We provide the services to address enterprise risk for which organisations should evaluate their current risk frameworks, and develop and embed their risk thinking.
The following points are taken into consideration:
- The alignment between business strategy and a clearly defined risk appetite
- How they identify and respond to the key risks that may affect their achievement of their strategic objectives
- How they consider risk to enhance strategic decisions
- How they monitor, manage and report on risks and changes to their risk profile
- The effectiveness of their risk culture
- The nature and effectiveness of different levels of assurance
We help put all levels of management in control. Recognizing their roles in managing risk, we use risk concepts to help them decide on new projects, initiatives and priorities. Services include:
- Facilitating risk workshops to identify key risks – judging their impact and likelihood. We then assist in articulating risk appetite and risk tolerance
- Independently reviewing risk frameworks, and providing input from shared good practice
- Advising on risk identification, monitoring and reporting
- Assurance mapping, to identify and evaluate different sources of assurance and the “three lines of defense”