Before a loss

    Enterprise risk management (ERM)

    We help businesses identify, assess and monitor risk systematically, using ISO 31000 and COSO ERM, but sized to how the business actually operates.

    • Free consultation
    • Same-day response
    Engineers discussing on a tablet in a factory

    When you need this service

    • 01Your board, lenders or foreign partners ask for a risk framework
    • 02Preparing for listing, fundraising or internal audit
    • 03After a major incident you want to prevent a repeat
    • 04Risks are managed separately in each department
    • 05You need to decide which risks to retain and which to transfer to insurance

    Scope of work

    • Current-state and maturity assessment
    • Risk register by business area
    • Risk appetite, thresholds and reporting lines
    • Likelihood and impact scoring, prioritisation
    • Business continuity plans (BCP) for critical scenarios
    • Training for managers and risk owners

    How we work

    1. 1

      Identify

      Understand context, business goals and key processes to build the risk register.

    2. 2

      Assess

      Score risks with department heads and assess existing controls.

    3. 3

      Treat

      Design actions, assign owners, deadlines and indicators.

    4. 4

      Monitor & report

      Set review cycles and reporting to management and the board.

    Documents to prepare

    You can start without a complete file. We will guide you on what to add as we go.

    Information to prepare

    • Organisation chart and department functions
    • Business plan and strategic objectives
    • Existing internal procedures and policies
    • List of past incidents, complaints and losses
    • Current insurance programme

    Frequently asked questions

    Talk to a specialist

    Send us your policy or a description of what happened and the relevant specialist will reply the same day. Advice is free; fees apply only once you decide to engage our services.