Overview
Executive-grade master's degree in geopolitical forecasting, operational risk, cyber resilience, and supply chain continuity.
Durham University delivers this award fully online with world-class faculty, rigorous continuous assessment, and 100% tuition-free degree pathways (examination fee only). Transcripts and diplomas reflect rigorous academic excellence.
You will learn through interactive problem-solving, case studies, high-impact research, and direct academic mentorship. The curriculum is continuously calibrated against leading professional and industry standards.
MSc Enterprise Risk Management & Crisis Resilience is taught as one award, not a list of unrelated modules. The published length is 18 months, and the credit total is 36. Students move from Enterprise Risk Management (ERM): ISO 31000 & COSO through Enterprise Risk Management (ERM): ISO 31000 & COSO; Financial Risk Modeling, Liquidity & Solvency; Geopolitical Risk, Macro Scenarios & Market Disruption; Operational Risk, Internal Controls & Compliance; Crisis Management, Incident Command & Strategic Comms; Cyber Risk, Information Security & Digital Assets Defense, and finish on MSc Enterprise Risk Strategic Consulting Capstone.
Each course has a question, a method, and a submission. In this field, students diagnose one organisation and carry a decision through to a recommendation. Reading is a case, a short financial extract, and a stakeholder note. The artefact a marker expects is a consulting brief a manager could use.
The award is built so that a graduate can do the following in practice: Apply the methods of this award to a defined professional problem. Execute rigorous empirical and data-driven analyses to solve complex real-world challenges. Demonstrate executive-grade written and oral communication for stakeholders and global audiences.
Teaching assumes the student can read a source, attempt a problem before the seminar, and revise after feedback. Attendance at live seminars is part of the design. The capstone or final course must use the methods of the earlier courses; a project that ignores them does not pass.
The pages for each course name the topics that are examined. Those topics are the syllabus. A brochure line is not a substitute for them.
The programme carries 36 credits across structured modules. Delivery is 100% tuition-free aside from the modest examination fee. Transcripts use standard letter grades and GPA scales consistent with all Durham University qualifications.
Programme Structure & Delivery
Coursework
Interactive modules, weekly readings, recorded and live seminars, and collaborative discussions with peers worldwide.
Assessment
Module assignments, proctored examinations, and capstone projects designed to demonstrate mastery of the field.
Learning Outcomes
- ✦Apply the methods of this award to a defined professional problem.
- ✦Execute rigorous empirical and data-driven analyses to solve complex real-world challenges.
- ✦Demonstrate executive-grade written and oral communication for stakeholders and global audiences.
- ✦Lead cross-functional teams with ethical integrity, regulatory compliance, and strategic foresight.
- ✦Produce original capstone research or consulting projects that make a measurable impact.
Career Pathways
- ✦Specialist practitioner
- ✦Strategic Consultant & Policy Advisor
- ✦Research Scientist / Principal Analyst
- ✦Academic Scholar / University Educator
- ✦Enterprise Innovation Lead
Assessment
Modules are assessed through a published mix of coursework, applied projects, and examinations. Exam windows are announced in advance so students in other time zones are not forced into overnight sittings. Alternative arrangements are available where documented.
Curriculum
Term 1 — Enterprise Risk Frameworks & Strategy
RRM501Enterprise Risk Management (ERM): ISO 31000 & COSO- RRM501-M1 · Position, rivals, and the choice in front of the organisation — Enterprise Risk Management (ERM): ISO 31000 & COSO
- RRM501-M2 · A financial result and the operational cause — Enterprise Risk Management (ERM): ISO 31000 & COSO
- RRM501-M3 · The decision, the team, resistance, and the plan — Enterprise Risk Management (ERM): ISO 31000 & COSO
- RRM501-M4 · Stakeholders and what they can block — Enterprise Risk Management (ERM): ISO 31000 & COSO
- RRM501-M5 · Ethics and the limit of the recommendation — Enterprise Risk Management (ERM): ISO 31000 & COSO
- RRM501-M6 · A consulting brief: problem, evidence, recommendation, defence — Enterprise Risk Management (ERM): ISO 31000 & COSO
3 creditsRRM502Financial Risk Modeling, Liquidity & Solvency- RRM502-M1 · Statements: income, position, and cash — Financial Risk Modeling, Liquidity & Solvency
- RRM502-M2 · Recognition, ratios, and what the numbers cannot show — Financial Risk Modeling, Liquidity & Solvency
- RRM502-M3 · Cash flows, discount rates, and sensitivity — Financial Risk Modeling, Liquidity & Solvency
- RRM502-M4 · Market, credit, and operating risk — Financial Risk Modeling, Liquidity & Solvency
- RRM502-M5 · Controls, exceptions, and reporting — Financial Risk Modeling, Liquidity & Solvency
- RRM502-M6 · An investment or operating recommendation — Financial Risk Modeling, Liquidity & Solvency
3 creditsRRM503Geopolitical Risk, Macro Scenarios & Market Disruption- RRM503-M1 · Audience, offer, and the evidence for both — Geopolitical Risk, Macro Scenarios & Market Disruption
- RRM503-M2 · Channel choice and what the channel cannot do — Geopolitical Risk, Macro Scenarios & Market Disruption
- RRM503-M3 · Message, proof, and a measure of response — Geopolitical Risk, Macro Scenarios & Market Disruption
- RRM503-M4 · Ethics of persuasion and claims that must not be made — Geopolitical Risk, Macro Scenarios & Market Disruption
- RRM503-M5 · A campaign or content decision with a budget line — Geopolitical Risk, Macro Scenarios & Market Disruption
- RRM503-M6 · A recommendation a client could act on — Geopolitical Risk, Macro Scenarios & Market Disruption
3 creditsRRM504Operational Risk, Internal Controls & Compliance- RRM504-M1 · Order, nodes, delay, and a flow map — Operational Risk, Internal Controls & Compliance
- RRM504-M2 · Demand, capacity, stock, and stock-out — Operational Risk, Internal Controls & Compliance
- RRM504-M3 · A break in the chain and the response — Operational Risk, Internal Controls & Compliance
- RRM504-M4 · Cost, time, and who pays for the buffer — Operational Risk, Internal Controls & Compliance
- RRM504-M5 · One lane, site, or corridor — Operational Risk, Internal Controls & Compliance
- RRM504-M6 · A change recommendation with cost and risk — Operational Risk, Internal Controls & Compliance
3 creditsTerm 2 — Crisis Leadership & Cyber Resilience
RRM505Crisis Management, Incident Command & Strategic Comms- RRM505-M1 · Position, rivals, and the choice in front of the organisation — Crisis Management, Incident Command & Strategic Comms
- RRM505-M2 · A financial result and the operational cause — Crisis Management, Incident Command & Strategic Comms
- RRM505-M3 · The decision, the team, resistance, and the plan — Crisis Management, Incident Command & Strategic Comms
- RRM505-M4 · Stakeholders and what they can block — Crisis Management, Incident Command & Strategic Comms
- RRM505-M5 · Ethics and the limit of the recommendation — Crisis Management, Incident Command & Strategic Comms
- RRM505-M6 · A consulting brief: problem, evidence, recommendation, defence — Crisis Management, Incident Command & Strategic Comms
3 creditsRRM506Cyber Risk, Information Security & Digital Assets Defense- RRM506-M1 · Assets, trust boundaries, and the adversary model — Cyber Risk, Information Security & Digital Assets Defense
- RRM506-M2 · Threat modelling and attack paths — Cyber Risk, Information Security & Digital Assets Defense
- RRM506-M3 · Identity, logging, and segmentation — Cyber Risk, Information Security & Digital Assets Defense
- RRM506-M4 · Detection, containment, and evidence — Cyber Risk, Information Security & Digital Assets Defense
- RRM506-M5 · Residual risk and what a control does not stop — Cyber Risk, Information Security & Digital Assets Defense
- RRM506-M6 · Defensive design, test plan, and after-action review — Cyber Risk, Information Security & Digital Assets Defense
3 creditsRRM507Supply Chain Continuity & Third-Party Vendor Risk- RRM507-M1 · Order, nodes, delay, and a flow map — Supply Chain Continuity & Third-Party Vendor Risk
- RRM507-M2 · Demand, capacity, stock, and stock-out — Supply Chain Continuity & Third-Party Vendor Risk
- RRM507-M3 · A break in the chain and the response — Supply Chain Continuity & Third-Party Vendor Risk
- RRM507-M4 · Cost, time, and who pays for the buffer — Supply Chain Continuity & Third-Party Vendor Risk
- RRM507-M5 · One lane, site, or corridor — Supply Chain Continuity & Third-Party Vendor Risk
- RRM507-M6 · A change recommendation with cost and risk — Supply Chain Continuity & Third-Party Vendor Risk
3 creditsRRM508Board Oversight, Risk Appetite & Culture Transformation- RRM508-M1 · Position, rivals, and the choice in front of the organisation — Board Oversight, Risk Appetite & Culture Transformation
- RRM508-M2 · A financial result and the operational cause — Board Oversight, Risk Appetite & Culture Transformation
- RRM508-M3 · The decision, the team, resistance, and the plan — Board Oversight, Risk Appetite & Culture Transformation
- RRM508-M4 · Stakeholders and what they can block — Board Oversight, Risk Appetite & Culture Transformation
- RRM508-M5 · Ethics and the limit of the recommendation — Board Oversight, Risk Appetite & Culture Transformation
- RRM508-M6 · A consulting brief: problem, evidence, recommendation, defence — Board Oversight, Risk Appetite & Culture Transformation
3 creditsTerm 3 — Strategy Capstone
RRM601Simulated Crisis Wargaming & Stress Testing- RRM601-M1 · Position, rivals, and the choice in front of the organisation — Simulated Crisis Wargaming & Stress Testing
- RRM601-M2 · A financial result and the operational cause — Simulated Crisis Wargaming & Stress Testing
- RRM601-M3 · The decision, the team, resistance, and the plan — Simulated Crisis Wargaming & Stress Testing
- RRM601-M4 · Stakeholders and what they can block — Simulated Crisis Wargaming & Stress Testing
- RRM601-M5 · Ethics and the limit of the recommendation — Simulated Crisis Wargaming & Stress Testing
- RRM601-M6 · A consulting brief: problem, evidence, recommendation, defence — Simulated Crisis Wargaming & Stress Testing
3 creditsRRM602MSc Enterprise Risk Strategic Consulting Capstone- RRM602-M1 · Position, rivals, and the choice in front of the organisation — MSc Enterprise Risk Strategic Consulting Capstone
- RRM602-M2 · A financial result and the operational cause — MSc Enterprise Risk Strategic Consulting Capstone
- RRM602-M3 · The decision, the team, resistance, and the plan — MSc Enterprise Risk Strategic Consulting Capstone
- RRM602-M4 · Stakeholders and what they can block — MSc Enterprise Risk Strategic Consulting Capstone
- RRM602-M5 · Ethics and the limit of the recommendation — MSc Enterprise Risk Strategic Consulting Capstone
- RRM602-M6 · A consulting brief: problem, evidence, recommendation, defence — MSc Enterprise Risk Strategic Consulting Capstone
9 creditsAdmission requirements
Academic entry
- Recognized Bachelor's degree (minimum 2:2 or GPA 2.5/4.0) or equivalent professional experience
English language
- Demonstrated English language proficiency
Documents
- Academic or professional references
Research & interview
- Statement of Purpose outlining academic goals and research interest
Programme questions
How long is the MSc Enterprise Risk Management & Crisis Resilience?+
The published duration is 18 months. Teaching language: English. Actual time-to-complete depends on mode and any recognised prior learning.
Can I study this from my country?+
This is a fully online award. You study from your country. No student visa and no campus relocation are required.
What does it cost?+
Degree tuition for this award is published as £0 / tuition-free on the online pathway. Examination or administrative fees may apply at checkout — never an annual tuition invoice. Check the Fees page for any extras.
What are the entry requirements?+
Requirements are grouped on this page (academic, English, documents). Equivalent qualifications are considered. English may be waived after prior English-medium study.
How is the programme assessed?+
Assessment is typically a mix of coursework, projects, and examinations. Doctoral awards include a thesis or dissertation and an oral examination. Details sit in the programme specification and module outlines.
Will this award be recognised where I live?+
Recognition of the award for local employment, professional licence, or ministry attestation is decided by your employer or regulator. Durham University publishes verification pages for certificates. We do not claim automatic equivalence in every country.
How do I apply?+
Start an application on this website. Progress is saved from the first step. Admissions: admissions@durhm.co.uk.
