Skip to content
Risk, Cybersecurity & Resilience5-day executive programUSD $1,999

Risk Appetite, Tolerance & Limits That Constrain

Write appetite statements that actually stop the bad deal.

IPAT Executive Certificate 5 intensive days CEOs, CROs, CISOs, CIOs, risk and compliance leaders, audit committee members, operations and resilience leaders; supervisors and regulators.

The executive challenge

The problem this program solves

Everyone owns a piece of risk appetite and nobody owns the consequence: three lines of defence that produce reports, not readiness. Risk that is documented rather than governed is discovered in a crisis — at the highest possible price. This is where risk appetite stops being a compliance artefact and becomes an executive discipline your board will recognise as one.

Context

Why this matters now

Boards are personally accountable for risk appetite oversight in ways regulation has only recently made explicit.
Third parties and platforms now carry a rising share of risk appetite exposure while accountability stays with the board.
Climate, macro and geopolitical shocks are converging on risk appetite faster than annual risk cycles can absorb.

Capability

What you will be able to do

  • Draft a risk appetite appetite statement that actually constrains decisions.
  • Lead risk appetite incident command when the organisation is under pressure.
  • Rehearse the risk appetite response before it is needed — command, disclosure and coordination.
  • Quantify risk appetite exposure in money — loss scenarios, tolerances and stress tests.

The IPAT Course Standard

The five-day journey

Each day is a deliberate progression in managerial capability — from strategic context, to analytical frameworks, to applied practice, to executive judgement under pressure, to a capstone that produces something your organisation keeps.

IPAT Signature Case™

The Trader Who Offered to Win It Back

A star dealer at a port authority has concealed mounting risk appetite losses through fictitious confirmations. The hole now threatens a quarter’s earnings; audit is close, and the dealer proposes a win-back plan.

Your decision: Decide exposure, escalation and sequence: what the board, the regulator and the market hear — and in what order.

Position and loss reconstructionConfirmation audit trail gapsCounterparty exposure schedule

IPAT Data Lab™

The risk appetite incidents at a regional bank are individually small and collectively serious — and no one has connected them.

Dataset: Synthetic multi-year incident, near-miss and control data for a regional bank.

Your task: Build the heat map, test the tolerances, and write the 4 a.m. command card for the top exposure.

A risk appetite heat map, impact tolerances and an incident command card.

Data → Analysis → Decision, not Data → Code → Certificate

Day 5 · The Capstone

What will you change when you return to work?

Produce an enterprise risk and resilience blueprint for your institution: appetite, architecture, incident readiness and the investment sequence.

You leave with: Enterprise Risk and Resilience Blueprint

Methodology

Frameworks you will master

IPAT-proprietary methodology
  • • IPAT Decision Intelligence Framework™
  • • IPAT Transformation Architecture™
Established practice you will apply
  • • Enterprise risk management (COSO ERM lineage)
  • • Three lines of defence
  • • Business continuity standards (ISO 22301-aligned)

Cohorts

Upcoming cohorts

New dates are being scheduled

Register with your preferred start date and our admissions team will match you to the next available cohort — or contact us to arrange an in-house delivery for your organisation.

Register your interest
base44
Edit with Base44