Service Enterprise Risk Advisory Target client · Organisations building or upgrading ERM
Problem · Risk is managed in silos with no integrated, governed system
Scope · ERM diagnostic, framework design, register build, KRI set, board reporting, roadmap
Approach · Diagnose with the maturity assessment, then design, build and embed the ERM system across the three lines
Outcomes · A governed, integrated ERM system operating at target maturity
Related resources ERM Toolkit Enterprise Risk RegisterDuration · 8-12 weeks
Service Risk Governance Advisory Target client · Boards and executives needing clearer oversight
Problem · Unclear authority, overlapping responsibilities and weak assurance
Scope · Governance review, three-lines redesign, committee charters, RACI, assurance map
Approach · Review current governance, redesign the three lines, and equip committees with charters and reporting
Outcomes · Clear authority, effective oversight and coordinated assurance
Related resources Risk Committee Charter Governance RACIDuration · 6-8 weeks
Service Risk Transformation Target client · Organisations needing a step-change in maturity
Problem · Risk capability lags strategy and stakeholder expectations
Scope · Multi-phase transformation across governance, appetite, operations, technology and reporting
Approach · A phased programme with milestones, moving maturity (e.g. Functional to Strategic) with embedded capability
Outcomes · A demonstrable step-change in risk maturity and value
Related resources ERM Toolkit Risk Maturity RoadmapDuration · 3-6 months
Service Risk Culture Programme Target client · Organisations with behavioural or conduct risk
Problem · Policies exist but behaviour and accountability fall short
Scope · Culture diagnostic, intervention plan, leadership engagement, measurement
Approach · Diagnose culture, intervene through leadership, incentives and communication, and measure improvement
Outcomes · Measurable improvement in risk culture and accountability
Related resources Risk Culture Survey Risk Culture ScorecardDuration · 8-12 weeks
Service Board Risk Advisory Target client · Boards seeking effective, demonstrable oversight
Problem · Board risk reporting is dense, backward-looking and hard to act on
Scope · Oversight review, board-pack redesign, committee charters, director briefing
Approach · Assess oversight, redesign the board risk pack and charters, and brief directors
Outcomes · Sharper, decision-grade board risk oversight
Related resources Board Risk Charter Risk Reporting PackDuration · 4-6 weeks
Service Crisis Management Advisory Target client · Organisations needing crisis & continuity readiness
Problem · No tested ability to respond to and recover from acute disruption
Scope · Crisis plan, team design, simulation, communications templates, optional retainer
Approach · Build the crisis capability, run a simulation, and optionally provide on-call support
Outcomes · Tested crisis readiness and faster, more credible response
Related resources Crisis Management Toolkit BC Plan TemplateDuration · 4-8 weeks + retainer
Service Fraud Risk Advisory Target client · Organisations exposed to fraud and financial crime
Problem · Weak fraud prevention, detection and investigation capability
Scope · Fraud risk assessment, anti-fraud programme, detection analytics, investigation support
Approach · Assess fraud risk, strengthen controls and detection, and stand up investigation capability
Outcomes · Reduced fraud exposure and a credible response capability
Related resources Fraud Risk Register Whistleblowing PolicyDuration · 6-10 weeks
Service Cyber Risk Advisory Target client · Organisations strengthening cyber resilience
Problem · Cyber maturity and incident readiness are below the risk the business carries
Scope · Cyber review, control uplift, incident-response build, resilience programme
Approach · Assess cyber maturity, uplift controls, build incident response and test recovery
Outcomes · Improved cyber maturity, resilience and board assurance
Related resources Cyber Risk Register Incident Response PlaybookDuration · 6-12 weeks
Service Managed Risk Function Target client · SMEs and lean teams without a full risk function
Problem · No capacity or budget for a full in-house risk function
Scope · Outsourced/co-sourced register maintenance, KRIs, reporting and committee support
Approach · Provide ongoing risk-function components as a managed service alongside the client team
Outcomes · Ongoing, professional risk capability without full in-house cost
Related resources ERM Toolkit Risk Reporting PackDuration · Retained (monthly)