank is authorised to perform and related conditions
Conduct of Business — Fair treatment, suitability, disclosure and sales practices
Consumer Protection & Customer Outcomes — Fair products, price, support, understanding, Consumer Duty and foreseeable harm
Product Governance — Target markets, approvals, reviews and distribution controls
Market Conduct — Market abuse, conflicts, information barriers and surveillance
Data Protection & Banking Secrecy — Lawful processing, confidentiality, rights and cross border transfers
Complaints & Redress — Complaint handling, root causes, remediation and compensation
Regulatory Reporting — Ownership, data quality, submission controls and attestation
Vulnerable Customer Protection — Identifying and managing interactions with customers facing cognitive or situational vulnerabilities
Financial Promotions & Marketing Compliance — Oversight to ensure advertising is fair, clear and not misleading

Control Design — Preventive, detective, corrective, manual and automated controls
Risk & Control Self Assessment — Process risks, controls, ratings, gaps and actions
Key Risk Indicators — Metrics, thresholds, trend analysis and management response
Compliance Monitoring — Risk based testing of regulatory obligations and controls
Control Testing — Design effectiveness, operating effectiveness and evidence
Internal Audit — Independent assurance, findings, ratings and follow up
Quality Assurance — Case review, consistency, sampling and feedback loops
Incident & Loss Event Management — Capture, investigation, impact, root cause and lessons
Root Cause Analysis — Finding systemic causes beyond the immediate failure
Management Information & Reporting — Clear risk reporting for operational and executive decisions
Policy Exceptions & Waivers Governance — The lifecycle and oversight for temporary or permanent exceptions to compliance policy

Case Management — Intake, triage, ownership, evidence, decisions and closure
Financial Crime Investigations — Customer, account, transaction and network analysis
Regulatory Breach Management — Assessment, notification, remediation and accountability
Customer Remediation — Population identification, calculation, payment and assurance
Regulatory Examinations — Information requests, interviews, evidence and response governance
Enforcement Actions & Supervisory Remediation — Findings, obligations, milestones, accountability and sustainable closure
Whistleblowing & Speak Up — Protected reporting, investigation and non retaliation
Lessons Learned — Turning incidents and findings into stronger controls and behaviour

Climate & Environmental Risk — Physical, transition and liability risks
AI & Algorithmic Risk — Bias, explainability, human oversight, misuse and accountability
Digital Asset Risk — Custody, market integrity, financial crime and operational exposure
Geopolitical Risk — Sanctions, conflict, fragmentation and cross border disruption
Quantum & Future Technology Risk — Long term cryptographic and technology transition concerns
Systemic & Contagion Risk — Interconnected institutions, markets and infrastructure