GIA Cert Governance & Risk study materials
GIA Cert Governance & Risk study resources

GIA Cert Governance & Risk case studies

GIA Cert Governance & Risk · Put your knowledge to work in context.

The Certificate in Governance and Risk Management is a professional education offering from the Governance Institute of Australia, a body that describes itself as an independent voice on governance and an active participant in the reform process. The Institute positions governance as a profession built over time through education, membership, professional recognition and a community of peers, and it delivers education spanning short courses, certificates, micro-credentials and postgraduate study. The GIA Cert Governance & Risk case studies are 5 cases and about 2,834 words.

1

The Risk Appetite That Nobody Owned

A mid-sized insurer's board approved a risk appetite statement 14 months ago. It contains 9 qualitative statements ('we are conservative on underwriting risk') and 2 quantitative limits: a 200% regulatory solvency coverage floor and a 5% cap on any single reinsurer's share of ceded premium.

572 words, about 3 min
2

Three Lines, One Blind Spot

A payments firm operates a three-lines model. The first line (business) owns a fraud-detection rule engine.

579 words, about 3 min
3

The Vendor That Scored Green

A wealth-management platform outsources its client onboarding and KYC checks to a vendor. The vendor's annual risk assessment scores it 'low risk' on a 1-5 matrix because it has ISO 27001 certification and a 99.95% uptime record.

540 words, about 3 min
4

When the Risk Register Becomes Fiction

A logistics group maintains a risk register with 210 entries. The CRO has noticed: 160 entries have not changed rating in 3 years; 38 are marked 'mitigated' with no evidence attached; 12 are duplicates of each other under slightly different names; and the top 10 risks by rating have not been discussed at a board meeting in 18 months.

571 words, about 3 min
5

The Escalation That Went Sideways

A regional bank's operational risk policy says incidents above a 250,000 loss threshold must be escalated to the CRO within 24 hours and reported to the Board Risk Committee at its next meeting. A payment-processing defect caused an estimated 400,000 loss over three days.

572 words, about 3 min