Governance, Risk & Controls

Building institutions that boards and regulators trust.

Overview

Governance, Risk & Controls

Designing and uplifting governance, risk and control frameworks at the standard expected of systemically important UK and Gulf institutions.

Our work is delivered exclusively by senior practitioners with prior experience inside institutions of the standard we serve - so the recommendations are pressure-tested before they reach your boardroom.

Capabilities

What we do.

Three lines of defence design

Reorganising risk, compliance and audit roles for clarity and effectiveness.

Internal audit co-sourcing

Specialist internal audit support across credit, treasury, regulatory and tech domains.

Policy & framework development

End-to-end design of risk, compliance and conduct policy frameworks.

Board & committee advisory

Board effectiveness, committee terms of reference, and reporting redesign.

Risk appetite frameworks

Top-down risk appetite design, cascade and KRI architecture.

Compliance programme design

Financial crime, conduct and prudential compliance programme uplift.

Our Approach

Diagnose. Design. Deliver.

01 — DIAGNOSE

Frame the right question.

Senior interviews, primary analysis and rapid hypothesis testing - to make sure the work that follows answers something that genuinely matters to the institution.

02 — DESIGN

Build a defensible answer.

Recommendations grounded in the realities of the institution and the regulatory environment - tested with the people who will need to implement them.

03 — DELIVER

See it through.

Hands-on support during execution: governance, regulator dialogue, programme delivery, and measurement of the outcomes the work was designed to achieve.

Related Services

Often paired with.

Discuss a Governance, Risk engagement.

Get in Touch