Skip to content
Risk, Cybersecurity & Resilience5-day executive programUSD $1,999

The Controller's Mandate: Close, Control & Compliance

Own the numbers, the controls and the calendar — credibly.

IPAT Executive Certificate 5 intensive days CEOs, CROs, CISOs, CIOs, risk and compliance leaders, audit committee members, operations and resilience leaders; supervisors and regulators.

The executive challenge

The problem this program solves

Third parties now carry as much of your controller's mandate exposure as you do, while the contract, the controls and the board reporting have not caught up. Reputations built over decades are spent in the first week of an unmanaged controller's mandate event. You leave with a resilience blueprint that names your tolerances, tests your recovery and tells the board the truth.

Context

Why this matters now

Cyber adversaries now target African institutions at industrial scale — controller's mandate events are operating costs, not exotic risks.
Boards are personally accountable for controller's mandate oversight in ways regulation has only recently made explicit.
Third parties and platforms now carry a rising share of controller's mandate exposure while accountability stays with the board.

Capability

What you will be able to do

  • Lead controller's mandate incident command when the organisation is under pressure.
  • Rehearse the controller's mandate response before it is needed — command, disclosure and coordination.
  • Quantify controller's mandate exposure in money — loss scenarios, tolerances and stress tests.
  • Design a controller's mandate risk architecture that anticipates rather than documents.

The IPAT Course Standard

The five-day journey

Each day is a deliberate progression in managerial capability — from strategic context, to analytical frameworks, to applied practice, to executive judgement under pressure, to a capstone that produces something your organisation keeps.

IPAT Signature Case™

The Trader Who Offered to Win It Back

A star dealer at a national power utility has concealed mounting controller's mandate losses through fictitious confirmations. The hole now threatens a quarter’s earnings; audit is close, and the dealer proposes a win-back plan.

Your decision: Decide exposure, escalation and sequence: what the board, the regulator and the market hear — and in what order.

Position and loss reconstructionConfirmation audit trail gapsCounterparty exposure schedule

IPAT Data Lab™

A a regional bank knows it loses money to operational events but cannot see where.

Dataset: Synthetic incident and operational loss dataset for a regional bank, including near misses and unrecorded events.

Your task: Quantify the exposure, find the concentration, and design a mitigation portfolio with a defensible business case.

A controller's mandate exposure dashboard and mitigation investment case.

Data → Analysis → Decision, not Data → Code → Certificate

Day 5 · The Capstone

What will you change when you return to work?

Produce an enterprise risk and resilience blueprint for your institution: appetite, architecture, incident readiness and the investment sequence.

You leave with: Enterprise Risk and Resilience Blueprint

Methodology

Frameworks you will master

IPAT-proprietary methodology
  • • IPAT Decision Intelligence Framework™
  • • IPAT Transformation Architecture™
Established practice you will apply
  • • Enterprise risk management (COSO ERM lineage)
  • • Three lines of defence
  • • Business continuity standards (ISO 22301-aligned)

Cohorts

Upcoming cohorts

New dates are being scheduled

Register with your preferred start date and our admissions team will match you to the next available cohort — or contact us to arrange an in-house delivery for your organisation.

Register your interest
base44
Edit with Base44