Skip to content
Risk, Cybersecurity & Resilience5-day executive programUSD $1,999

Portfolio Risk, Selection & Capital Allocation

Select and balance the project portfolio on risk-adjusted value, not on the loudest sponsor.

IPAT Executive Certificate 5 intensive days CEOs, CROs, CISOs, CIOs, risk and compliance leaders, audit committee members, operations and resilience leaders; supervisors and regulators.

The executive challenge

The problem this program solves

Everyone owns a piece of portfolio risk and nobody owns the consequence: three lines of defence that produce reports, not readiness. Boards are no longer asked whether risk was managed; they are asked what they knew and when — and the register is not a defence. You will build the dashboard, draft the appetite statement and command the incident — the full craft of portfolio risk leadership, practised rather than described.

Context

Why this matters now

Supervisors now test portfolio risk resilience, not policies: impact tolerances, recovery capability and incident readiness.
Boards are personally accountable for portfolio risk oversight in ways regulation has only recently made explicit.
Climate, macro and geopolitical shocks are converging on portfolio risk faster than annual risk cycles can absorb.

Capability

What you will be able to do

  • Rehearse the portfolio risk response before it is needed — command, disclosure and coordination.
  • Lead portfolio risk incident command when the organisation is under pressure.
  • Draft a portfolio risk appetite statement that actually constrains decisions.
  • Report portfolio risk to the board in a way that informs decisions rather than reassures them.

The IPAT Course Standard

The five-day journey

Each day is a deliberate progression in managerial capability — from strategic context, to analytical frameworks, to applied practice, to executive judgement under pressure, to a capstone that produces something your organisation keeps.

IPAT Signature Case™

Friday, 21:40

A a mining group is hit by a ransomware event with portfolio risk systems only partially segmented. The attackers threaten to release customer data; the board wants service restored, the regulator wants answers, and the media already has a source.

Your decision: In the first two hours: payment posture, restoration sequence, disclosure — and who commands the portfolio risk response.

Incident timeline and containment mapRecovery time estimates by systemLegal notification obligations

IPAT Data Lab™

A a regional bank knows it loses money to operational events but cannot see where.

Dataset: Synthetic incident and operational loss dataset for a regional bank, including near misses and unrecorded events.

Your task: Quantify the exposure, find the concentration, and design a mitigation portfolio with a defensible business case.

A portfolio risk exposure dashboard and mitigation investment case.

Data → Analysis → Decision, not Data → Code → Certificate

Day 5 · The Capstone

What will you change when you return to work?

Produce an enterprise risk and resilience blueprint for your institution: appetite, architecture, incident readiness and the investment sequence.

You leave with: Enterprise Risk and Resilience Blueprint

Methodology

Frameworks you will master

IPAT-proprietary methodology
  • • IPAT Decision Intelligence Framework™
  • • IPAT Transformation Architecture™
Established practice you will apply
  • • Enterprise risk management (COSO ERM lineage)
  • • Three lines of defence
  • • Business continuity standards (ISO 22301-aligned)

Cohorts

Upcoming cohorts

New dates are being scheduled

Register with your preferred start date and our admissions team will match you to the next available cohort — or contact us to arrange an in-house delivery for your organisation.

Register your interest
base44
Edit with Base44