There are no items in your cart
Add More
Add More
| Item Details | Price | ||
|---|---|---|---|
Language: ENGLISH
Instructors: Dr Rakesh Agarwal
Validity Period: 120 days
Outages, failed migrations, vendor collapses and AI failures now reach Boards and regulators. This programme shows how technology is governed across strategy, operations, controls, resilience, outsourcing, compliance and assurance, in line with RBI expectations.
Responsibilities of the Board, ITSC, CIO, CTO, CISO, Risk, Compliance and Internal Audit, and how they fit together.
IT Governance, Risk, Controls & Assurance Directions and the Master Direction on IT Outsourcing, applied in practice.
Risk registers, 5×5 scoring, appetite, KRIs and RAG dashboards that support decisions at Board level.
Incident and change management, BIA, BCP/DR, RTO/RPO, failover testing and recovery assurance.
Materiality, due diligence, concentration and fourth-party risk, contracts, SLAs and exit planning.
Cloud governance, API ecosystems, AI ownership, data and model risk, lifecycle validation and third-party AI.
Complete the course and the BFSI SSC assessment to receive two certificates: one from Smart Online Course and the Risk Management Association of India, and one issued by the BFSI Sector Skill Council of India.
Certification from RMAI, the professional association behind Smart Online Course.
Sector certification from the BFSI Sector Skill Council of India.
The final assessment is conducted by the BFSI Sector Skill Council of India.
Sample certificates shown. Dual certification is subject to successful completion and applicable assessment requirements.
For IT, risk, compliance and audit teams in banks, NBFCs, insurance companies and financial institutions, and for senior and middle managers who make or oversee technology decisions.
Each 15-minute lecture pairs the concepts with a practical example and a documented industry case, followed by an MCQ knowledge check.
A fictional financial institution faces suspected customer-data exposure and unusual API-driven loan disbursements. You investigate the systems, assess the risk, make the calls and map the accountability.
Meet the institution and the incident: suspected customer-data exposure and unusual API-driven loan disbursements.
Click through eight interconnected components, including the API gateway, loan management system, customer database, payment provider and monitoring systems, to see each one's function, risks and controls.
Use likelihood and impact sliders, select controls and see an illustrative residual-risk calculation.
Make four practical decisions on suspicious data exposure, unauthorised API activity, escalation and management reporting, with feedback on each.
Click through the responsibilities of the Board, CIO, CISO, IT Risk, Compliance, Operations, vendors and Internal Audit.
Six scenario-based questions with automated feedback, a print/save option and an expandable glossary of key IT risk concepts.
Rate the risk, then add controls to see how the residual risk changes.
Illustrative 5×5 scoring for demonstration. The full lab is inside the course.
19 editable Excel and Word templates, each mapped to the lectures where it is taught, plus an Industry Reading Pack, so you can apply what you learn the next day at work.
Define roles, responsibilities and accountability across the Board, senior management, CIO, CISO, IT Risk, Compliance, Operations and Internal Audit functions.
Structured templates for IT Steering Committee meetings, technology governance reviews, management reporting and Board-level technology risk oversight.
A structured assessment tool to review technology governance, cybersecurity, resilience and assurance arrangements against applicable RBI regulatory expectations and identify areas requiring corrective action.
Review the completeness of IT governance policies, identify documentation gaps and develop structured policy documents covering technology risk and control requirements.
Assess technology project approvals, implementation readiness, change-management controls, testing requirements and go-live governance.
Identify, classify and document critical technology assets, applications, databases, information owners and associated risk exposures.
Record technology risks, assess likelihood and impact, evaluate controls, determine residual risks and track mitigation responsibilities.
Two complementary resources for establishing technology Key Risk Indicators (KRIs), risk appetite, tolerance levels, monitoring thresholds and escalation arrangements.
Monitor significant technology risks, KRI status, control weaknesses and overdue remediation actions through structured management reporting.
Document technology incidents, track resolution activities, investigate underlying causes and record corrective and preventive actions.
Assess critical business processes, technology dependencies, disruption impacts and recovery priorities to support operational resilience planning.
Plan disaster recovery exercises, document test observations, evaluate recovery performance and track improvements.
Evaluate outsourcing significance, vendor risk, service-provider capabilities, security arrangements and third-party technology dependencies.
Review key technology outsourcing contract provisions, service-level commitments, security obligations, performance indicators and vendor accountability.
Develop structured exit arrangements covering technology dependencies, service transition, data portability, business continuity and vendor replacement.
Support risk-based IT audits covering access management, change controls, IT operations, application processing and control effectiveness.
Document audit observations, assign risk ratings, track management responses and monitor corrective actions through closure.
Evaluate cloud governance, technology dependencies, API integrations, access controls, third-party risks and digital platform security considerations.
Record AI systems and use cases, identify model ownership, assess AI-related risks and support model governance, validation and monitoring.
A curated reference resource covering relevant RBI technology governance directions, industry frameworks and supporting materials for continued professional learning.
Stuck on the difference between RTO and RPO? Unsure how to frame a KRI threshold? Ask the AI Mentor as you go and get clear, course-aligned explanations, with no waiting for a session.
Structured, expert-led learning sessions.
Comprehensive learning content for each module.
Knowledge-check questions after every lecture.
Supplementary professional reading and reference materials.
Resources and tools to support workplace application.
Practical examples from banking and financial services.
*Subject to successful completion and applicable assessment requirements.
No. It covers technology as an enterprise risk: governance, strategy, RBI expectations, risk assessment, controls, resilience, outsourcing, IT audit, cloud and AI. Information security is covered from a governance and assurance perspective. Detailed cybersecurity operations, DPDP compliance and RegTech are covered in separate specialised programmes.
Plan for 25–30 hours in total, including video lectures, study materials, MCQ assessments, the interactive case study and the practitioner toolkits. The course is self-paced, so you can study around your work schedule.
No. The course is designed for technology, risk, compliance, audit and management professionals. Concepts are explained from the ground up, with BFSI examples throughout.
Dual certification from the Risk Management Association of India (RMAI) and the BFSI Sector Skill Council of India (BFSI SSC), subject to successful completion and applicable assessment requirements. The assessment is conducted by BFSI SSC.
Yes. The Excel and Word templates in the 20-item toolkit, including the RACI matrix, IT risk register, KRI library, BIA worksheet, vendor due diligence questionnaire and audit work programme, are built for workplace use and can be adapted to your organisation.
Yes. Contact us for group enrolment and corporate capability-building programmes for banks, NBFCs, insurers and financial institutions.
Talk to the Smart Online Course team.