Enterprise Risk Management (ERM) and governance : building enterprise risk management capabilities within internal audit, appetite and tolerance, strategic and emerging risks, registers and heat maps.
Assessment and control : impact-likelihood, inherent and residual risks, risk-and-control matrices, tests, evidence, remediation and action follow-up.
Risk Intelligence and decision-making : key risk indicators (KRI), key performance indicators (KPI), executive dashboards, weak signals, scenarios, data analytics and responsible AI.
Resilience and transformation : continuity, crisis, cyber, third parties, projects, transformations, integrated assurance and three lines model.
Leadership and governance : Board of Directors, Audit Committee, Executive Management, risk workshops, network coordination and executive communication.
Frameworks and tools : COSO Enterprise Risk Management, COSO Internal Control, International Organization for Standardization (ISO) 31000, 2024 Global Internal Audit Standards, TeamMate, Pentana, IDEA, SAP, Oracle, Excel and Microsoft 365.