Qualifi Certified Professional in Operational Risk Management (QCP-ORM)
Build practical, job-ready capability in operational risk management through a structured professional programme that covers governance, framework design, RCSA, scenario ...
Show more
Instructor
اتحاد المدربين العرب
1
Student
enrolled
- Description
- Curriculum
- Reviews
- Grade
Qualifi Certified Professional in Operational Risk Management
(QCP-ORM) Certificate
Qualifi Endorsed Course
The Qualifi Certified Professional in Operational Risk Management (QCP-ORM) Certificate is a practice-led professional certification designed for specialists and professionals working in operational risk, internal control, compliance, resilience, assurance, operations, technology, and related functions.
In today’s fast-changing operating environment, organisations need professionals who can do more than understand risk in theory.
They need people who can identify weaknesses early, assess exposures with discipline, respond to disruption intelligently, and present clear recommendations to management.
The programme develops a strong applied understanding of operational risk management by combining governance, framework design, risk identification, RCSA, scenario analysis, control evaluation, KRIs, loss-event review, operational resilience, business continuity, incident response, third-party dependency risk, and professional communication. Through structured modules, realistic case studies, workshops, and workplace-style assignments, learners build the capability to translate operational risk standards into practical tools such as dashboards, risk registers, action plans, and management-ready recommendations.
This endorsed certificate is ideal for professionals who want to strengthen their ability to identify, assess, report, and manage operational-risk exposures in modern organisations and regulated environments.
Module 1 Operational Risk Foundations, Drivers, Taxonomy, and Risk Context
-
1
Overview: Understanding Operational Risk in Context -
2
Understanding Operational Risk in Context
-
3
Session 1: Understanding Operational Risk in Context -
4
Activity Discussion - Live Chat -
5
Test your knowledge: Understanding Operational Risk in Context -
6
Mini-case
-
7
Formative assessment quiz- Understanding Operational Risk in Context
-
8
Overview: Drivers, Sources, Categories, and Taxonomy
Welcome to Session 2: Drivers, Sources, Categories, and Taxonomy.
-
9
Session 2: Drivers, Sources, Categories, and Taxonomy
-
10
QCP-ORM Session 2: Drivers, Sources, Categories, and Taxonomy
-
11
Worksheet QCP-ORM Session2 -
12
Mini-case: Digital onboarding breakdown
-
13
Knowledge check: Session 2: Drivers, Sources, Categories, and Taxonomy
-
14
Assignment : Operational Risk Driver Map and Classification Brief
-
15
Overview: Session 3: Operational Risk versus Enterprise Risk, Compliance Risk, and Conduct Risk
-
16
Session 3: Operational Risk versus Enterprise Risk, Compliance Risk, and Conduct Risk
This session helps you distinguish operational risk from other closely related ideas that often appear in the same incident. You will learn how enterprise risk management provides the wider organisational framework, how compliance risk focuses on obligations and rules, and how conduct risk focuses on behaviour and harmful outcomes. The aim is practical: clearer classification leads to clearer ownership and better action.
-
17
QCP-ORM Session 3: Operational Risk versus Enterprise Risk, Compliance Risk, and Conduct Risk
-
18
Mini-case: Session 3: Operational Risk versus Enterprise Risk, Compliance Risk, and Conduct Risk
-
19
Downloadable Worksheet: Lesson 3
-
20
Formative assessment: Lesson 3> Module 1Use the quiz for a quick competence check at the end of the session.
-
21
Distinguishing the right risk lens in a mixed scenario
-
22
Overview: Session 4: Operational Risk and Organisational Resilience
-
23
Session 4: Operational Risk and Organisational Resilience
-
24
Session 4: Operational Risk and Organisational Resilience
-
25
Module 1 Lesson 4: Exercise : Key concept matchMatch each term to a short definition
-
26
Activity Module 1: Lesson 4 Class: Protect, respond, recover, or learn?Read each statement and classify it under one of four resilience stages: Protect, Respond, Recover, or Learn.
-
27
Class activity: Protect, respond, recover, or learn?
-
28
Module 1 Session 4: Mini-case analysis
-
29
Module 1 Lesson 4: Session assignment- Resilience analysis brief
-
30
Module 1 Lesson 4: Formative quiz
-
31
Overview Session 5: Taxonomy and Classification of Operational Risk Exposures
Welcome to Session 5: Taxonomy and Classification of Operational Risk Exposures.
-
32
QCP-ORM Session 5: Taxonomy and Classification of Operational Risk Exposures
-
33
QCP-ORM Session 5: Taxonomy and Classification of Operational Risk Exposures
-
34
Worksheet Session 5: Taxonomy and Classification of Operational Risk Exposures
-
35
Mini-case: Notification and processing breakdown after partner migration
-
36
Taxonomy application brief
-
37
Module 1 Session 5: Formative quiz
Module 2: Operational Risk Governance and Framework Design
-
38
Overview Session 1: Operational Risk Governance - Boards, Senior Management, and Accountability
-
39
QCP-ORM Module 2 / Session 1: Operational Risk Governance - Boards, Senior Management, and Accountability
-
40
Downloadable Worksheet
-
41
Mini-case: Orion Payments Group
-
42
Session assignment: Board and Senior Management Responsibilities for Operational Risk Governance
-
43
Formative quiz- Module 2- Lesson 1
-
44
Overview QCP-ORM Module 2 / Session 2: The Three Lines Model and Role Clarity in Operational Risk
-
45
QCP-ORM Module 2 / Session 2: The Three Lines Model and Role Clarity in Operational Risk
-
46
Downloadable Worksheet : QCP-ORM Module 2 / Session 2: The Three Lines Model and Role Clarity in Operational Risk
-
47
Mini-case: CedarPay Services
-
48
Applying the Three Lines Model to Operational Risk Management
-
49
Formative quiz: Module 2 / Session 2: The Three Lines Model and Role Clarity in Operational RiskUse the quiz at the end of the session to test whether you can distinguish ownership, challenge, and assurance clearly.
-
50
Overview QCP-ORM Module 2 / Session 3: Policy, Risk Appetite, Risk Tolerance, and Control Environment
-
51
QCP-ORM Module 2 / Session 3: Policy, Risk Appetite, Risk Tolerance, and Control Environment
-
52
Mini-case: NorthGate Payments Group
-
53
Making Policy, Appetite, Tolerance, and Control Environment Work in Operational Risk Management
-
54
Downloadable Worksheet : QCP-ORM Module 2 / Session 3: Policy, Risk Appetite, Risk Tolerance, and Control Environment
-
55
Formative quiz: Module 2 / Session 3: Policy, Risk Appetite, Risk Tolerance, and Control Environment
-
56
Overview Module 2 / Session 4 Escalation and Reporting Arrangements in Operational Risk Governance
-
57
Module 2 / Session 4 | Escalation and Reporting Arrangements in Operational Risk Governance
-
58
Downloadable Worksheet| Module 2 / Session 4 Escalation and Reporting Arrangements in Operational Risk Governance
-
59
Mini-case: Delayed escalation in a payment services firm
-
60
Escalation and reporting review
-
61
Formative assessment| Module 2 / Session 4 Escalation and Reporting Arrangements in Operational Risk Governance
-
62
Overview Module 2 / Session 5 Designing the Core Elements of an Operational Risk Management Framework
-
63
Module 2 / Session 5 Designing the Core Elements of an Operational Risk Management Framework
-
64
Activity : Build the framework
-
65
Mini-case: Building an ORMF for NoorBridge Digital Finance
-
66
Formative Assessment| Module 2 / Session 5 Designing the Core Elements of an Operational Risk Management Framework
-
67
ORMF design
Module 3 Operational Risk Identification, Assessment, Analysis, and Reporting
-
68
Overview Module 3 / Session 1 Operational Risk Identification Using Process Analysis and Activity Review
Welcome to Session 1
-
69
Module 3 / Session 1 Operational Risk Identification Using Process Analysis and Activity Review
-
70
Activity : Map the process and spot the risk
-
71
Mini-case: Settlement delays at CedarPay Services
-
72
Process-based operational risk identification
-
73
Downloadable Worksheet| Module 3 / Session 1 Operational Risk Identification Using Process Analysis and Activity Review
-
74
Formative quiz| Module 3 / Session 1 Operational Risk Identification Using Process Analysis and Activity Review
-
75
Overview Module 3 / Session 2 | Conducting a Structured Risk and Control Self-Assessment (RCSA)
Welcome to Session 2
-
76
Module 3 / Session 2 | Conducting a Structured Risk and Control Self-Assessment (RCSA)
-
77
Activity : Build an RCSA for an Assigned Process or Business Area
-
78
Mini-case: Orion Bank card-dispute operations
-
79
Formative quiz| Module 3 / Session 2 Conducting a Structured Risk and Control Self-Assessment (RCSA)
-
80
Structured RCSA
-
81
Overview Module 3 / Session 3 | Scenario Analysis, Control Evaluation, and Event Review
Welcome to Session 3
-
82
Module 3 / Session 3 | Scenario Analysis, Control Evaluation, and Event Review
-
83
Activity: Assess the scenario, rate the controls, review the event
-
84
Mini-case: NovaBank digital-account onboarding disruption
-
85
Formative quiz Module 3 / Session 3 | Scenario Analysis, Control Evaluation, and Event Review
-
86
Integrated assessment note
-
87
Overview Module 3 / Session 4 | Operational Risk Information, KRIs, Threshold Triggers, Event Data, Issue Logs, and Action Plans
Welcome to Session 4
-
88
Module 3 / Session 4 | Operational Risk Information, KRIs, Threshold Triggers, Event Data, Issue Logs, and Action Plans
-
89
Formative Assignment| Build an Operational Risk Dashboard and Management Commentary
-
90
Mini-case: Horizon Bank onboarding and access control trends
-
91
Formative quiz Module 3 / Session 4 | Operational Risk Information, KRIs, Threshold Triggers, Event Data, Issue Logs, and Action Plans
-
92
Operational risk information
-
93
Overview Module 3 / Session 5 Preparing Operational Risk Reports and Dashboards for Management
Welcome to Session 5
-
94
Module 3 / Session 5 Preparing Operational Risk Reports and Dashboards for Management
-
95
Mini-case: Orion Bank monthly operational risk report
-
96
Formative quiz Module 3 / Session 5 | Preparing Operational Risk Reports and Dashboards for Management
-
97
Assignment: Prepare a concise operational risk dashboard or management
Module 4 Technology, Third-Party Risk, Operational Resilience, and Professional Recommendations
-
98
Overview Module 4 / Session 1 | Technology Dependency, Cyber Events, Data Issues, Models, and Third-Party Risk
Welcome to Module 4 / Session 1
-
99
Module 4 / Session 1 Technology Dependency, Cyber Events, Data Issues, Models, and Third-Party Risk
-
100
Downloadable Worksheet| Module 2 / Session 4 Escalation and Reporting Arrangements in Operational Risk Governance
-
101
Activity : Dependency map and exposure review
-
102
Assignment: Mini-case: Nimbus Lending platform disruption
-
103
Formative quiz Module 4 / Session 1 | Technology Dependency, Cyber Events, Data Issues, Models, and Third-Party Risk
-
104
Session assignment: Technology and third-party exposure review
-
105
Overview Module 4 / Session 2 Business Continuity, Incident Response, Disruption Testing, and Dependency Mapping
Welcome to Module 4 / Session 2
-
106
Module 4 / Session 2 Business Continuity, Incident Response, Disruption Testing, and Dependency Mapping
-
107
Mini-case: Orion Payments weekend outage
-
108
Formative quiz Module 4 / Session 2 | Business Continuity, Incident Response, Disruption Testing, and Dependency Mapping
-
109
Session assignment: Resilience capability review
-
110
Downloadable Worksheet | Business Continuity, Incident Response, Disruption Testing, and Dependency Mapping
-
111
Overview Module 4 / Session 3 | Lessons Learned from Incidents, Near Misses, and Case Material
Welcome to Module 4 / Session 3
-
112
Module 4 / Session 3 | Lessons Learned from Incidents, Near Misses, and Case Material
-
113
Mini-case: Falcon Trust reporting near miss
-
114
Formative quiz Module 4 / Session 3 | Lessons Learned from Incidents, Near Misses, and Case Material
-
115
Session assignment: Lessons-learned improvement brief
-
116
Overview Module 4 / Session 4 | Evidence-Based Recommendations, Dashboards, and Action Plans
Welcome to Module 4 / Session 4
-
117
Module 4 / Session 4 | Evidence-Based Recommendations, Dashboards, and Action Plans
-
118
Mini-case: Solara Insurance operations dashboard request
-
119
Formative quiz Module 4 / Session 4 | Evidence-Based Recommendations, Dashboards, and Action Plans
-
120
Session assignment: Concise dashboard and action plan
-
121
Overview Module 4 / Session 5 Ethical Judgment, Confidentiality Awareness, and Professional Communication
Welcome to Module 4 / Session 5
-
122
Module 4 / Session 5 | Ethical Judgment, Confidentiality Awareness, and Professional Communication
-
123
Mini-case: Redwood Services sensitive findings briefing
-
124
Formative quiz Module 4 / Session 5 | Ethical Judgment, Confidentiality Awareness, and Professional Communication
-
125
Session assignment: Professional risk communication note
Please, login to leave a review
Course details
Lectures
55
Assignments
47
Quizzes
23
Level
Advanced
Learners who successfully complete all required learning and assessment components will be awarded the: Qualifi Certified Professional in Operational Risk Management (QCP-ORM) Certificate Award Type: Qualifi Endorsed Course Status: Non-regulated, quality-assured professional certificate Certification Condition: Successful completion of all mandatory modules and summative assessment requirements This programme should be marketed and certificated as an endorsed professional certificate and not as an Ofqual-regulated qualification. No formal RQF credit claim should be used.
Full Life Time Access
Access on mobile and TV
Basic info
Course Title
Qualifi Certified Professional in Operational Risk Management (QCP-ORM) Certification
Course Category
Professional certification / endorsed course
Award Route
Qualifi Endorsed Joint with Arab Trainers Union
Delivery Centre
Arab Trainers Union, with sector partnership and implementation support from The Association of Banks in Jordan (ABJ)
Delivery Mode
Face-to-face, live online, or blended
Recommended Duration
80 guided learning hours plus 80 independent/applied learning hours
Study Duration
6–12 weeks standard route, or 4–6 weeks intensive route
Modules
- Operational Risk Foundations, Drivers, Taxonomy, and Risk Context
- Operational Risk Governance and Framework Design
- Operational Risk Identification, Assessment, Analysis, and Reporting
- Technology, Third-Party Risk, Operational Resilience, and Professional Recommendations
Assessment Approach
- Knowledge test
- Written assignments
- Case-study analysis
- Practical RCSA or risk-reporting task
- Short professional presentation
- Workplace-based evidence, where available
Course requirements
Entry requirements include:
- degree-level education or equivalent professional experience
- at least two years of relevant experience in risk, audit, compliance, operations, technology, resilience, finance, or internal control
- sufficient language proficiency for the delivery medium
- for Arabic-medium cohorts, ability to produce professional written reports in Arabic, with English reading ability desirable
- basic digital literacy, including spreadsheets, document preparation, and participation in virtual learning.
Intended audience
This programme is designed for:
- operational risk officers, analysts, and coordinators
- RCSA owners and facilitators
- internal control, compliance, conduct-risk, and governance professionals
- business continuity, resilience, incident-management, and crisis-response professionals
- operations, technology, information-security, outsourcing, and third-party risk managers
- internal auditors moving into second-line or integrated risk roles
- supervisory, regulatory, or assurance professionals who need operational-risk capability and practical risk-management insight.
