Module 1: GRC Fundamentals and MetricStream Platform

• Enterprise GRC concepts: governance, risk, and compliance defined
• GRC maturity model and organisational risk culture assessment
• MetricStream platform architecture: M7 and M365 cloud overview
• Navigating MetricStream workspaces, dashboards, and application modules

Module 2: Enterprise Risk Management

• Risk taxonomy design: risk categories, sub-categories, and definitions
• Risk register creation and risk ownership assignment
• Qualitative risk scoring: likelihood, impact, and inherent risk matrices
• Risk treatment planning: accept, mitigate, transfer, and avoid strategies

Module 3: Control Framework and Testing

• Control library design and control-to-risk mapping
• Control attributes: type, frequency, automation level, and ownership
• Control testing plan creation and test evidence management
• Deficiency classification, remediation tracking, and closure workflows

Module 4: Compliance and Regulatory Management

• Regulatory content library import and obligation mapping
• Compliance calendar setup and task assignment workflows
• Regulation-to-control mapping for SOX, GDPR, ISO 27001, and more
• Compliance attestation campaigns and sign-off management

Module 5: Audit Management

• Annual audit universe and risk-based audit plan creation
• Audit engagement setup: scope, objectives, and resource allocation
• Fieldwork management: workpaper upload and review workflows
• Audit finding grading, management response, and action tracking

Module 6: Policy and Document Management

• Policy library structure: categories, owners, and review cycles
• Policy drafting, review, approval, and publication workflows
• Employee awareness campaigns and policy attestation tracking
• Policy exception request management and deviation approvals

Module 7: Third-Party Risk Management

• Vendor onboarding and risk tiering configuration
• Third-party risk assessment questionnaire design and distribution
• Continuous monitoring setup for vendor risk indicators
• Vendor issue management and remediation tracking

Module 8: Reporting, Analytics, and Capstone Project

• Executive GRC dashboard design and KRI/KPI configuration
• Board-level risk reporting and heat map visualisation
• End-to-end GRC programme setup simulation exercise
• Final assessment and course certification

Experience in the Industry Gain expertise from MetricStream-certified GRC consultants who have designed and deployed enterprise risk, compliance, and audit management programmes for banks, insurance firms, healthcare organisations, and global corporations.

Backgrounds at the Top Our MetricStream trainers have led GRC platform implementations at Fortune 500 companies, regulated financial institutions, and Big Four consulting firms with deep expertise across risk, audit, and compliance domains.

Clear & Effective Teaching MetricStream risk management, control testing, compliance workflows, audit management, and third-party risk modules are taught with real GRC programme scenarios, regulatory frameworks, and platform configuration walkthroughs.

Hands-On Learning Focus Students build risk registers, configure control frameworks, design audit workflows, and create executive dashboards through comprehensive lab exercises on the MetricStream platform.

Up-to-Date Knowledge Trainers keep content current with the latest MetricStream platform releases, evolving GRC frameworks including COSO ERM and ISO 31000, and regulatory developments affecting enterprise risk and compliance programmes.