Risk Management
Helping boards see, understand, and master their risk
- ERM Frameworks
- Risk Appetite
- Risk Assessment
- Reporting & Analytics
Our Risk Management Framework
We design and operate enterprise risk management as a continuous lifecycle, aligned to ISO 31000 and COSO ERM, calibrated to your risk appetite and regulatory context.
Establish Context
Risk appetite, strategy alignment, governance
Identify Risks
Risk universe, taxonomy, emerging risks
Assess & Evaluate
Risk universe, taxonomy, emerging risks
Treat & Mitigate
Controls, action plans, risk response
Monitor & Report
KRIs, dashboards, board reporting
Continuous cycle: governance and assurance wrap around every stage — risk management never stops.
Built on the Three Lines model
First Line — Management
Second Line — Risk & Compliance
Third Line — Internal Audit
Governing Body & Board
Standards we hold ourselves to
ISO 31000:2018
COSO ERM Framework
IIA Three Lines Model
Basel / regulatory risk codes
Risk Management Services
A full portfolio spanning framework design, operational risk support, and independent assurance — delivered flexibly to your needs.
ERM Framework Design
Every engagement follows a disciplined five-phase approach, aligned to the IIA International Professional Practices Framework
Risk Assessment & Profiling
We design and operate enterprise risk management as a continuous lifecycle, aligned to ISO 31000 and COSO ERM, calibrated to your risk appetite.
Risk Reporting & Analytics
Risk Function Support
Every engagement follows a disciplined five-phase approach, aligned to the IIA International Professional Practices Framework
Risk & Reporting Automation
We design and operate enterprise risk management as a continuous lifecycle, aligned to ISO 31000 and COSO ERM, calibrated to your risk appetite.
Specialist risk domains
Our enterprise risk practice is underpinned by deep expertise across every major risk category.
How an engagement begins
A straightforward path from first conversation to assurance delivered.
Discovery Call
Understand your risk maturity, gaps, and priorities
Scope & Proposal
Tailored scope, approach, timeline, and fixed fee
Mobilisation
Engagement letter, planning, stakeholder onboarding
Delivery
Framework build or risk support with regular updates
Embed & handover
Capability transfer and ongoing assurance
