Risk Management Services

We support organizations in building and enhancing risk management frameworks that align with their strategy, regulatory environment and operational realities. Our services cover advisory design and assurance validation across enterprise-wide risk, operational risk, banking-specific risks and capital adequacy processes.

Enterprise Risk Management (ERM)
ERM Advisory Services
  • Development of ERM Frameworks aligned with ISO 31000 principles/ COSO ERM Framework
  • Design of risk governance structures (roles, responsibilities, escalation)
  • Formulation of Risk Appetite Statements and Tolerance thresholds
  • Development of enterprise-wide Risk Taxonomy and Risk Registers
  • Creation of Impact and Likelihood rating scales
  • Development of risk reporting and dashboarding frameworks
  • Integration of ERM with strategy and performance management
ERM Assurance Services
  • Evaluation of ERM framework maturity and integration across departments
  • Review of risk appetite effectiveness in decision-making and reporting
  • Validation of risk register completeness and alignment with objectives
  • Testing the effectiveness of risk identification and mitigation controls
  • Assessment of risk culture and governance practices
ORM Advisory Services
  • Development of comprehensive Operational Risk Frameworks
  • Design of policies covering Control Risk Self-Assessment (CRSA), Incident Reporting and Key Risk Indicators (KRIs)
  • Development of ORM tools and templates for business units
  • Design of loss event data capture and analysis processes
  • Integration of ORM with internal audit and compliance functions
ORM Assurance Services
  • Review of ORM framework implementation and consistency across departments
  • Assessment of CRSA process effectiveness and reporting quality
  • Evaluation of incident management and resolution protocols
  • Testing of KRI monitoring, threshold breaches and escalation processes
  • Audit of loss event tracking and lessons-learned integration
Bank Specific Risk Advisory Services
  • Development of risk policies for Credit, Market and Liquidity Risks
  • Integration of banking-specific risks with ERM and ICAAP frameworks
  • Support in building dashboards and risk control matrices for financial institutions

  • Assist banks in designing their ICAAP framework to ensure it addresses all key regulatory and internal risk management elements.

  • Ensure the resulting ICAAP document is practical and aligned with the nature, scope, and complexity of the risks undertaken by the bank.

Bank Specific Risk Assurance Services
  • Evaluation of the adequacy and implementation of Credit, Market and Liquidity Risk policies and suitability of existing risk models
  • Independent validation of control effectiveness and regulatory alignment
  • Audit of governance structures supporting risk-taking decisions

  • Assess the design and implementation of the existing ICAAP framework to ensure alignment with regulatory expectations and internal risk strategy.

  • Evaluate the effectiveness and completeness of the current ICAAP document.

  • Test the integrity of the capital planning process, including validation of risk measurement models used to determine capital requirements.