Risk Officer, Links
Artificial Superintelligence Risk
Advanced Specialization
The Certified Risk and Compliance Management Professional in Hybrid Risk and Resilience Management - CRCMP(HR²M), distance learning and online certification program, is an advanced specialization designed exclusively for Certified Risk and Compliance Management Professionals (CRCMPs).
It builds on the solid foundation of the CRCMP designation and equips participants with cutting-edge knowledge to understand, identify, assess, and effectively manage complex hybrid risks.
The program prepares CRCMPs to strengthen organizational resilience across interconnected domains, including geopolitical and regulatory risk, counterintelligence, and supply chain resilience, while advancing capabilities in hybrid threat psychology, hybrid stress testing, and crisis management, ensuring readiness for an increasingly complex risk landscape.
Learning form important financial reports and presentations
1. Lloyds Banking Group, Financial Reports and Presentations
2. JPMorgan Chase, Financial Reports and Presentations
3. SAP, Financial Reports and Presentations
4. Mitsubishi UFJ Financial Group, Inc., Financial Reports and Presentations
5. The Mercedes-Benz Group AG (former Daimler AG), Financial Reports and Presentations
6. Amazon, Financial Reports and Presentations
7. ExxonMobil, Financial Reports and Presentations
8. CVS Health, Financial Reports and Presentations
9. Alphabet, Financial Reports and Presentations
11. Microsoft Corp, Financial Reports and Presentations
12. AT&T Inc., Financial Reports and Presentations
13. UnitedHealth Group, Financial Reports and Presentations
14. Samsung Electronics, Financial Reports and Presentations
15. The Allianz Group, Financial Reports and Presentations
16. McKesson Corporation, Financial Reports and Presentations
17. Dell Technologies, Financial Reports and Presentations
18. Philips, Financial Reports and Presentations
19. Berkshire Hathaway Inc., Financial Reports and Presentations
20. Deutsche Telekom, Financial Reports and Presentations
Compliance LLC, Business Units
Compliance LLC is a company incorporated in Wilmington, NC, with offices in Washington, DC, a provider of risk and compliance training in fifty-eight countries. Several of its business units are associations, offering a wide range of services to their members, including membership programs, regular updates (weekly or monthly), specialized training, certification, Authorized Certified Trainer (ACT) programs, advocacy, and other professional services.
Some of the business units of Compliance LLC:
A. The Sarbanes Oxley Compliance Professionals Association (SOXCPA).
The Sarbanes Oxley Compliance Professionals Association (SOXCPA) is the largest association of Sarbanes Oxley professionals in the world.
https://www.sarbanes-oxley-association.com
Is Sarbanes-Oxley compliance still necessary many years after its enactment?
https://www.sarbanes-oxley-act.com

B. The Basel ii / Basel iii / Basel iv Associations.
The Basel ii Compliance Professionals Association (BCPA) was the largest association of Basel ii Professionals in the world.
https://www.basel-ii-association.com
Basel II was a groundbreaking step forward in global banking regulation. It introduced a more refined, risk-sensitive framework, enhanced supervisory oversight, and greater transparency through market discipline.
https://www.basel-ii-accord.com
The Basel iii Compliance Professionals Association (BiiiCPA) is the largest association of Basel iii Professionals in the world.
https://www.basel-iii-association.com
The Basel III Accord is a comprehensive set of reforms developed by the Basel Committee to enhance the stability and resilience of the global financial system.
https://www.basel-iii-accord.com
For a Basel IV framework to exist officially, we need a formal announcement from the Basel Committee on Banking Supervision (BCBS), supported by a clear naming convention. As of now, the Committee refers to the post-2017 reforms as the "finalization of Basel III," not as a new framework. Unless the BCBS decides to issue a distinct, standalone set of rules under a new name, Basel IV for example, there will be no official Basel IV framework.
But what would need to happen for “Basel IV” to move from an informal term to an official regulatory framework? What steps would lead to formal recognition?
The Basel iv Compliance Professionals Association (BivCPA) is under development, much like Basel IV itself.
https://www.basel-iv-association.com
In the USA, the term 'Basel IV' is not, as of now, an official term recognized by the Federal Reserve, the Office of the Comptroller of the Currency (OCC), or the Federal Deposit Insurance Corporation (FDIC).
Basel IV in the United States | Progress, Challenges, Outlook.
C. The Solvency ii Association.
The Solvency ii Association is the largest association of Solvency ii Professionals in the world.
https://www.solvency-ii-association.com
There is no official “Solvency III” directive or framework, at least not yet. The term Solvency III is used informally by some industry professionals to describe a set of significant revisions to the Solvency II framework. These reforms, however, are officially considered part of Solvency II.
The Solvency II Association will continue to monitor developments as they unfold and keep you informed of any updates.
The Solvency III Association is under development, much like Solvency III itself.
https://www.solvency-iii-association.com
D. The International Association of Risk and Compliance Professionals (IARCP).
The Certified Risk and Compliance Management Professional (CRCMP) certificate, from the IARCP, has become one of the most recognized certificates in risk management and compliance. There are CRCMPs in fifty-eight countries. Companies and organizations around the world consider the CRCMP a preferred certificate.
You can find more about the demand for CRCMPs at: https://www.risk-compliance-association.com/CRCMP_Jobs_Careers.pdf
https://www.risk-compliance-association.com
Risk Officers play a crucial role in identifying, assessing, and mitigating risks that could impact an organization’s objectives. They ensure compliance with regulations and promote a strong risk culture across all levels of management.
The Chief Risk Officer (CRO) is responsible for the establishment, implementation, and continuous supervision of the organization’s risk management framework. The CRO ensures that the organization operates within its defined risk appetite, and enhances decision-making, regulatory compliance, and overall resilience.
https://www.chief-risk-officer.com
The Compliance Officer is entrusted with ensuring that the organization conducts its activities in full conformity with applicable laws, regulations, and internal policies.
https://www.compliance-officer.org
The Chief Compliance Officer (CCO) develops and maintains the compliance program, including policies, procedures, and control mechanisms, and conducts compliance risk assessments to identify, evaluate, and mitigate legal, regulatory, and ethical risks.
https://www.chief-compliance-officer.org
Risk management is the process through which an organization identifies, assesses, monitors, and mitigates risks that could adversely affect the achievement of its objectives. Effective risk management ensures that material risks are properly understood, measured, and managed within approved limits.
https://www.risk-management.us
Risk governance is the system of principles, roles, responsibilities, and accountability structures through which an organization’s board and senior management direct and oversee the risk management framework. It defines the decision-making hierarchy, reporting lines, and oversight mechanisms ensuring that risk-taking activities remain aligned with the organization’s strategy, risk appetite, and legal obligations.
https://www.risk-governance.us
E. The International Association of Potential, New and Sitting Members of the Board of Directors (IAMBD).
The IAMBD offers independent guidance on rapidly evolving responsibilities, and supports informed decision-making. It assists boards worldwide in addressing hybrid, cyber, and other emerging threats, and in managing the complexities inherent in modern regulatory frameworks, technological advancements, and geopolitical challenges.

F. The International Association of Hedge Funds Professionals (IAHFP).
The IAHFP provides independent, specialized guidance on the evolving regulatory, fiduciary, and risk management obligations governing hedge fund formation, operations, and investment activities. It enhances the ability to identify and address hybrid, cyber, and other emerging threats, and to understand better the strategic implications for hedge fund models, operations, and investment approaches.
https://www.hedge-funds-association.com
Cyber Risk GmbH
Cyber Risk GmbH (Dammstrasse 16, 8810 Horgen, Switzerland, CHE-244.099.341) is a trusted strategic partner delivering tailored services to support the association’s objectives. The company specializes in providing advanced cybersecurity and compliance training, helping organizations navigate and implement complex European, U.S., and international cybersecurity regulations. Cyber Risk GmbH supports professionals in completing online training programs, passing exams, and obtaining Certificates of Completion, which serve as independent verification of their expertise for firms and organizations.
Cyber Risk GmbH carefully monitors the regulatory challenges and opportunities in the EU, and offers online training programs for the NIS 2 Directive (NIS 2), the Digital Operational Resilience Act (DORA), the Critical Entities Resilience Directive (CER), the Digital Services Act (DSA), the Digital Markets Act (DMA), the European Chips Act, the European Data Act, the European Data Governance Act, and the European Artificial Intelligence Act.
Cyber Risk GmbH websites include the following:
a. General, Sectors, Industries.
1. Hybrid Risk
4. Defensive Hybrid Intelligence (DHI)
5. Cognitive Intelligence (COGINT)
6. Legal Intelligence (LEGINT)
7. Algorithmic and AI Intelligence (ALGINT)
8. Synthetic Cognitive Intelligence (SCINT)
9. Hybrid Resilience Initiative (HRI)
10. Cyber Risk GmbH
11. Social Engineering Training
22. Sanctions Risk
23. American Privacy Rights Act of 2024 (APRA)
24. Travel Security
25. Risk management, what is different in Switzerland
b. Understanding Cybersecurity.
4. What is Synthetic Identity Fraud?
6. What is Quantum Risk Management?
c. Understanding Cybersecurity in the European Union.
2. The Digital Operational Resilience Act (DORA)
3. The Critical Entities Resilience Directive (CER)
5. The European Data Governance Act (DGA)
6. The European Cyber Resilience Act (CRA)
7. The Digital Services Act (DSA)
8. The Digital Markets Act (DMA)
10. The Artificial Intelligence Act
11. The Artificial Intelligence Liability Directive
12. The Framework for Artificial Intelligence Cybersecurity Practices (FAICP)
13. The EU Cyber Solidarity Act
14. The Digital Networks Act (DNA)
15. The European ePrivacy Regulation
16. The European Digital Identity Regulation
17. The European Media Freedom Act (EMFA)
18. The Corporate Sustainability Due Diligence Directive (CSDDD)
19. The Systemic Cyber Incident Coordination Framework (EU-SCICF)
20. The European Health Data Space (EHDS)
21. The European Financial Data Space (EFDS)
22. The Financial Data Access (FiDA) Regulation
23. The Payment Services Directive 3 (PSD3), Payment Services Regulation (PSR)
24. The Internal Market Emergency and Resilience Act (IMERA)
26. The European Cyber Defence Policy
27. The Strategic Compass of the European Union
28. The European Space Law (EUSL)
30. The EU-US Data Privacy Framework
31. The European Cloud and AI Development Act
34. The EU Cyber Diplomacy Toolbox
Membership and certification
In the Reading Room (RR) of the association you can find our newsletter. Our Reading Room
