We understand your process and internal control environment and help strengthen controls across all areas of operational risk.

Our teams are experienced at implementing programs to support third-party risk, employee conduct, customer complaints and business continuity. We help you review and optimize areas of strength while identifying and remediating areas of operational weakness.

  • Business process mapping
  • Process-based risk identification
  • Process-based control design and effectiveness
  • Business process transformation
  • Quality Control design, monitoring, and testing
  • Operational loss mitigation and management design

  • Risk and control inventory
  • Reporting taxonomy
  • Internal control framework, including typology defined by preventative and detective, source, strength, and measurement of effectiveness
  • Quantitative and qualitative risk assessment methodology including inherent and residual risk calculations
  • 2nd Line of Defense effective challenge
  • Aggregate results, risk profiles, and heat map reporting by organization, business line, and function
  • GRC tool design and integration of other risk assessments
  •  Linkage to the issue management process for remediation of control weakness
  • Linkage to the change management process for ongoing risk assessment updates

  • Request for proposal
  • Due diligence
  • Risk rating methodology
  • Contracting
  • Ongoing monitoring and critical vendor management
  • Reporting and governance
  • Contingency planning and offboarding
  • 4th-party risk

  • Customer complaint intake sources
  • Complaint investigations and response process
  • Complaint tracking, reporting, and analyses including industry comparatives
  • Risk rating methodology
  • Root cause analysis, remediation, and customer restitution
  • Complaint testing and audit
  • Complaint resources, organizational design, and governance

  • Employee hotline
  • Code of Conduct
  • Conflicts of interest
  • Internal fraud
  • Incentive compensation program

  • Risk tolerance
  • Source identification and monitoring process
  • Risk triage and corporate response management process
  • Management and Board responsibilities, committee structure and composition, and oversight
  • Integration with risk appetite, scenario analysis, and stress testing processes

Case Studies

Learn about the ways we have helped our clients meet regulatory obligations, manage risk, and address business change.

Ready to Talk?

We work with you to understand your needs, so we can tailor our approach to your engagement. Learn more when you connect with our team.

Enterprise Risk and Compliance Management Systems

Enterprise Risk and Compliance Management Systems

We deliver integrated compliance management programs to effectively manage existing and emerging risks

Fair and Responsible Banking

Fair and Responsible Banking

We partner with financial institutions to promote ethical, transparent, and socially responsible banking practices, driving positive impact for all stakeholders

Cards and Payments Products and Services

Cards and Payments Products and Services

We build, assess, remediate, and implement operational and compliance risk management programs

Data Governance

Data Governance

We improve your bottom line, as well as your regulatory compliance, with our formal, systematic approach to measuring and uplifting Data Governance