Risk Management Summer Course
Source: https://learningforlife.tudelft.nl/risk-management-summer-course/ Parent: https://learningforlife.tudelft.nl/our-courses/business-and-management/
Customize Risk Management Summer Course
RMSC-M2-BC-bundle-product-of-
Risk Management Summer Course: Business Continuity & Crisis Management + Free
Quantity
RMSC-M3-ISM-bundle-product-of-
Risk Management Summer Course: Information Security & AI Risk Management + Free
Quantity
RMSC-M4-CM-bundle-product-of-
Risk Management Summer Course: Third Party Risk & Supply Chain Continuity + Free
Quantity
RMSC-M1-RM-bundle-product-of-
Risk Management Summer Course: Enterprise Risk Management & Resilience + Free
Quantity
Your Customization
Risk Management Summer Course
Summary
Risk Management Summer Course
Share webpage
- Understand the difference between risks, incidents, crises and continuity events, and develop related trigger points, team structures and checklists.
- Develop realistic and challenging disruption scenarios, including impacts on IT systems, (cyber/physical) security, facilities, staff, the supply chain, voice communication and data communication.
- Quantify risk appetite, risk capacity and risk tolerances.
- Translate cyber security and other operational risks to the language and priorities of Executives and Boards.
- Participate in role plays and simulation exercises (including a cyber-attack simulation game, ‘red teaming’ session and Business Continuity boardgame) and learn techniques to customise these for future use in your own workplace.
- Put together a risk register, risk ratings and practical, consequence-based ‘bundling’ techniques for a variety of threats such as floods, fires, chemical spills, third party downtime, cyber-attacks, physical security breaches and staff shortages.
Start date Jun 22, 2026
Early bird
Early bird price.
€ 3.024,-
€ 3.780,-
20% off
program content
4 Courses
- Location In-person
- Pacing Instructor-paced
- Length
For instructor paced courses this is the length of the course.
For self-paced courses this is the length of the course if you spend the amount of time per week as specified. You're free to go faster or slower as you see fit.
10 Days - Effort 10 Days
Add to Cart
Loading...
Subscribe to back in stock notification
Subscribe
Early Bird Discount
Take advantage of Early Bird price (20% Off) and pay only €3024 for this programme. Enroll now – valid until April 15, 2026.
- Overview
The world of risk professionals, consultants and managers is constantly in flux. Due to Environmental, Social and Governance (ESG) challenges, cyber threats and other emerging risks, those working in the field need to keep their radar on for any changes, to differentiate themselves from the pack.
Reaching its 12th edition in 2026, this OSPA-award winning Risk Management Summer Course will get you up to speed in a practical way with the latest developments in risk management, regardless of your industry and background; and will provide you with an opportunity to expand your network with like-minded peers.
The course is delivered under guidance of Prof. Sicco Santema (TU Delft), and Ir. Rinske Geerlings (Business As Usual, Australia) who was TU Delft Alumnus of the Year in 2012.
Course Content and ISO Standards
The course is delivered at TU Delft campus and divided into four modules (each accommodating a maximum of 40 participants.) Each module extends over 2.5 to 3 days. For a complete overview we recommend joining the whole course but you may join specific modules individually.
This highly interactive course is infused with team-based exercises, brainstorming sessions, discussions and other engaging training techniques. With participants coming from all walks of life and geographical regions, it also provides completely new perspectives to those who have already worked in the field of risk management for a longer time. The latest lineup of speakers and activities of 2025 features distinguished guests from leading industry organizations, including Bol.com, Rabobank, Dutch Railways (NS), Ministry of Justice and Security, National Crisis Center, and more.
The guidance offered by related ISO standards further enhances the theoretical principles that underpin the various frameworks covered in this course. Participants interested in getting certified would need to book separately for an ISO exam which can be taken computer-based anytime after the course, and which can be provided details on upon request.
ECTS points can be earned for this course upon fulltime 2-week attendance and a follow-up case study exercise under TU Delft Professor supervision. The IDE subject code of this course is ID5113. Please contact us for more details.
- What do previous participants say?
- Module 1: Enterprise Risk Management & Resilience
In this module, you will be introduced to the process of Risk Management and the broader concept of organisational resilience. You will also learn how the ISO 31000 standard provides a comprehensive approach to identifying, analysing, evaluating, treating, monitoring and communicating risks across an organisation.\
##### Featured topics and activities
- The difference between risk appetite, risk capacity and risk tolerances
- Agreeing with top management on a Risk Appetite Statement (RAS)
- Useful tools to visualise uncertainty
- ‘Risk Management in the real world’ case study exercise
- Flood risk management
- Strategic resilience in complex systems.
##### Learning outcomes
- Quantify risk appetite, risk capacity, and risk tolerances with the help of a template
- Create risk registers and heat maps, based on best practices shared in the module
- Determine risk ratings and learn a practical, consequence-based ‘bundling’ technique for a variety of threats such as floods, fires, chemical spills, third party downtime, cyber-attacks, physical security breaches and staff shortages
-
Communicate operational risks to your organisation’s Board in a way that resonates with them.
- Module 2: Business Continuity & Crisis Management
In this module, you will be introduced to the processes of business continuity management and crisis management. You will learn how the ISO 22301 and ISO 22361 standards provide comprehensive frameworks for organizations to plan, establish, implement, operate, monitor, review, maintain, and continually improve a documented management system to protect against, reduce the likelihood of, ensure recovery from, and define an effective response to, disruptive incidents and crises.\
##### Featured topics and activities
- Incident? Emergency? Crisis? Disruption? (meanings, triggers, teams and plans)
- Board game to understand business continuity and crisis management team responsibilities
- Developing interesting, suitable disruption scenarios to simulate/test/exercise the plans
- Impact of international sanctions and other geopolitical issues on business continuity
- “Never let a good crisis go to waste" facilitated discussion and case study analysis
- The good, bad and ugly of crisis communication.
##### Learning outcomes
- Explain the difference between risks, incidents, crises, emergencies, and disruptions, and develop related trigger points, team structures and role cards
- Use checklists and templates to prepare simulation exercises, including impacts on IT systems, (cyber/physical) security, facilities, staff, the supply chain, voice communication and/or data communication
- Customise intelligent gaming examples, to use them in your own workplace
-
Create user-friendly ‘BCP on a Page’ and Quick Reference Card formats
- Module 3: Information Security & AI Risk Management
In this module, you will be introduced to the processes of Information (including Cyber) Security Management and Artificial Intelligence (AI) Risk Management. You will learn how the ISO 27001 and ISO 42001 standards provide guidance for establishing, implementing, maintaining and continually improving information security and AI management systems. Various information security frameworks that specify how organizations should handle and protect sensitive customer data are reviewed. AI threats and opportunities are also explored.\
##### Featured topics and activities
- Ransomware and emerging cyber threats
- AI threats and opportunities in various areas of your organisation
- Red Teaming and cyber security simulation games as risk management tool
- Recent regulatory requirements in context of AI (e.g. EU AI Act 2024)
- Various standards and frameworks in relation to managing the Confidentiality, Integrity and Availability (CIA) of data (e.g. NIST, GDPR, SOC2)
- Assessment of recent real-life data breaches and the role of AI therein
- Security of information shared in the supply chain.
##### Learning outcomes
- After taking this module, you will be able to define the concepts of Confidentiality, Integrity and Availability (CIA)
- Implement a roadmap approach to explore the threats and opportunities of AI for all business units of your organisation
-
Communicate cyber security and AI risks to your organisation’s executives in a way that resonates with them.
- Module 4: Third-Party Risk & Supply Chain Continuity
In this module, you will be introduced the processes of third-party risk management (TPRM) and supply chain continuity. You will learn how the ISO 28000 standard aims at offering guidance to help organizations plan, establish, maintain, review and continually improve their supply chain Information Security (IS) management capability. Various case studies are investigated, to find examples and guidance on how to make an organization proactive in relation to TPRM, DORA compliance and overall supply chain continuity.\
##### Featured topics and activities
- Differences and similarities of physical and digital supply chains
- Identifying and assessing third-party risks across the full vendor lifecycle
- Applying DORA’s ICT TPRM requirements and ISO 28000’s security risk assessment principles to evaluate critical dependencies
- DORA’s expectations for operational resilience, including concentration risk and critical provider oversight
- Governance and monitoring mechanisms to ensure ongoing compliance.
##### Learning outcomes
- List and explain approaches that can be used to achieve and maintain compliance
- Select the appropriate approach and tools to achieve and maintain compliance, taking into account the workload/effort required
-
Develop and validate supply chain disruption response and recovery plans.
- Prerequisites
No formal prerequisites apply.
Work experience and/or knowledge of risk, crisis, information security and/or business continuity related processes may assist in putting the contents into perspective. - Frequently Asked Questions (FAQ)
1. What if I cannot attend the entire 2 weeks?
The course includes 4 individual modules of 2.5 to 3 days each. Those who cannot attend an entire 1 or 2 weeks can simply enrol in individual modules.
Note that only on Wednesdays, participants of either/both modules of that week are all invited to a complimentary lunch, afternoon simulation game and dinner networking event.
2. How would I be able to get certified in one of the ISO standards?
The course provides a basic understanding of the benefits and contents of the ISO standards mentioned. Formal certification is governed by a global ISO certification body. You would need to register for an ISO exam package (including online learning materials, a computer based exam and several personalised coaching calls) separately with their provider Business As Usual. If registered and studying prior to the summer course, this will provide a head-start and also the opportunity to ask the course facilitators specific questions related to the ISO exam(s).
ISO exams are offered at Foundation, Lead Implementer and Lead Auditor level, amongst others. Foundation certification includes lifetime free re-certification. Foundation is not a prerequisite for advanced level exams.
A Windows laptop is required to install dedicated applications to access the study portal and sit the online exam.
3. Will I receive printed materials for the onsite course?
Materials are provided electronically at the end of each module, via a dedicated share drive accessible by participants of each module.
4. Can I participate virtually in this programme?
No, this course is purely classroom-based and held at a TU Delft facility.
5. Is catering included?
Morning and afternoon coffee/tea/water are provided every day.
Note that only on Wednesdays, participants of either/both module(s) of that week are all invited to a complimentary lunch, afternoon simulation game and dinner networking event.
6. I have already attended the TU Delft Risk Management Summer Course before, will I gain benefit from attending again?
Every year, the course includes new topics and new guest speakers from the TU Delft and corporate world. Furthermore, you would be conducting practical exercises with different fellow participants each time you attend.
Changes to the theoretical components are minimal compared to a previous year but could be useful to refresh your knowledge on.
7. How many people can participate?
The maximum number of participants per module is 40.
8. Will I receive a certificate?
You will receive a certificate of attendance when you participate in at least 90% of your module(s). - Practicalities
##### Location
Where is the course taking place?\ This course takes place in building 32, Industrial Design Engineering (IDE/IO) on the TU Delft University Campus. The reception at the main entrance can give you directions to the lecture room.
How do I get to the TU Delft, and can I come by car?\ Please visit www.tudelftcampus.nl/accessibility where you can find our location and directions for parking and public transport.
Where can I park at TU Delft?\ The closest parking to the Industrial Design Engineering building is P5 (Cornelis Drebbelweg 1/Rotterdamseweg) or P1 (Van der Waalsweg/Aula). A day ticket for parking costs € 10 per day.
Where is the nearest international airport?\ The nearest international airport is Schiphol Airport Amsterdam. For European flights the nearest airport is Rotterdam The Hague Airport.
Is the course wheelchair accessible?\ Yes.
Can you book a hotel for me?\ We do not book hotel accommodation. Hotels nearby are Best Western Museum hotels, Van der Valk (near highway A4) and Hampshire Hotel Delft City Centre (near highway A13).
##### Enrolment and payment
Are there any discounts available?\ Alumni and staff from TU Delft, and participants from other universities are eligible for a 25% discount. Students of TU Delft can participate for free. Three ECTS points can be earned for this course upon fulltime 2-week attendance and a follow-up case study exercise under TU Delft Professor guidance. The IDE subject code of this course is ID5113.
What is included in the fee?\ The programme or module fees include tuition, electronic materials, one lunch on Wednesday, one dinner on Wednesday evening and refreshments throughout the programme. Hotel accommodation and parking are not included.
What are the payment methods?\ You can pay online through Credit card, PayPal or iDeal. After completing the payment you will receive a payment confirmation and invoice by email. Bank transfer is also possible against an invoice that will be sent to you after you have enrolled. If the invoice is paid by a company, the VAT number and the company’s address must be included.
Is financial aid available?\ For this course we do not offer financial support.
Can I pay the fee in installments?\ Paying in installments is not possible.
VAT information\ TU Delft does not charge VAT for this course.
What is the deadline for enrolling in the programme?\ Please enroll before 15 June 2026. Please note that seats are limited to 40 per module, therefore it is best to secure your place in advance.
##### Programme
What is the schedule of the programme?\ The course starts at 09:30 and finishes 16:30 daily. View here the topics per day. On Monday we will close with networking drinks and on Wednesday, all participants are invited to an optional dinner. Each module has a total duration of 2.5 days.
What is the class size for this programme?\ Depending on the module, class sizes are usually between 8 to 40 people. We aim for a balance between allowing capacity to guarantee individual attention, and achieving a good group dynamic and networking opportunities.
What preparation is required before the programme?\ For this course there is no pre-work or assignment required.
What is the dress code?\ The dress code is 'business casual'.
What is the language during the course?\ The course is taught in English.
Will I receive a certificate of attendance if I miss a part of the programme?\ You will receive a certificate of attendance when you attended the whole course. Or in case you have registered for one or more modules you will receive a certificate of attendance for the module(s) you have fully attended. - Learner testimonials
"The TU Delft Risk Management Summer Course was a true eye-opener" – Jiri Bongaerts, Business Continuity consultant (Belgium), 2023 participant
"As an emerging safety and security professional, I found the course an invaluable experience. It provided me with the opportunity to gain the most up-to-date knowledge on risk management and deepen my understanding of ISO 31000. Rinske, our instructor, was a key part of this enriching experience. Her engaging teaching style and profound expertise in the subject matter made the learning process not only informative but also enjoyable. The programme was consistently inspiring and energising, making every session a fun and enlightening journey. This course has undoubtedly equipped me with the tools and insights needed to excel in my future career."– Daniel de Jongh (Netherlands), 2023 participant
"The course provided not only standards requirements but also practical examples and group discussions. Many thanks to the facilitators!" – Ashraf Hasanov (Telecommunication - Business Continuity Manager, Azerbaijan), 2023 participant
Anonymous testimonials:
"I thoroughly enjoyed the course and gained a lot of useful information, which I have been able to put to good use. I would recommend the course to colleagues who need to have a good understanding on Business Continuity Management." – 2022 participant
"I loved the course and am looking forward to applying the framework and methodology. My expectations were met 100%" – Head of Risk (banking sector, Malaysia) – 2023 participant
"Thanks, I thought the course was brilliant and I also learnt a lot from the discussions with the other participants… This is a very useful secondary benefit of the course." – PhD candidate (TU Delft) – 2022 participant
"Thank you for making the course a really fantastic learning experience." – Business Continuity Manager (Netherlands) – 2022 participant
Risk Management Summer Course: Enterprise Risk Management & Resilience
Start date Jun 22, 2026
24 Hours
€ 840,-
€ 1.050,-
20% off
Risk Management Summer Course: Business Continuity & Crisis Management
Start date Jun 24, 2026
20 Hours
€ 840,-
€ 1.050,-
20% off
Risk Management Summer Course: Information Security & AI Risk Management
Start date Jun 29, 2026
20 Hours
€ 840,-
€ 1.050,-
20% off
Risk Management Summer Course: Third Party Risk & Supply Chain Continuity
Start date Jul 1, 2026
24 Hours
€ 840,-
€ 1.050,-
20% off