Skip to content

IT & Technology Risk Management Training Course

Integrates technology risk with enterprise risk, cybersecurity and resilience, showing how to assess and treat risks from applications, infrastructure and data.

TRM · Technology Risk ManagementAll Levels#2605ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Course Overview

This advanced practical course provides a structured framework for identifying, assessing, treating, and monitoring risks arising from information technology, digital platforms, applications, infrastructure, data, and emerging technologies. It focuses on integrating technology risk management with enterprise risk, cybersecurity, business continuity, governance, and operational resilience. The course examines technology risk across the full IT environment, including applications, networks, cloud services, databases, third-party providers, digital services, technology projects, and critical infrastructure. Participants will develop practical methods for identifying risk scenarios, assessing likelihood and impact, determining risk exposure, and prioritizing treatment actions. Particular attention is given to technology risk governance, risk appetite, controls, key risk indicators, risk assessments, control effectiveness, technology change, cloud adoption, third-party dependencies, and emerging technology risks. The program also addresses the relationship between technology failures, cyber incidents, data risks, regulatory requirements, financial impact, and business disruption. Practical exercises enable participants to build technology risk registers, assess technology risk scenarios, evaluate controls, define risk treatment plans, establish monitoring indicators, and develop an integrated technology risk management framework aligned with organizational objectives.

Learning Objectives

  • Analyze the principles and scope of IT and technology risk management.
  • Identify technology risk sources across systems, infrastructure, applications, data, and digital services.
  • Assess technology risks using likelihood, impact, exposure, and risk appetite criteria.
  • Develop practical technology risk assessment and classification methodologies.
  • Evaluate technology controls and determine control effectiveness.
  • Establish technology risk registers, risk owners, and treatment plans.
  • Assess risks associated with cloud computing, digital transformation, and emerging technologies.
  • Evaluate technology risks arising from third parties, suppliers, and outsourced services.
  • Integrate technology risk with cybersecurity, business continuity, and operational resilience.
  • Develop key risk indicators and monitoring mechanisms for technology risks.
  • Strengthen governance, reporting, escalation, and management decision-making.
  • Design an integrated IT and Technology Risk Management framework with continuous improvement mechanisms.

Who Should Attend

This course is designed for IT risk professionals, technology managers, IT governance specialists, cybersecurity professionals, information security managers, risk managers, internal control specialists, and professionals responsible for technology assurance. It is also suitable for CIOs, CTOs, IT managers, infrastructure and application managers, data and cloud professionals, project managers, business continuity specialists, internal auditors, compliance professionals, and senior decision makers involved in technology risk oversight. The program is particularly relevant to banks, financial institutions, government entities, telecommunications companies, energy and oil & gas organizations, healthcare organizations, large corporations, and other organizations with critical technology environments.

Learning Outcomes

  • Identify and classify technology risks across the IT environment.
  • Assess technology risk scenarios using structured risk assessment methods.
  • Determine risk exposure in relation to organizational risk appetite.
  • Develop technology risk registers and risk treatment plans.
  • Evaluate the design and operating effectiveness of technology controls.
  • Identify critical technology assets, services, dependencies, and failure points.
  • Assess cloud, digital transformation, and emerging technology risks.
  • Evaluate third-party and technology outsourcing risks.
  • Integrate technology risk with cybersecurity and operational resilience.
  • Develop meaningful technology risk indicators and monitoring dashboards.
  • Establish effective reporting, escalation, and governance mechanisms.
  • Develop a practical technology risk management framework and improvement roadmap.

Course Outline

Day 1

IT Risk Management Fundamentals & Technology Risk Landscape

  • Principles and objectives of technology risk management
  • Technology risk versus cybersecurity and operational risk
  • Technology risk categories and risk taxonomy
  • IT infrastructure, applications, data, and service risks
  • Critical systems and technology dependencies
  • Technology failure scenarios and business impact
  • Risk identification techniques
  • Risk ownership and accountability
  • Risk appetite and tolerance
  • Technology risk assessment methodology
  • Practical Application: Develop a technology risk profile for a representative organization
Day 2

Technology Risk Assessment, Controls & Risk Treatment

  • Technology risk identification and scenario development
  • Likelihood and impact assessment
  • Inherent and residual technology risk
  • Risk scoring and prioritization
  • Technology control frameworks
  • Preventive, detective, and corrective controls
  • Control design and operating effectiveness
  • Risk treatment options
  • Risk acceptance, mitigation, transfer, and avoidance
  • Technology risk registers and action plans
  • Practical Application: Conduct a technology risk assessment and develop a prioritized risk treatment plan
Day 3

Cloud, Digital Transformation & Third-Party Technology Risk

  • Cloud technology risk management
  • Infrastructure, platform, and software services
  • Cloud security and availability risks
  • Data and technology migration risks
  • Digital transformation and technology change risks
  • Emerging technology and innovation risks
  • Artificial intelligence and automation risks
  • Third-party technology dependencies
  • Outsourcing and service provider risk
  • Supplier resilience and concentration risk
  • Contractual, service-level, and assurance considerations
  • Practical Application: Assess cloud and third-party technology risks for a critical business service
Day 4

Technology Resilience, Cyber Risk & Business Continuity

  • Technology operational resilience
  • Cybersecurity and technology risk integration
  • Availability, recovery, and resilience risks
  • Disaster recovery and technology recovery capabilities
  • Business continuity dependencies
  • Incident and technology disruption scenarios
  • Recovery objectives and critical technology services
  • Data integrity, backup, and recovery risks
  • Technology change and configuration risks
  • Resilience testing and control validation
  • Practical Application: Develop a technology resilience and risk treatment plan for a critical system
Day 5

Technology Risk Governance, KRIs & Integrated Framework

  • Technology risk governance structures
  • Roles and responsibilities across IT, risk, security, and business functions
  • Risk appetite and technology risk reporting
  • Key risk indicators and control indicators
  • Risk dashboards and management reporting
  • Escalation and issue management
  • Technology risk committees and oversight
  • Regulatory and compliance considerations
  • Continuous monitoring and control improvement
  • Technology risk maturity assessment
  • Final Workshop: Develop an integrated IT & Technology Risk Management Framework covering risk identification, assessment, controls, governance, KRIs, reporting, treatment, resilience, and continuous improvement

Upcoming Dates

Selected date

Manama · 22 – 26 Feb 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
ViennaScheduled
2 – 6 Nov 2026€5,700—
AmmanScheduled
8 – 12 Nov 2026€3,100—
AmsterdamScheduled
16 – 20 Nov 2026€5,400—
BakuScheduled
23 – 27 Nov 2026€4,800€4,320until 2 Nov
BarcelonaScheduled
30 Nov – 4 Dec 2026€5,400€4,860until 9 Nov
CasablancaScheduled
7 – 11 Dec 2026€4,300€3,870until 16 Nov
CairoScheduled
7 – 11 Dec 2026€3,300€2,970until 16 Nov
DammamScheduled
14 – 18 Dec 2026€4,200€3,780until 23 Nov
DohaScheduled
21 – 25 Dec 2026€4,400€3,960until 30 Nov
DubaiScheduled
27 – 31 Dec 2026€4,400€3,960until 7 Dec
GenevaScheduled
4 – 8 Jan 2027€6,300€5,670until 14 Dec
IstanbulScheduled
11 – 15 Jan 2027€4,700€4,230until 21 Dec
LisbonScheduled
18 – 22 Jan 2027€5,400€4,860until 28 Dec
Kuala LumpurScheduled
18 – 22 Jan 2027€4,400€3,960until 28 Dec
LondonScheduled
25 – 29 Jan 2027€5,600€5,040until 4 Jan
MadinahScheduled
1 – 5 Feb 2027€4,200€3,780until 11 Jan
MadridScheduled
8 – 12 Feb 2027€5,400€4,860until 18 Jan
MakkahScheduled
15 – 19 Feb 2027€4,200€3,780until 25 Jan
ManamaScheduled
22 – 26 Feb 2027€4,700€4,230until 1 Feb
MarbellaScheduled
1 – 5 Mar 2027€5,400€4,860until 8 Feb
MunichScheduled
8 – 12 Mar 2027€5,400€4,860until 15 Feb
MilanScheduled
8 – 12 Mar 2027€6,000€5,400until 15 Feb
MuscatScheduled
15 – 19 Mar 2027€5,300€4,770until 22 Feb
OnlineScheduled
21 – 25 Mar 2027€1,700€1,530until 1 Mar
ParisScheduled
29 Mar – 2 Apr 2027€5,700€5,130until 8 Mar
RiyadhScheduled
5 – 9 Apr 2027€4,200€3,780until 15 Mar
RomeScheduled
12 – 16 Apr 2027€5,800€5,220until 22 Mar
SalalahScheduled
19 – 23 Apr 2027€5,300€4,770until 29 Mar
TrabzonScheduled
26 – 30 Apr 2027€4,700€4,230until 5 Apr
SingaporeScheduled
26 – 30 Apr 2027€6,700€6,030until 5 Apr

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.