Start a conversation ↗

Description

Compliance Risk Mapping: Identify, Rate and Steer the Action Plan

Build a compliance risk map that genuinely drives the annual action plan

  • 1 day — 7 h
  • In-person or virtual
  • Intermediate
  • Up to 6 participants

Many compliance risk maps remain administrative spreadsheets: risks worded in overly general terms, uniform ratings that prioritise nothing, and an action plan disconnected from actual processes. Interviews with operational teams are rushed and existing controls are not factored into the assessment of residual risk.

Two hours to work through the method: process-by-process breakdown, identification of compliance risks, inherent and residual rating, action plan and periodic updating. This short format addresses internal compliance risks, as distinct from upstream risks covered by supplier risk mapping.

Learning objectives

  • Break down activities into processes exposed to compliance risk
  • Word a compliance risk in usable terms
  • Rate inherent risk and then residual risk
  • Link each risk to the controls already in place
  • Build a prioritised action plan monitored over time

What makes this programme different

An interview method with operational teams to surface the real risks
A systematic distinction between inherent risk and residual risk
A reporting format that senior management can readily understand

Programme

1Framing the Exercise

Deciding what to map

  • Expected objectives and sponsor of the risk map
  • Breakdown by process and by entity
  • Choice of rating scales
  • Organising interviews with operational teams

2Identifying and Assessing

From declared risk to residual risk

  • Precise wording of the risk and its scenario
  • Rating impact and likelihood
  • Inventory of existing controls and their effectiveness
  • Moving from inherent risk to residual risk

3Action Plan and Updating

Keeping the tool alive

  • Prioritising actions and assigning responsibilities
  • Tracking deadlines and supporting evidence
  • Reporting to governance bodies
  • Update frequency and trigger events

Who is it for

Compliance officers and in-house counsel, as well as internal control professionals responsible for producing or reviewing a risk map.

Prerequisites

Familiarity with the main compliance obligations applicable to your sector.

Dates & locations

36 scheduled dates between November 2026 and December 2027. Seats are confirmed in the order enquiries are received.

November 2026

December 2026

January 2027

February 2027

March 2027

April 2027

May 2027

June 2027

September 2027

October 2027

November 2027

December 2027

None of these dates suit you? We open additional sessions on request, and any programme can be run privately for your team.

Practical details

Before the programme
Online positioning questionnaire. Your development objectives are shared with the trainer, who tailors the practical case studies to your context.
Teaching methods
Theoretical input, workshops and practical case studies. Digital course materials and method sheets provided.
Assessment
Multiple-choice tests and role-play exercises. Assessment of learning at the start and end of the programme, with immediate and 60-day follow-up evaluations.
After the programme
One year of access to the e-learning platform. Self-assessment of the skills acquired and a 30-day follow-up session with your trainer.
How to register
Registration online or on the basis of a quotation.
Lead time
11 working days after confirmation of registration.
Accessibility
Accessible to people of determination. Contact our accessibility coordinator to design a suitable solution: contact@mpf-academy.ae
Start dates
Rolling intake: in addition to the scheduled sessions, this programme can start on request.