Doorstep International

Operational resilience and AI-era cyber risk training

This course updates operational risk and resilience practice for AI: running AI-aware RCSAs from a risk register, key risk indicators, important business services and impact tolerances, third-party and AI vendor risk, deepfake and AI-enabled fraud, scenario testing that includes AI failures, and continuous control monitoring.

Built on the founder's operational risk programmes delivered to banks in Pakistan and at the Excellence in Operational Risk MENA conference in Dubai.

Who is this course for?

Operational risk, information security, business continuity, operations and internal audit staff.

What does the course cover?

  • Operational risk fundamentals and the Basel principles
  • RCSA using the Doorstep risk register
  • KRIs and loss data
  • Operational resilience: important services and impact tolerances
  • AI-era cyber threats and third-party AI risk
  • Scenario testing and continuous control monitoring

How is it delivered?

In-house, at a venue or online, as a half-day board session or a one- to two-day programme for specialists. Content is adapted to your institution's jurisdiction and AI use, using the Doorstep risk register for practical exercises. Led by Ahmer Nehal, former Head Risk and Fraud and SVP Operational Risk, who has trained senior management in Pakistan and the UAE.

Primary sources (reviewed 17 Oct 2026)

This page explains supervisory guidance in plain language. It is not legal advice; confirm how each text applies to your institution and jurisdiction.

Frequently asked questions

Can the course include an RCSA workshop for our units?

Yes. In-house delivery can include facilitated RCSA workshops for your own units using the register.

Put these controls to work this month

Start on the cloud risk management software within 24 hours, or ask for training or advice tailored to your institution.