Risk management training in Kenya
Regulators now expect a documented enterprise risk management framework, a board-approved risk appetite and regular risk reporting. This course teaches risk teams and risk champions to build and run risk registers, indicators and reports that meet those expectations.
Choose how your team takes the course
On demand suits people joining through the year and annual refreshers. Live sessions use your own policies, products and cases.
KES 12,000per learner
- Start as soon as payment is confirmed
- Certificate of completion
- Completion report for your records
KES 12,000per learner per hour
- From 1 hour; you choose the length
- On Zoom or Teams
- Tailored to your operations
KES 12,000per learner per hour, minimum 5-hour session
- At your premises
- Combine with other courses to fill the session
- Case exercises in groups
From the 5th hour, each extra hour is half price. Live and in-person prices are calculated on a minimum of 5 learners; smaller groups are welcome and are priced as 5. For more than 75 learners or more than 16 hours we prepare a custom proposal. All prices include taxes; travel outside Nairobi is charged at cost.
What regulators and standards expect
The course is built on the frameworks Kenyan regulators and boards rely on.
| Rule or standard | What it requires | Applies to |
|---|---|---|
| ISO 31000:2018 | Principles, framework and process for managing any type of risk (under revision; the 2018 edition still applies). | Any organisation |
| COSO ERM (2017) | Integrating risk management with strategy and performance. | Listed companies, groups and larger organisations |
| CBK, SASRA and IRA risk management guidelines | A documented framework, risk appetite and risk reporting to the board. | Regulated institutions |
Recent developments and emerging issues
The course is updated as rules change. These are the developments it currently covers. Last reviewed: October 2026.
CBK draft Risk Management Guidelines
17 risk categories including cyber, data, ESG, model and third-party risk, three lines of defence and a board-approved risk appetite.
ISO 31000 is being revised
The 2018 edition still applies.
Climate risk disclosure
The CBK climate risk disclosure framework (April 2025), and IFRS S1 and S2 for public interest entities from 2027.
AI and model risk in Kenyan rules
The CBK drafts expect explainability and human oversight, and the credit-provider regulations (LN 191/2026) require explainable automated credit decisions.
Africa's top risks
Cybersecurity, fraud, and digital disruption including AI (IIA Risk in Focus).
What your team will learn
Each section ends with a short knowledge check. Learners who finish every section receive a certificate of completion.
ISO 31000 and COSO ERM in practice
Choosing and applying a framework.
Risk identification
Workshops, interviews and data.
Assessment and scoring
Likelihood, impact and residual risk.
Risk registers
Owners, controls, ratings and actions.
Risk appetite and key risk indicators
Limits the board approves and indicators that warn early.
Risk and control self-assessment
Running RCSA that builds risk ownership.
Reporting to management and the board
Reports that direct attention to what matters.
Emerging risks
Cyber, AI, climate and third-party risk.
Records for your training file
The evidence pack records who was trained, on what and when, for your audit committee and regulators.
- 1Certificates of completionOne per learner who completes the course, with a unique number, the course, date and hours.
- 2Completion or attendance reportWho completed or attended, when, and in which edition.
- 3Knowledge check resultsScores from the checks at the end of each section.
- 4Course outlineThe content and the rules it addresses.
FNJ's internal audit and risk team
The same team builds ERM frameworks, runs risk assessments and implements Trigarc Risk.
CIA and CRMA
Certified Internal Auditors and Certification in Risk Management Assurance.
Built around your organisation
Before each live or in-person session we send a short questionnaire, so the cases come from your own policies, operations and findings.
Enterprise risk management framework
How to build an ERM framework that works.
ERM framework guideOften taken together
GRC Team Development combines this course with related courses at 10% off when booked live or in person.
GRC Team Development
Internal audit, risk management, compliance and board paper writing.
On demand KES 48,000 per learner · 10% off live or in person
Internal audit: tools and report writing
Practical skills for new and junior auditors.
Course detailsCompliance for compliance teams
Registers, monitoring and regulatory change.
Course detailsPrice your training
Risk management training is already ticked. Add other courses if you need them, then submit the form to see the payment details.
Questions about risk management training
Where can I study risk management in Kenya?
Professional qualifications are offered by bodies such as the Institute of Risk Management and through university programmes. This course is practical team training for people who run risk management in their organisation, not a qualification.
Which course is best for risk management?
It depends on your role. Qualifications suit individuals building a career; practical team training suits organisations that need risk registers, appetite and reporting working now.
What is RCSA?
Risk and control self-assessment: business units identify their risks, assess the controls that address them and rate the residual risk, usually in facilitated workshops.
Does the course cover the CBK's 2026 drafts?
Yes. The draft Risk Management Guidelines are covered in a section labelled as draft, updated when the final text is issued.
What does it cost?
KES 12,000 per learner on demand, or KES 12,000 per learner per hour live or in person, inclusive of taxes.
Get your risk register working
Tell us how many people need training and by when. We reply within one working day.