Executive certification · online · at your own pace
The first resilience governance certification fully available in Arabic.
Six modules and 94 chapters at your own pace, six working documents built on your own organisation and a numbered certificate anyone can verify. From NCEMA 7000 to DORA. Fully in Arabic, also in English.
For heads of risk, continuity and compliance on the way to a Chief Risk Officer role, for suppliers to UAE government clients and for leadership teams that need one framework. Five questions they bring to us.
Regulators, large companies and employers in the Gulf ask for people who can run resilience and prove it. Here is what 2026 showed.
Start any day and move at your own pace; access stays open. Progress is earned step by step, and every result can be verified.

Every part of a module ends with a block of checkpoint questions, 24 blocks in total. Answering them opens the next step.
Each of the six modules ends with a test: 8 questions, a pass at 6, questions shuffled on every attempt.
A board-level resilience report on your own organisation, reviewed live with the examiner.
Entered in the public register with a unique number and QR verification on risk-place.org. Valid for three years.
Working templates come with every module. Capstones are reviewed by the Chief Examiner, Evgeny Telenkov, PhD, together with the invited circle of senior practitioners. Who we are →
Each module ends with a working document you build for your own organisation. 94 chapters in total — you set the pace.
Risk appetite for disruption, committee architecture, delegated authority, three lines of defence, the Chief Risk Officer (CRO) role.
Artefact: a resilience governance policy and governance map
ISO 31000, the risk register, key risk indicators (KRIs), scenario analysis and stress-testing, linking ERM to continuity — including the use of AI for risk monitoring and an early-warning dashboard (ISO 42001).
Artefact: a resilience risk register with KRIs
Business impact analysis (BIA); recovery targets — maximum acceptable outage (MAO), minimum business continuity objective (MBCO), recovery time and recovery point objectives (RTO / RPO); impact tolerance — the language of the new operational resilience regulators; cost of downtime; the investment case for measures.
Artefact: a completed BIA with defended targets
The crisis team, escalation, communications, decision making under pressure, the exercise programme and its reports.
Artefact: a crisis response plan and an exercise scenario
AE/SCNS/NCEMA 7000 in depth and its mapping to ISO 22301; the global layer — DORA (EU), the Bank of England and FCA operational resilience regime (UK), CBUAE; sector regulators and government-contract expectations.
Artefact: an organisation mapping matrix against NCEMA 7000 and ISO 22301
The resilience dashboard and AI-assisted risk monitoring (ISO 42001), the board report, audit readiness, the maturity model.
Artefact: a dashboard and a board report template
Live screenshots from the actual course — real chapters exactly as participants see them: the authored text, the diagrams and the checkpoint questions.
Click any screenshot to view it full size.
AE/SCNS/NCEMA 7000:2021 is the UAE national standard for business continuity — mandatory for government entities and critical infrastructure, and increasingly referenced in supplier requirements across the economy.
Its structure is deliberately aligned with ISO 22301: one well-designed system covers both. The differences — terminology, supplier-evaluation duties, recovery during response — are exactly what Module 5 covers.
The same module carries the global layer: DORA in the European Union, the Bank of England and FCA operational resilience regime in the United Kingdom, and CBUAE requirements for banks. One vocabulary — impact tolerance, severe but plausible scenarios — read the same way in Dubai, London and Brussels.
Read our full NCEMA 7000 guide → · What NCEMA 7000 training must cover →
| Standard | Covers | Module |
|---|---|---|
| ISO 22313 | BCMS guidance | M1 |
| ISO 22317 | Business impact analysis | M3 |
| ISO 22331 | Continuity strategy | M3 |
| ISO 22332 | Plans and procedures | M4 |
| ISO 22318 | Supply chain continuity | M2 · M5 |
| ISO 22330 | People aspects | M4 |
| ISO 22316 | Organisational resilience | M1 |
| ISO 22361 | Crisis management | M4 |
| ISO 22320 | Incident management | M4 |
| ISO 22398 | Exercises | M4 |
| ISO/IEC 27031 | ICT readiness | M6 |
| ISO/IEC 27001 | Information security | M6 |
| IEC 31010 | Risk assessment techniques | M2 |
| COSO ERM 2017 | Enterprise risk framework | M2 |
| ISO 37301 | Compliance management | M1 |
| ISO 37000 | Governance of organisations | M1 |
| ISO 42001 | AI management | M2 · M6 |
| EU: DORA | Digital operational resilience (finance) | M5 |
| UK: Bank of England · FCA | Operational resilience regime | M5 |
| UAE: NCEMA 7000 · CBUAE · TDRA IAS · DESC ISR · ADHICS v2 · UAE PDPL | Gulf regulatory layer | M5 |
| KSA: NCA ECC | Saudi cybersecurity controls | M5 |
| Qatar: NCSA NIA | Qatar information assurance | M5 |
This table is the promise of completeness: from board appetite to the auditor's report.
The certificate is the entry. Passing ERGP admits you to the Circle — a private community of certified practitioners, coordinated by the founders, small today and growing with every certificate issued.
Curated by Erzhena Khilko; engagements coordinated by Evgeny Telenkov. More about the Circle →
By invitation · Founding expert circle
We are inviting a small circle of leaders with twenty or more years in risk, continuity or crisis management to go through the fully Arabic edition before anyone else — and tell us, frankly, where it can be stronger. Full access, all materials and certification are our gift; your experience is the contribution we ask for. Invitations are few by design.
Six module tests with a pass threshold, plus a capstone reviewed live with the examiner. The certificate is earned.
Six working documents leave the programme with you and go straight into your organisation.
Every certificate carries a unique number and a QR resolving to the register on risk-place.org. An employer verifies it in ten seconds.
Renewal through evidence of practice and professional development keeps the credential alive.
The certificate: personalised, numbered, QR-verified. Sample shown.
Enter the number printed on the document, or scan its QR code. Full verification page →
Chief Risk Officer of American Express Bank and its payment system operator, 2010–2024; chair of the Risk Committee, member of ALCO and the Credit Committee. Built risk governance across 12 business units on the Three Lines of Defence model with zero audit findings; ran ICAAP under Basel III Pillar 2, RCSA across 15+ core processes and the continuity plan with annual test cycles. Earlier: head of risk at Bank of Cyprus Russia, corporate finance at Deloitte, audit at Ernst & Young. She owns the programme design, the cohort schedule and the participant experience across all our programmes — and curates the ERGP Circle: the quarterly sessions, the member directory and the invitation of examiners.
Best Risk Manager of the Year 2020 (RusRisk). 15+ years leading risk and continuity functions: Nornickel, where he built business continuity from zero, Rosneft, Beeline, Ernst & Young; author of 30+ continuity plans. CRO of a $20bn petrochemical megaproject (AGCC, SIBUR) with 200+ construction risk indicators. Author of the programme; he chairs the examination board, signs every certificate issued and matches Circle members to engagements with organisations.
The people who answer for resilience rarely sit in one department: risk, continuity, internal audit, operations, IT. ERGP for teams brings them onto the same programme as a group, so the organisation ends up with one vocabulary and one standard of evidence.
What the sponsor gets: a single view of the group's progress and test results, a cohort schedule agreed with you, capstones built on your own organisation's scenarios where you choose, and an individual, verifiable certificate for each participant. In-house cohorts of up to 12 executives are priced as one engagement — see the price below.
Need the site crews covered as well? That is a different programme: SAFE, 32 chapters of workplace safety read on the phone within one shift. Both are listed on the page for organisations.
The individual price is per person, in either language. The certification exam, the capstone review and admission to the ERGP Circle are included. Prices exclude VAT.
It is an independent professional certification issued by risk-place, and we say so openly. Its weight comes from the strict requirements of the programme: completing all six modules, passing the module tests and the capstone review.
NCEMA assesses organisations against the national standard; recognition of private programmes is outside its role. This programme certifies your personal competence in that landscape, the ability employers and clients actually hire for.
Compliance belongs to organisations and is assessed by authorities. The programme equips you to lead your organisation toward it, and the Module 5 mapping matrix is the practical starting point.
Those are respected practitioner credentials for the people who build continuity systems. This programme certifies the executive layer: governance, board accountability and regulatory navigation, built around the GCC regulatory landscape. Comparing certifications in the Gulf explains the differences in more detail.
Module tests can be retaken, and the questions are shuffled on every attempt. One capstone re-submission is included; further review sessions are scheduled at cost. The pass threshold is what makes the certificate worth showing.
Yes. The in-house track runs as a cohort on your own cases, and the capstone becomes a real board report for your organisation.
Yes. Ask for a 30-minute Zoom walkthrough: we show the chapters, the checkpoint questions, the tests and the register, and answer your questions.
ERGP, the Executive Certificate in Enterprise Resilience Governance, is an independent professional programme by risk-place, provided as information and advisory services and access to the author’s materials. It is not affiliated with, endorsed by or accredited by NCEMA, ISO or any other standardisation or certification body; standards and regulations are referred to as the regulatory context of the programme’s subject. The certificate confirms successful completion of the ERGP programme and its assessment; it does not attest any organisation’s compliance with any standard.
Leave your details and choose what you need. We reply within one working day with the next step or a Zoom link.
We read every application and reply personally. We invite leaders with 20+ years of practice.