Case Studies

Enhancing Risk Management Framework For a large US non-profit entity which provides grants & loans for sustainability projects globally

What did we do?

• Risk Organization
– restructured the role & responsibilities and staffing in line with the Internal Audit
Association- 3 lines of defense model
• Risk Policies, Processes & Systems-
– revisited inherit risks, controls, residual risks, risk appetite, risk ratings, risk approvals, risk acceptance, risk outliers & path to green at the product & enterprise level
– defined standardized risk taxonomy. Implemented a tiered approach to Risk Registers. Linked Product Risk Register to the Enterprise Risk Register for bottoms-up &top-down risk mapping & collation
– automated Risk process to ensure (i) accuracy & standardization of assessment (ii)
aggregation & reporting

What did we achieve?

Improved the effectiveness of risk process

Defined & standardized risk taxonomy

Automated risk processes & registers

Enhanced risk monitoring & governance

4- Dimensional Governance Evaluation Model (Example): For a Digital Bank evaluated the existing Governance, Risk & Compliance frameworks and suggest areas of focus & improvement