Skip to content
Get in touch Support hub Investors
Book your call Free trial

Operational Risk

  • 50 Minutes
  • For all staff
  • jurisdiction Global

This 50-minute global course covers the operational risks organisations commonly face, including legal and compliance risk, third party risk and cyber risk. It shows how to frame risk as cause, event and consequence, introduces identification and analysis tools, and covers management through controls, transfer and acceptance.

Operational risk frameworks usually fail at the reporting layer, not the design layer, because staff never learned what counts as a risk event worth escalating. A shared way of describing cause and consequence fixes more of that than another policy revision will. This course gives every function the same language, which is what makes aggregated risk data mean something to a board.
objectives

What you’ll learn in
this course

  • Understand and identify the common operational risks that we face as a Company
  • Implement appropriate controls to ensure effective risk management
  • Identify the benefits and drawbacks of modelling risk
  • Take appropriate action to manage operational risks in their day-to-day role

Hear from our customers

We use Skillcast for our corporate training and it's a good LMS platform with a great variety of courses available. The platform is user-friendly and easy to navigate, and courses are up to date with legislation.

Feefo Customer Rating  ★★★★★ 4.9/5

Ready to try this course?

Start your free trial of this course and get instant access today.

Start your free trial

Want to explore more courses?

Browse all courses and search by topic to find what matters most to you.

Search all courses
Course Image

Operational Resilience

In-depth 55 Minutes FCA Handbook For all staff

Resilience regulation shifted the question from whether a firm can prevent disruption to whether it can keep serving customers during one. That needs more than the business continuity plan already sitting on the shared drive. Training staff on impact tolerances and service mapping is what turns a board-level commitment into something your operational teams can actually execute under pressure.

Explore the course

Course Image

Operational Risk

In-depth 50 Minutes Risk Management For all staff

Operational risk frameworks usually fail at the reporting layer, not the design layer, because staff never learned what counts as a risk event worth escalating. A shared way of describing cause and consequence fixes more of that than another policy revision will. This course gives every function the same language, which is what makes aggregated risk data mean something to a board.

Explore the course

Course Image

Business Continuity Management

In-depth 40 Minutes Risk Management For all staff

Continuity plans are written by a small group and executed by everyone, usually at short notice and under stress. If staff first encounter the plan during an incident, it will not work as designed. Training the wider workforce is what converts documentation into capability, and it supports the resilience expectations that now apply across financial services and beyond.

Explore the course

Course Image

Information Security Compliance Training Course

In-depth 35 Minutes For all staff

Attackers target people because people are reachable, and most incidents begin with an ordinary action rather than a technical failure. For firms in scope of DORA or facing supplier security assessments, evidence of staff-level security training is now requested directly. Delivering it across the workforce gives you both the practical control and the documentation.

Explore the course

Course Image

Digital Operational Resilience Act (DORA)

In-depth 25 Minutes For all staff

DORA reaches beyond EU-domiciled firms, catching group entities and technology providers that serve in-scope financial institutions wherever they are based. Non-EU organisations frequently discover their obligations through a client contract rather than a regulator. Training staff across technology, procurement and operations gives an international group one standard rather than a patchwork assembled entity by entity.

Explore the course

Course Image

Electronic Communications

In-depth 25 Minutes For all staff

Business communications are disclosable in litigation and reviewable by regulators, and the informal register people use in chat tools does not read well years later out of context. Recording and retention obligations also extend to channels many staff assume are private. Setting the expectation clearly protects individuals from a message written quickly and protects the firm from having to explain it.

Explore the course

Course Image

Digital Operational Resilience Act (DORA)

In-depth 25 Minutes For all staff

DORA is prescriptive in a way earlier resilience guidance was not, with defined requirements for incident reporting, testing and third party oversight, and supervisory consequences for gaps. The obligations reach beyond the technology function into procurement, operations and governance. Training staff across those areas is what allows a firm to demonstrate compliance rather than describe an intention to comply.

Explore the course

Course Image

Cybersecurity

In-depth 20 Minutes For all staff

Attackers probe an international group for its weakest point, and inconsistent awareness between locations gives them one. Time zones also mean an incident often starts where nobody senior is awake. Delivering the same standard everywhere shortens the time between something looking wrong and someone reporting it, which is the variable that determines how much damage an intrusion causes.

Explore the course

Course Image

Records Management

In-depth 20 Minutes For all staff

Records are held too long as often as they are destroyed too early, and both create exposure: one under data protection law, the other during litigation or a regulatory request. Retention decisions are made by individuals every day without much thought. Giving the workforce a clear framework means your retention schedule describes what actually happens rather than what was intended.

Explore the course

Course Image

Information Security

Refresher 20 Minutes Cybersecurity For all staff

Security behaviour degrades between annual courses, and attackers rely on that. A short refresher keeps classification habits and email caution current without repeating the full course, which makes it practical to run more than once a year. For firms subject to DORA or regular client security assessments, a documented refresher cycle is increasingly what evidence of ongoing awareness actually means.

Explore the course

Course Image

Cybersecurity Compliance Training Course

Express 20 Minutes Cybersecurity For all staff

Attackers target people because people are reachable and predictable under time pressure. The short format matters here: cyber awareness works best delivered frequently rather than thoroughly once a year, since the techniques change faster than annual training cycles. Running this across the whole workforce gives you a control that scales, and satisfies the staff awareness expectations that appear in client and supplier security assessments.

Explore the course

Course Image

Phishing

Express 15 Minutes Cybersecurity For all staff

Phishing is how most breaches begin, and the messages have improved enormously with better tooling behind them. The decisive factor is rarely whether someone clicked but how quickly they said so. Training that removes the embarrassment around reporting shortens that gap, and short modules can be repeated often enough to keep pace with techniques that change every few months.

Explore the course

Course Image

Think Before You Click

Microlearning 5 Minutes Cybersecurity For all staff

Clicking on malicious links or attachments is one of the most common ways cybercriminals infect IT systems with malware. This training helps employees recognise suspicious emails, understand the dangers of phishing and ransomware and apply best practices to protect company data.

Course Image

Guide to Secure Remote Working

Microlearning 5 Minutes Cybersecurity For all staff

Remote work provides flexibility but also introduces cybersecurity risks that can compromise company data and systems. This training helps employees understand the security challenges of working from home and apply best practices to protect sensitive information.

Course Image

CEO Fraud

Microlearning 5 Minutes Cybersecurity For all staff

CEO fraud is a type of Business Email Compromise where cybercriminals impersonate executives to trick employees into making payments or sharing confidential information. This training helps employees recognise CEO fraud attempts, understand spoofing tactics and follow verification steps to prevent financial and data loss.

Course Image

Advising Customers on Cybersecurity

Microlearning 5 Minutes Cybersecurity For all staff

Cybersecurity is everyone's responsibility, including guiding customers to protect themselves from online threats. This training helps employees understand common cyber risks customers face and how to provide clear, helpful security advice to build trust and prevent fraud.

Course Image

Using Wi-Fi safely

Microlearning 5 Minutes Cybersecurity For all staff

Wi-Fi connectivity offers convenience but also exposes devices and data to security risks if not properly managed. This training helps employees understand Wi-Fi security threats and apply best practices to protect sensitive information when working from home, in the office and on the move.

Course Image

Transferring Information Securely

Microlearning 5 Minutes Cybersecurity For all staff

Securely transferring information is essential to protect sensitive data from breaches, legal risks and business disruptions. This training helps employees understand best practices for secure communication, including encryption, password protection and using secure transfer protocols.

Course Image

Supply Chain Cybersecurity

Microlearning 5 Minutes Cybersecurity For all staff

A company’s cybersecurity is only as strong as its weakest link and supply chain vulnerabilities can expose businesses to major breaches. This training helps employees understand the risks posed by third-party access, the importance of supply chain security and best practices to prevent cyberattacks.

Course Image

Secure Web Browsing

Microlearning 5 Minutes Cybersecurity For all staff

Practicing safe web browsing helps to reduce security risks and protect sensitive information. This training explains how to browse the internet securely and avoid common cyber threats.

Course Image

Tailgating and Piggybacking

Microlearning 5 Minutes Cybersecurity For all staff

Cybersecurity is not just about digital protection but also involves securing physical access to critical systems. This training helps employees recognise security risks like tailgating and piggybacking, understand their consequences and take steps to prevent unauthorised access.

Course Image

Information Security on the Move

Microlearning 5 Minutes Cybersecurity For all staff

Handling company information securely, especially when working remotely or traveling, is essential to prevent data breaches and security risks. This training helps employees understand how to protect sensitive information, secure devices and minimise exposure to cyber and physical threats.

Course Image

Information Classification

Microlearning 5 Minutes Cybersecurity For all staff

This training helps employees understand different levels of information classification, their restrictions and how to handle data securely.

Course Image

Reacting to Password Breaches

Microlearning 5 Minutes Cybersecurity For all staff

Password breaches can lead to unauthorised access, fraud and data theft, often resulting from weak passwords, phishing or insecure networks. This training helps employees recognise the warning signs of compromised credentials, understand the risks and apply best practices to prevent breaches.

Course Image

Multi-factor Authentication

Microlearning 5 Minutes Cybersecurity For all staff

Multi-factor authentication (MFA) enhances security by requiring users to verify their identity through multiple authentication methods. This training helps employees understand the importance of MFA, how it protects company data and when it should be used.

Course Image

Creating Strong Passwords

Microlearning 5 Minutes Cybersecurity For all staff

Strong password protection is essential to safeguarding company systems from cyber threats such as brute force attacks and password guessing. This training helps employees understand the importance of creating strong passwords, following security policies and preventing unauthorised access.

Course Image

Vishing

Microlearning 5 Minutes Cybersecurity For all staff

Vishing is a social engineering attack where cybercriminals use phone calls to trick individuals into revealing sensitive information. This training helps employees recognise vishing attempts, understand manipulation tactics and apply best practices to verify callers and protect confidential data.

Course Image

Video Conferencing

Microlearning 5 Minutes Cybersecurity For all staff

Video conferencing is a vital business tool, but it also presents security and privacy risks if not used correctly. This training helps employees understand best practices for secure video meetings, from using approved software to protecting confidential information.

Course Image

Spear Phishing

Microlearning 5 Minutes Cybersecurity For all staff

Spear phishing targets specific individuals with convincing emails designed to deceive them. This training demonstrates how to recognise and handle these targeted phishing attempts.

Course Image

Smishing

Microlearning 5 Minutes Cybersecurity For all staff

Smishing is a targeted phishing scam that uses deceptive text messages to gain sensitive information. This training highlights how to recognise and avoid falling victim to smishing attacks.

Course Image

Ransomware

Microlearning 5 Minutes Cybersecurity For all staff

Ransomware is a type of malware that encrypts files and demands payment for their release, often causing severe financial and operational damage. This training helps employees recognise ransomware threats, understand how attacks occur and take preventive measures to protect company systems.

Course Image

Malware

Microlearning 5 Minutes Cybersecurity For all staff

Malware is malicious software designed to harm or exploit computer systems, ranging from viruses and ransomware to spyware and botnets. This training helps employees recognise different types of malware, understand how they spread and take proactive steps to prevent infections.

Course Image

Device Hygiene

Microlearning 5 Minutes Cybersecurity For all staff

Device hygiene is the practice of keeping digital devices secure and free from cyber threats to protect company data and networks. This training helps employees understand the importance of device hygiene and apply best practices to prevent malware infections, data breaches and unauthorised access.

Course Image

Bring Your Own Device Security

Microlearning 5 Minutes Cybersecurity For all staff

Bring Your Own Device (BYOD) policies offer convenience and flexibility but also introduce cybersecurity risks. This training helps employees understand the precautions necessary to secure personal devices and protect company data from threats like theft, hacking and data breaches.

Course Image

Zero Trust Cybersecurity

Microlearning 5 Minutes Cybersecurity For all staff

The zero trust cybersecurity model ensures IT systems remain inaccessible by default, requiring strict verification before granting access. This training helps employees understand how zero trust works, including authentication measures, restricted access and continuous security monitoring.

Course Image

Common Cyber Threats

Microlearning 5 Minutes Cybersecurity For all staff

Cyber threats such as phishing, malware, ransomware and unsecured networks pose significant risks to businesses. This training helps employees recognise common cyber threats, understand their impact and apply best practices to prevent security breaches.

Course Image

Understanding Information Security

Microlearning 5 Minutes Cybersecurity For all staff

Information security is essential to protect sensitive business and customer data from unauthorised access, breaches and cyber threats. This training helps employees understand their role in safeguarding information, following security policies and identifying potential risks.

Course Image

Deepfake Awareness

Microlearning 5 Minutes Cybersecurity For all staff

Deepfakes use artificial intelligence to create fake images, audio or videos that can deceive individuals and organisations. This training helps employees recognise deepfake scams, understand their risks and apply verification steps to prevent fraud and cybercrime.

Course Image

Business Email Compromise

Microlearning 5 Minutes Cybersecurity For all staff

Business Email Compromise (BEC) is a targeted cyberattack where criminals impersonate executives or hack accounts to steal money or sensitive information. This training helps employees recognise different types of BEC scams, understand the risks and apply verification steps to prevent fraud.

Course Image

Spot a Phishing Attempt

Microlearning 5 Minutes Cybersecurity For all staff

Phishing emails are fraudulent attempts by cybercriminals to trick individuals into revealing sensitive information. This training helps employees recognise phishing attempts, identify red flags in emails and take steps to protect personal and company data from cyber threats.

Your questions, answered

Risk Management

How does conduct risk differ from compliance risk?

Conduct risk focuses on behaviour and outcomes, how actions affect customers and markets -  while compliance risk relates to failing to meet legal or regulatory requirements. Conduct risk is broader and more subjective, often tied to culture and ethics.

Who is responsible for managing conduct risk within a firm?

While senior leadership sets the tone, managing conduct risk is a shared responsibility across all levels, from front-line staff to compliance teams. Everyone plays a role in identifying and mitigating risky behaviour.

Can conduct risk exist in non-financial sectors?

Yes. Although the FCA regulates financial services, conduct risk principles apply across industries. Any business that interacts with customers or influences markets can face conduct-related challenges.

How can technology help reduce conduct risk?

Tools like automated monitoring systems, AI-driven analytics, and e-learning platforms can help detect risky patterns, reinforce ethical behaviour, and ensure consistent training across teams.

How often should proliferation financing risk assessments be updated?

Best practice suggests reviewing risk assessments annually or whenever there are significant changes in business operations, customer profiles, or geopolitical developments.

Why is risk scoring important for my business?

Identifying potential risks around your business is not enough. Tracking how your company manages them helps you implement policies to prevent them. The best way to get started is with a risk scoring matrix.

What is a risk scoring matrix?

A risk scoring matrix helps identify the level of risk for specific activities, such as personal data. By measuring the likelihood of something happening against how serious the consequences would be, it helps you see which areas to focus on. And what policies or procedures to put in place.