Consulting – RiskSpotlight

We are trusted advisors to organisations of all sizes within financial services and all our consultants are experienced in risk management frameworks and processes, as well as the technology solutions that enable them. We work across the GRC disciplines and specialise in operational risk where we provide end-to-end solutions, in combination with our content, training, and partner software solutions. Our key offerings are detailed below.

We provide consulting services to enable clients to develop their risk management frameworks to align with industry standards and best practices. This often covers the following topics:-

Benchmark current risk management frameworks with ISO 31000, COSO ERM, Basel Principles for Sound Management of Operational Risk, or OCEG's GRC Capability Model
Develop specific aspects of the risk framework such as:

Risk-informed Decision Making
Integrating Business Strategy and Risk Management
Risk and Control Taxonomy
Risk Identification
Risk & Control Ownership
Risk Assessments
Control Assessments
Control Testing
Risk and Control Assurance
Risk Dashboard & Reporting

Risk Aggregation
Risk Monitoring
Risk Acceptance
Incident Management
Issues and Action Management
Scenario Analysis
Risk Appetite
Risk Vocabulary
Monitoring Emerging Risks
Utilise Generative AI

We assist clients in selecting the most suitable risk management software solution to align with their risk management framework and processes. This involves the following phases:-

Understanding the client's risk management framework and processes
Scanning the vendors to identify the most suitable solution
Developing the vendor selection criteria, process and proof of concept requirements
Developing the RFI/RFP documents and running the process
Providing recommendations on the appropriate solution

This offering covers the consulting services required to analyse and define business requirements to facilitate successful implementation of risk management software. This usually includes:-

Risk & Control Assessments
Risk Aggregation
Risk Appetite, Risk Tolerance, Risk Limits & Risk Capacity
Risk Monitoring (covering KRIs, Issues Actions, Loss Data)
Risk Reporting

Scenario Analysis
Audit Management
Regulatory Compliance
Information Security Management
Model Risk Management

We provide independent facilitation of risk management related workshops and processes. This can also incorporate training on risk management generally, or specific topics such as:-

Identification of Risks & Controls
Identification of KRIs
Risk & Control Assessments

Scenario Development
Independent Control Testing (e.g for SOX)

First Name *

Last Name *

Email *

Company Name

Country

Your Enquiry *

Stay Connected with RiskSpotlight:
Please select this box if you want to receive email updates on operational risk related events, training courses and services from RiskSpotlight. By selecting the box, you confirm that you have read and consented to our Privacy Policy. You can revoke your consent at any time in the future.

View data privacy policy

RiskSpotlight Consulting

Consulting Services Overview

Risk Management Framework Development

Risk Management Software Vendor Selection

Business Requirement Analysis

Independent Facilitation

Consulting Enquiry Form