Executive Certificate in Enterprise Resilience Governance
ERGP

Executive programme · Online · Self-paced

ERGP — Executive Certificate in Enterprise Resilience Governance

The first resilience governance certification fully available in Arabic — online, at your own pace.

Fully in Arabic. Also available in English.

A programme for executives who answer for resilience before the board and the regulator. 94 chapters in six modules, six working artefacts and a regulatory layer that runs from NCEMA 7000 to DORA — studied as a structured text course at your own pace, proven through tests and a capstone defended before the examiner.

94 chaptersin six modules — a structured text course from board risk appetite to the auditor's report
24 question blockscheckpoint questions after every part, plus 6 module tests with a pass threshold
Defended capstonea board-level report on your own organisation, defended before the examiner
Public registera unique number and QR verification on risk-place.org
Request a demoAsk a question

Who the programme serves

Suppliers to UAE government clients

Contracts increasingly ask for NCEMA-aligned continuity. The programme gives your executives the language and the artefacts that procurement and auditors expect to see.

Risk leaders aiming higher

Head of Risk, governance-risk-compliance (GRC) manager, business continuity (BCM) lead on the way to Chief Risk Officer (CRO): an executive credential about governance — accountability, boards, regulators — that matches the roles you are applying for.

Leadership teams in-house

Groups with several business units get one resilience framework across the whole management team, delivered as a cohort on your own cases.

Why this credential, and why now

NCEMA 7000 alignment is becoming a condition of access to UAE government work — across logistics, construction, IT services, healthcare, energy, transport and telecom. The requirement lands on organisations; the competence lands on people.

Until now, executive education in resilience has spoken English. ERGP is the first certification of its kind that you can complete entirely in Arabic — at your own pace, from the first chapter to the defended capstone.

If you plan to build a career or win business in the Gulf, this credential answers the questions every employer, client and regulator here asks: do you know the national standards, can you speak to a board about resilience, and can you prove it? You leave with a verifiable certificate, six working documents for your own organisation, and the regulatory fluency that sets senior risk candidates apart across the GCC.

What you will be able to do

Define and defend a disruption risk appetite and tolerable downtime before the board
Design resilience governance: committees, delegated authority, three lines of defence
Run a business impact analysis (BIA), set impact tolerances and justify recovery targets in money: maximum acceptable outage (MAO), minimum business continuity objective (MBCO), recovery time and recovery point objectives (RTO / RPO)
Map one management system to ISO 22301, AE/SCNS/NCEMA 7000 and the operational resilience rules — DORA, the Bank of England and FCA regime, CBUAE — and prepare the organisation for assessment
Stand up crisis governance: team, escalation, communications, an exercise programme
Establish board and audit-committee reporting with a resilience dashboard, AI-assisted risk monitoring and a maturity model

The programme — six modules, 94 chapters, six artefacts

Each module ends with a working document you build for your own organisation. 94 chapters in total — you set the pace.

01
Resilience governance and the board19 chapters

Risk appetite for disruption, committee architecture, delegated authority, three lines of defence, the Chief Risk Officer (CRO) role.

Artefact: a resilience governance policy and governance map

02
From enterprise risk management to business resilience15 chapters

ISO 31000, the risk register, key risk indicators (KRIs), scenario analysis and stress-testing, linking ERM to continuity — including the use of AI for risk monitoring and an early-warning dashboard (ISO 42001).

Artefact: a resilience risk register with KRIs

03
Impact analysis and the economics of recovery15 chapters

Business impact analysis (BIA); recovery targets — maximum acceptable outage (MAO), minimum business continuity objective (MBCO), recovery time and recovery point objectives (RTO / RPO); impact tolerance — the language of the new operational resilience regulators; cost of downtime; the investment case for measures.

Artefact: a completed BIA with defended targets

04
Crisis management and decision making15 chapters

The crisis team, escalation, communications, decision making under pressure, the exercise programme and its reports.

Artefact: a crisis response plan and an exercise scenario

05
Regulatory requirements for resilience: understand and apply15 chapters

AE/SCNS/NCEMA 7000 in depth and its mapping to ISO 22301; the global layer — DORA (EU), the Bank of England and FCA operational resilience regime (UK), CBUAE; sector regulators and government-contract expectations.

Artefact: an organisation mapping matrix against NCEMA 7000 and ISO 22301

06
Assurance, reporting and maturity15 chapters

The resilience dashboard and AI-assisted risk monitoring (ISO 42001), the board report, audit readiness, the maturity model.

Artefact: a dashboard and a board report template

Capstone: a board-level resilience report on your own organisation, defended before the examiner.
The path from the first chapter to a numbered, publicly verifiable certificate: reading with checkpoint questions, six module tests, the capstone, the live defence, and the certificate valid for three years
How the programme runs from start to a certificate anyone can verify.

See inside the course

Live screenshots from the actual course — real chapters exactly as participants see them: the authored text, the diagrams and the checkpoint questions.

🌐These screenshots show the English edition. The course is fully available in Arabic as well — every chapter, test and the capstone. View the Arabic page ←
Chapter 2 · The core vocabulary: risk, continuity, crisis, resilience
Chapter 2 · The core vocabulary: risk, continuity, crisis, resilience Click to enlarge

Click any screenshot to view it full size.

How assessment works

Capstones are examined by the Chief Examiner, Evgeny Telenkov, PhD, together with the invited circle of senior practitioners. Who we are →

No lectures to sit through and no attendance to log. Progress is earned step by step, and every result can be verified.

1Checkpoint questions

Every part of a module ends with a block of checkpoint questions — 24 blocks across the programme. Answering them opens the next step.

2Module tests

Each of the six modules ends with a final test: 8 questions, a pass at 6, with questions shuffled on every attempt.

3Capstone with a defence

A board-level resilience report on your own organisation, defended live before the examiner.

4A certificate you can verify

Entered in the public register with a unique number and QR verification on risk-place.org.

By invitation · Founding expert circle

Senior practitioners: lend the Arabic edition your judgement

We are inviting a small circle of leaders with twenty or more years in risk, continuity or crisis management to go through the fully Arabic edition before anyone else — and tell us, frankly, where it can be stronger. Full access, all materials and certification are our gift; your experience is the contribution we ask for. Invitations are few by design.

AE/SCNS/NCEMA 7000 training inside ERGP — and the global layer

AE/SCNS/NCEMA 7000:2021 is the UAE national standard for business continuity — mandatory for government entities and critical infrastructure, and increasingly referenced in supplier requirements across the economy.

Its structure is deliberately aligned with ISO 22301: one well-designed system covers both. The differences — terminology, supplier-evaluation duties, recovery during response — are exactly what Module 5 teaches.

Module 5 gives you the ability to read your organisation against both standards at once and to speak with a UAE regulator, client or auditor in their language — the layer this programme was built around.

The same module carries the global layer: DORA in the European Union, the Bank of England and FCA operational resilience regime in the United Kingdom, and CBUAE requirements for banks. One vocabulary — impact tolerance, severe but plausible scenarios — read the same way in Dubai, London and Brussels.

Read our full NCEMA 7000 guide → · What NCEMA 7000 training must cover →

Arabic-English glossary of continuity terms →

Standards coverage

Core: ISO 22301:2019 · ISO 31000:2018 · AE/SCNS/NCEMA 7000:2021
Open the full coverage map — which module covers which standard
StandardCoversModule
ISO 22313BCMS guidanceM1
ISO 22317Business impact analysisM3
ISO 22331Continuity strategyM3
ISO 22332Plans and proceduresM4
ISO 22318Supply chain continuityM2 · M5
ISO 22330People aspectsM4
ISO 22316Organisational resilienceM1
ISO 22361Crisis managementM4
ISO 22320Incident managementM4
ISO 22398ExercisesM4
ISO/IEC 27031ICT readinessM6
ISO/IEC 27001Information securityM6
IEC 31010Risk assessment techniquesM2
COSO ERM 2017Enterprise risk frameworkM2
ISO 37301Compliance managementM1
ISO 37000Governance of organisationsM1
ISO 42001AI managementM2 · M6
EU: DORADigital operational resilience (finance)M5
UK: Bank of England · FCAOperational resilience regimeM5
UAE: NCEMA 7000 · CBUAE · TDRA IAS · DESC ISR · ADHICS v2 · UAE PDPLGulf regulatory layerM5
KSA: NCA ECCSaudi cybersecurity controlsM5
Qatar: NCSA NIAQatar information assuranceM5

This table is the promise of completeness: from board appetite to the auditor's report.

Format

Assessed, verifiable, yours to show

Assessed at every module

Six module tests with a pass threshold, plus a capstone defended before the examiner. The certificate is earned.

Artefacts you keep

Six working documents leave the programme with you and go straight into your organisation.

Publicly verifiable

Every certificate carries a unique number and a QR resolving to the register on risk-place.org. An employer verifies it in ten seconds.

Valid for three years

Renewal through evidence of practice and professional development keeps the credential alive.

ERGP — Executive Certificate in Enterprise Resilience Governance — sample certificate

The certificate: personalised, numbered, QR-verified. Sample shown.

Verify a certificate

Enter the number printed on the document, or scan its QR code. Full verification page →

What you join: the ERGP Circle

The ERGP Circle: certified practitioners in the centre, two coordinators bridging them to organisations

The certificate is the entry. Passing ERGP admits you to the Circle — a private community of certified practitioners, coordinated by the founders, small today and growing with every certificate issued.

  • Knowledge ahead of the market — a quarterly Circle session on one real case; new modules and regulatory readings before publication.
  • People you can call — a private member directory, open to members only; direct access to the examiners.
  • Real work — we assign Circle members to client engagements: audits, dashboards, continuity systems. Members with standing become examiners.

Curated by Erzhena Khilko; engagements coordinated by Evgeny Telenkov. More about the Circle →

Programme leadership

Erzhena Khilko
Erzhena KhilkoDirector of Educational Programmes · ERGP, SAFE

Chief Risk Officer of American Express Bank and its payment system operator, 2010–2024; chair of the Risk Committee, member of ALCO and the Credit Committee. Built risk governance across 12 business units on the Three Lines of Defence model with zero audit findings; ran ICAAP under Basel III Pillar 2, RCSA across 15+ core processes and the continuity plan with annual test cycles. Earlier: head of risk at Bank of Cyprus Russia, corporate finance at Deloitte, audit at Ernst & Young. She owns the learning design, the cohort schedule and the student experience across all our programmes — and curates the ERGP Circle: the quarterly sessions, the member directory and the invitation of examiners.

Evgeny Telenkov
Evgeny TelenkovDirector, business continuity practice · PhD in Economics · Academic Director & Chief Examiner

Best Risk Manager of the Year 2020 (RusRisk). 15+ years leading risk and continuity functions: Nornickel, where he built business continuity from zero with 20+ plans, Rosneft, Beeline, Ernst & Young. CRO of a $20bn petrochemical megaproject (AGCC, SIBUR) with 200+ construction risk indicators. Author of the programme; he chairs the examination board, signs every certificate issued and matches Circle members to engagements with organisations.

ERGP for teams and organisations

The people who answer for resilience rarely sit in one department: risk, continuity, internal audit, operations, IT. ERGP for teams enrols them on the same programme as a group, so the organisation ends up with one vocabulary and one standard of evidence.

What the sponsor gets: a single view of the group's progress and test results, a cohort schedule agreed with you, capstones built on your own organisation's scenarios where you choose, and an individual, verifiable certificate for each participant. In-house cohorts of up to 12 executives are priced as one engagement — see enrolment below.

Need the site crews covered as well? That is a different programme: SAFE, 32 chapters of workplace safety read on the phone within one shift. Both are listed on the page for organisations.

Pricing

IndividualUSD 1,500 · AED 5,500
In-house cohort, up to 12 executivesUSD 12,000 · AED 44,000

Per person, in either language. The examination, the certificate and admission to the ERGP Circle are included. Payment by invoice; corporate purchase orders welcome.

Request a demonstration

See the programme from the inside — the chapters, the questions, the tests and the register. Leave your details and we will email you an invitation.

Frequently asked questions

Is the programme really fully in Arabic?

Yes. All 94 chapters, the checkpoint questions, the module tests and the interface are available in Arabic — the first resilience governance certification for which that is true. The same content is available in English, and you can switch at any time.

How long does the programme take?

It is self-paced, with access that stays open. We measure the programme by completeness — the full cycle from board risk appetite to the auditor's report — and by the six artefacts you build. You choose the pace that fits your calendar.

Is the certificate accredited?

It is an independent educational credential issued by risk-place, and we say so openly. Its weight comes from the strict requirements of the programme: completing all six modules and passing both the module tests and the capstone defence.

Is it recognised by NCEMA?

NCEMA assesses organisations against the national standard; recognition of private programmes is outside its role. This programme certifies your personal competence in that landscape — the ability employers and clients actually hire for.

Does it make my company NCEMA 7000 compliant?

Compliance belongs to organisations and is assessed by authorities. The programme equips you to lead your organisation toward it — the Module 5 mapping matrix is exactly that starting point.

How is this different from CBCI or CBCP?

Those are respected practitioner credentials for the people who build continuity systems. This programme certifies the executive layer — governance, board accountability and regulatory navigation — and is built around the GCC regulatory landscape, which is its home ground.

What if I fail the assessment?

Module tests can be re-taken — the questions are shuffled on every attempt. One capstone re-submission is included; further defence attempts are scheduled at cost. The pass threshold is what makes the certificate worth showing.

What exactly do I receive?

The personalised, numbered certificate with QR verification, the six artefacts you built, and continued access to the materials as they are updated.

Can our whole leadership team take it?

Yes — the in-house track runs as a cohort on your own cases, and the capstone becomes a real board report for your organisation.

How do we pay?

Invoice with a corporate purchase order — standard practice for learning and development budgets.

ERGP — the Executive Certificate in Enterprise Resilience Governance — is an independent educational programme by risk-place. It is not affiliated with, endorsed by or accredited by NCEMA, ISO or any other standardisation or certification body. The certificate confirms completion of the programme and successful assessment; it does not attest any organisation's compliance with any standard.

Request a demo