Twelve sessions for the people who have to say yes, no, or not yet to a digital asset proposal. Risk, Compliance, Audit and Technology work one client file together, and leave able to defend the call.
Opening loop from the Module 1 lab. AI-generated footage. Every company in the cases is fictional.
Why this programme
You need five questions, a sense of what a good answer looks like, and practice making the call with colleagues who see the same file differently. That is what the twelve sessions build.
No technical background needed. Every concept arrives as a question a reviewer can ask.
Risk, Compliance, Audit and Technology sit in the same breakout. The tension between them is part of the lesson.
Rules, exploits and enforcement are taught with their dates and sources, current to October 2026.
How the programme is built
Meridian Digital Capital, a fictional Singapore digital assets firm, asks the bank to back the next phase of its tokenised trade receivables pilot. The same client, the same wallet and the same people return in every module, so each lens builds on the last.
Read the setup: networks, consensus, bridges, stablecoins, tokens and the code that holds the money.
Module 1 · Blockchain TechnologyPlace each activity inside the UK, US, Singapore and FATF regimes, and test the ESG claim the bank would repeat.
Module 2 · ESG and RegulationWatch the wallet on-chain, screen for sanctions, assess the custodian and decide what to allow, monitor or deny.
Module 3 · Risk ManagementTurn the same discipline on a settlement platform: TradeChain v2.4, reviewed across five security dimensions.
Module 4 · Threat and CybersecurityThe thread through Modules 1 to 3 is one address: 0x3B8aD41f…C90E Admin key in Module 1, treasury wallet in Module 2, the wallet under watch in Module 3.
Four modules, each led by its lab
Two taught sessions build the vocabulary. The lab puts it to work: breakout teams of four to five, named roles, injects mid-lab, then three minutes to present and two minutes of challenge.
Module 1 lab
Meridian wants to scale from 40 to 400 invoices a month across Ethereum, Polygon and BNB Chain. Read the pack, map every connection, name the weakest link.
Module 2 lab
A carbon-backed token, three requests to the bank: distribute it, hold it, bank its issuer. Classify across three jurisdictions, then decide each request.
Module 3 lab
Thirty days of Meridian's wallet on a simulated explorer, a sanctions advisory and a custodian file. One large Sunday-night outflow nobody can explain.
Module 4 lab
The vendor says it is secure. Prove it. Five vendor documents, one released mid-lab, scored across five dimensions of a security canvas.
Regulatory hooks taught in Module 2
The FCA cryptoasset regime commences. Activity brought into the perimeter on 4 February 2026 needs authorisation by this date.
SEC and CFTC joint interpretation sets out a taxonomy of crypto assets. Most are not securities; the investment contract overlay still decides hard cases.
Seventh targeted update. 83 per cent of surveyed jurisdictions have Travel Rule laws, but supervision lags in many.
The MAS digital token service provider regime took effect with no transition, reaching Singapore firms that serve only overseas clients.
Dates as taught in the Module 2 materials, current to October 2026. Each session re-checks them against the regulator's own publications before delivery.
Formats
The same material runs at three depths, online or in person. Every format keeps the fictional client and at least one real decision.
Step 1
90 min
For the board, ExCo or a risk committee. One lens of your choice, one case, one decision taken in the room.
Step 2
5.5 hours
Three sessions: two taught, one lab. Pick the lens your team needs now: technology, regulation, risk or cyber.
Step 3
22 hours
All four modules and all four labs, usually over several weeks. Twelve sessions, cross-functional teams throughout.
How it runs
Two-hour sessions on Zoom or Teams with one break, or the same content in your room.
Each lab team takes named roles, such as Risk Lead, Compliance Lead, Audit Observer and Decision Owner.
In the labs, the facilitator briefs, times and provokes. Participants make the calls.
Every session closes with one action for this week, this month and this quarter.
Free, in your browser
Short public versions of the programme labs. About ten minutes each, no sign-up.
Read a month of wallet activity on a simulated explorer. Flag what worries you, then decide: escalate, monitor or not yet.
Open the explorer → Module 1 tasterFind the weakest linkRead four connections in Meridian's pilot and name the one you would least want to rely on.
Open the review → Module 2 tasterLaunch, restrict or rejectA sustainability-branded token and three requests to the bank. Decide each one, then see how it holds up.
Open the decision →From participants
Your facilitator
Manish advises boards and senior executives on cybersecurity, AI adoption and technology risk. He brings more than 25 years of international experience across financial services, insurance, telecommunications, critical infrastructure and government.
A former partner at PwC and Grant Thornton, he has led cyber risk, digital resilience and regulatory programmes for major organisations, including DBS, Barclays and Allianz. He runs every session himself.
Programme brochure
Modules, sessions, labs, formats and the facilitator, in one PDF you can forward. Leave your work email and the download opens straight away.