IT is critical to the operation and integration of risk management functions within an organisation, yet it can be an organisation's most significant expenditure. Organisations are also under intense pressure to achieve efficiency and deliver shareholder value promptly.

IT offers a potential opportunity and risk but productivity in delivering IT programmes and projects is often hampered through the lack of defined and aligned business objectives.

We have developed a methodology, proprietary tools and templates to help the organisations select and implement risk management systems to identify, measure, monitor and manage financial risks (APT, Gambit, RiskMetrics, SAS, etc.) operational risks (Acuity, bespoke development, SAS, Statpro, etc.), and compliance risks (LatentZero, Olympic, etc.).

Our methodology includes:

• Project managing and identifying required business functionality to mitigate the risk of delay and overruns – our project management services are anchored around two templates that help accelerate delivery, i.e. the Terms of Reference and the Change Control Procedure;  
• Establishing a shortlist of solutions most likely to meet an organisation’s strategic and functional requirements. We draw on our proprietary library of existing software solutions to accelerate the establishment of the short list;
• Preparing a Request for Proposal using proprietary templates adapted to account for specific functional requirements, developing score mechanisms to evaluate the responses to the Request for Proposal and organising scripted workshops with vendors and reference site visits;
• Undertaking a risk assessment of the proposed solutions and formulating a recommendation to enable management to make a more informed decision.

Our consultants have detailed knowledge of many of the most common software solution packages. Depending on the size of the project and the proposed solution, we can work jointly with one of our alliance partners from our extended enterprise.

Case Studies

Implementation of the requirements of CSSF Circular 07/308 on Risk Management