Assess & advise
Risk-function health checks, regulatory gap analysis, target operating models, risk appetite and proportionate governance design.
Understand the problem
Advisory · managed risk services · independent assurance
Senior risk expertise. Sharper delivery.
Senior-led risk support for financial institutions, investment firms, insurers and fintechs—from focused advisory projects to outsourced risk monitoring and independent assurance. We connect enterprise risk, prudential frameworks, regulatory delivery and Board-ready reporting across UK, EU and selected international requirements.
Senior consulting from £900/day
Project or ongoing managed support
On-site / hybrid / remote
Risk intelligence / live view
Expert-led
Delivery model
Flexible
Project · daily rate · interim
Focus
Enterprise + prudential
ERM · ORSA · ICAAP · ICARA
Risk architecture
Risk appetite · register · KRIs · controls · assurance
10+ years
Financial-services risk experience
FCA experience
Regulatory perspective and practical delivery
UK · EU · Global
Cross-border regulatory frameworks
Independent
Risk-function review and third-line assurance
Core capability map
Everything you asked us to cover is directly accessible here.
Enterprise Risk & ORSA
ERM · risk appetite · risk register · KRIs · controls
Audit & Third-line Assurance
Independent challenge · effectiveness · embedding
Regulatory Horizon
UK · EU · international regulatory change
Pricing
From £900/day · fixed-fee · interim
FAQ
Scope · ORSA · pricing · assurance · jurisdictions
AI-enabled Delivery
Faster analysis with expert judgement
Managed Risk Services
Ongoing monitoring · reporting · fractional capacity
Reporting Templates
Risk register · incidents · KRIs · credit · liquidity
End-to-end risk services
One partner from diagnosis to day-to-day delivery.
Our model brings advisory, implementation, managed services, reporting technology and independent assurance into one connected service. Each engagement is tailored to the firm’s risks, permissions, operating model and regulatory obligations.
Build & remediate
Policies, controls, RCSA, ICARA / ICAAP / ILAAP, ORSA, stress testing, remediation plans and implementation evidence.
Turn advice into operationOperate & support
Fractional risk leadership, recurring monitoring, incident oversight, committee preparation and regulatory-change delivery.
Strengthen day-to-day capacityReport & monitor
Risk registers, KRIs, credit and liquidity monitoring, executive dashboards and Board-ready MI in Excel, Power BI or Tableau.
Make risk visibleAssure & improve
Independent risk-function audits, third-line assurance, control testing, findings validation and sustainable remediation.
Prove that it works
Why Risk Consulting London
Senior expertise without the machinery of a large consultancy.
We combine deep risk expertise, regulatory perspective, technology-enabled delivery and flexible resourcing. Clients work directly with experienced practitioners rather than paying for layers that do not improve the answer.
01
Senior expertise
10+ years across financial-services risk, prudential frameworks and regulatory environments.
02
Regulatory perspective
Practical understanding of how frameworks, evidence and governance stand up to scrutiny.
03
Boutique delivery
Direct access, faster decisions and no unnecessary junior hand-offs.
04
Technology enabled
AI and automation used selectively to accelerate analysis, testing and documentation.
05
Flexible resourcing
Projects, individual days, interim cover and on-site, hybrid or remote delivery.
Three ways to engage
Advice, ongoing delivery or independent assurance.
Choose a defined project, extend your team with managed risk capacity, or commission independent review. The scope can move between these models as your needs change—subject to clear governance and independence boundaries.
Advisory
Build or fix the framework
Focused expertise for ERM, ORSA, prudential frameworks, regulatory reporting, controls, stress testing and remediation.
Explore advisory services →
Managed risk services
Outsource day-to-day capability
Ongoing monitoring, incident oversight, risk MI and fractional risk-function capacity without building a full permanent team.
Explore outsourced risk support →
Independent assurance
Test whether it works
Risk-function reviews, thematic assurance and third-line support that examine evidence, operating effectiveness and business embedding.
Explore assurance →
Core expertise
Complex risk problems, solved practically.
We work where prudential regulation, data, governance and implementation meet. The goal is not another document. It is a framework your teams understand, your Board can challenge and your regulator can scrutinise.
01
ICARA / ICAAP / ILAAP
Capital and liquidity adequacy, risk appetite, stress testing, governance and regulator-ready documentation.
Explore prudential frameworks02
Enterprise Risk & ORSA
ERM frameworks connecting strategy, risk appetite, risk register, KRIs, controls, ORSA and Board decision-making.
Build enterprise risk03
Regulatory reporting
MIFIDPRU / IFPR and broader reporting support: data integrity, reconciliations, controls, ownership and remediation.
Strengthen reporting04
Governance, RCSA & controls
Risk taxonomy, RCSA, control design, KRIs, committees, Board MI and clear accountability.
Improve governance05
Stress testing & wind-down
Realistic scenarios, liquidity and capital impacts, reverse stress testing, recovery triggers and execution planning.
Build credible resilience06
Risk function audit & assurance
Independent review of framework design, operating effectiveness, regulatory alignment and business embedding.
Test your risk function07
Interim / on-site expertise
Temporary senior risk capacity on a flexible daily-rate basis, including on-site, hybrid and short-notice support.
Add senior capacityAI
AI governance & enabled delivery
Expert-controlled AI for analysis and documentation, plus AI governance, risk controls and regulatory readiness.
See our AI approach→
Regulatory horizon
Practical impact assessment for emerging UK, EU and international regulatory change and implementation programmes.
View regulatory horizon
Managed risk services
Outsource capability. Keep accountability.
Not every firm needs a large permanent risk team. We can operate agreed parts of the risk cycle—monitoring, reporting, incident oversight, committee preparation and follow-through—on a recurring basis, with clear service scope, escalation and evidence.
Outsourcing support does not transfer the firm’s regulatory accountability. Governance, decision rights, data access, conflicts and any retained responsibilities are defined expressly in the engagement.
01
Risk & KRI monitoring
Thresholds, trends, limit breaches, actions and escalation across enterprise, credit, liquidity and operational risk.
02
Incident & action oversight
Structured intake, severity, root cause, regulatory assessment, remediation and closure evidence.
03
Committee & Board MI
Decision-focused packs, exception commentary, actions, minutes support and accountable follow-through.
04
Fractional risk leadership
Flexible senior capacity for firms building, scaling or temporarily covering their risk function.
05
Regulatory change delivery
Impact assessment, workplans, policy and control updates, testing and implementation evidence.
06
Third-party risk oversight
Service monitoring, concentration, resilience, due diligence, issues and exit-readiness support.
End-to-end risk management
One connected cycle, not a collection of disconnected documents.
01
Diagnose
Risk profile · gaps · priorities
02
Design
Appetite · governance · controls
03
Implement
Owners · data · evidence
04
Operate
Processes · incidents · actions
05
Monitor & report
KRIs · limits · Board MI
06
Assure & improve
Testing · challenge · remediation
Example reporting templates
See the reporting structure before you buy the advice.
Download branded Excel, Power BI and Tableau packs with sanitised sample data, formulas, thresholds, RAG status, dashboards and controls. They are illustrative starting points—not substitutes for your own risk appetite, governance or regulatory requirements.
Enterprise risk register
Inherent and residual scoring, controls, appetite, actions and escalation.
Incident & loss event report
Severity, impact, root cause, reporting assessment and closure.
5×5 risk matrix
Probability-versus-impact scoring and calibration guidance.
KRI monitoring
Direction-aware thresholds, trends, commentary and RAG status.
Credit monitoring
Limits, exposure, utilisation, collateral, PD/LGD and expected loss.
Liquidity monitoring
Resources, net outflows, buffers, survival horizon and LCR proxy.
Executive risk dashboard
KPI cards, category analysis, trend, heatmap, decisions and named actions.
Internal Credit Score (ICS)
Fictional Entity A–D scoring, ratio dashboard, peer comparison, data-quality flags and documented adjustment.
Flagship diagnostic
Risk Function Health Check
A focused independent assessment of whether your risk framework is coherent, compliant and genuinely operating in the business. We turn the review into a prioritised remediation plan, not a decorative maturity score.
Illustrative output
Risk framework maturity
Governance
Strong
Risk appetite
Develop
Controls
Moderate
Embedding
Priority
Enterprise risk management
From risk appetite to evidence. One connected framework.
A mature ERM framework connects strategy, risk appetite, the risk register, KRIs, controls, RCSA, stress testing and assurance. We design the links, challenge the gaps and make the framework usable by the business rather than owned only by Risk.
01
Risk appetite
capacity · appetite · limits
→
02
Risk register
taxonomy · ownership · assessment
→
03
KRIs & limits
thresholds · trends · escalation
→
04
Controls & RCSA
design · evidence · effectiveness
→
05
Assurance & action
challenge · remediation · Board MI
Gap analysis
structured & faster
structured & faster
Human validation
expert judgement retained
expert judgement retained
Data review
patterns & exceptions
patterns & exceptions
Documentation
clearer first drafts
clearer first drafts
AI-accelerated · expert-led
Use AI where it adds speed. Keep judgement where it matters.
AI can accelerate repetitive analysis, evidence mapping, document review and structured drafting. It cannot replace regulatory judgement, accountability or understanding of your business model. Our approach combines both.
✓
Senior review: outputs are challenged and validated by experienced risk professionals.
✓
Purpose-led: AI is used only where it materially improves quality, speed or consistency.
✓
Client-controlled: data-handling and confidentiality requirements remain central to the engagement design.
Regulatory change analysis
Controls mapping
Risk taxonomy analysis
KRI & MI development
Policy gap analysis
Document comparison
Data-quality interrogation
Scenario development
Explore AI-enabled delivery →
Boutique by design
Small firm. Senior attention. No unnecessary layers.
We deliberately operate lean. That means direct access to senior expertise, faster decisions and engagement structures shaped around the work you actually need, not a consultancy staffing model.
Ad hoc reviews
Daily-rate support
On-site expertise
Temporary cover
Project delivery
Hybrid / remote
One urgent problem
Bring us in for a focused review, challenge or remediation requirement.
Temporary senior capacity
On-site or hybrid support on a daily-rate basis for periods of change, leave, hiring gaps or regulatory pressure.
End-to-end ownership
From diagnosis through design, remediation, implementation and Board-ready output.
Indicative engagements
Transparent enough to budget. Flexible enough to fit the problem.
We offer daily-rate, fixed-fee and project-based support. Pricing depends on scope, complexity, urgency, location and regulatory requirements. No large-consultancy overhead, and no staffing pyramid disguised as expertise.
Scoping
No charge
Initial 30-minute discussion
Clarify the problem, likely scope, timing and the most efficient engagement model.
Senior consulting
From £900/day
Ad hoc & project support
Senior risk expertise for reviews, analysis, remediation, framework design and implementation.
Interim / on-site
£900–£1,250/day
Temporary senior capacity
Flexible on-site, hybrid or remote support for change, leave, hiring gaps and regulatory pressure.
Diagnostic
From £2,500
Risk Function Health Check
Focused maturity assessment with findings, regulatory gaps and prioritised remediation roadmap.
Prudential review
From £3,500
ICARA / ICAAP / ILAAP
Focused independent review of prudential framework, stress testing, governance and documentation.
Independent assurance
From £5,000
Risk function audit
Risk-function or thematic assurance, including controls, KRIs, governance, evidence and embedding.
Specialist or urgent regulatory assignments: typically from £1,200/day. Large remediation, transformation and cross-border programmes are quoted to scope. Indicative fees exclude VAT and agreed travel expenses where applicable.
Independent assurance · third line
Audit the risk function, not just the paperwork.
We independently stress-test whether your risk function is compliant, effective and genuinely embedded in business decisions. We can act as an independent third-line assurance provider where governance and independence requirements permit, or support Internal Audit with specialist risk expertise. Where we have previously designed or operated a framework, potential independence conflicts are identified and managed transparently.
Explore risk function assurance ↗
Regulatory alignment
Map framework, governance and evidence to applicable requirements and supervisory expectations.
Design & operating effectiveness
Test whether controls, KRIs, escalation and governance work in practice, not merely on paper.
Business embedding
Challenge whether risk appetite influences decisions, ownership is real and issues are escalated and closed.
Board-ready findings
Prioritised gaps, maturity assessment, practical remediation and independent assurance reporting.
Regulatory horizon · August 2026
Prepare before the rulebook becomes a deadline.
We help firms translate regulatory change into accountable implementation: impact assessment, gap analysis, policy and framework changes, data and controls, governance, testing and evidence.
Basel 3.1
Final PRA rules take effect for most Basel 3.1 requirements, with market-risk IMA following in 2028.
Implementation support →Solvency II Review
Revised Solvency II framework and EIOPA instruments bring changes across solvency, reporting, liquidity and risk management.
ORSA & Solvency support →EU AI Act
Transparency and enforcement provisions are live from August 2026; high-risk AI obligations phase in from December 2027 and August 2028.
AI governance readiness →DORA
Operational resilience, ICT risk, incident reporting, testing and third-party governance remain a core implementation and assurance focus.
Digital resilience review →Consumer Duty scope
FCA proposals would clarify scope, non-UK customer treatment, distribution-chain responsibilities and proportionality.
Assess impact →Illustrative regulatory horizon only. Timelines and applicability depend on firm type, permissions and jurisdiction. We monitor relevant FCA, PRA, EBA, EIOPA, ESMA and international developments.
Who we help
Built for regulated firms where detail matters.
Especially useful where prudential requirements, complex data flows, trading activity or rapid growth create risk-management pressure.
01
Investment firms
IFPR, ICARA, MIFIDPRU, capital and liquidity.
02
Banks & financial institutions
ICAAP, ILAAP, Basel, prudential risk and remediation.
03
Insurers
ORSA, enterprise risk, Solvency frameworks, liquidity and governance.
04
Brokers & trading firms
Liquidity, counterparty risk, reporting, controls and resilience.
05
Asset & wealth managers
Enterprise risk, governance, operational risk, controls and regulatory readiness.
06
Payments & e-money
Operational resilience, safeguarding-related risk, governance, controls and regulatory change.
07
Fintechs & scale-ups
Proportionate ERM, AI governance, risk frameworks and regulatory readiness.
08
Authorisation & remediation
Targeted frameworks, gap analysis, remediation plans and evidence for regulatory engagement.
Frequently asked questions
Clear answers before you engage us.
Scope, pricing and delivery are tailored, but the basics should not be mysterious.
What does Risk Consulting London actually cover?
Enterprise risk management, ORSA, ICARA/ICAAP/ILAAP, risk appetite, risk registers, KRIs, RCSA and controls, regulatory reporting, liquidity and capital risk, stress testing, wind-down planning, risk-function design, independent assurance, regulatory change and AI governance.
What are your typical fees?
Senior consulting starts from £900/day, interim/on-site work is typically £900–£1,250/day, Risk Function Health Checks from £2,500, focused ICARA/ICAAP/ILAAP reviews from £3,500 and independent risk-function assurance from £5,000. Urgent or specialist assignments are scoped separately.
Can you support ORSA and insurer risk frameworks?
Yes. We support ORSA, risk appetite, solvency and liquidity risk, stress and scenario analysis, risk registers, controls, governance, Board challenge and wider ERM under Solvency UK, EU Solvency II and relevant international frameworks.
Can you act as a third line of defence?
We can provide independent risk-function assurance and specialist third-line support where governance and independence requirements permit. Where we have designed or operated the framework being reviewed, self-review conflicts are identified and managed transparently.
Do you cover UK, EU and international regulation?
Yes. We support implementation and risk-framework work across applicable UK and EU regulatory regimes and selected international standards. Where a matter requires formal legal interpretation or jurisdiction-specific legal advice, we work alongside the client's legal counsel.
Can you work on-site or for a short period?
Yes. Engagements can be ad hoc, a few days, fixed-fee projects, temporary/interim cover or longer transformation work, delivered on-site, hybrid or remotely.
Cross-border capability
UK. EU. International.
We support risk and regulatory compliance under applicable UK and EU laws and regulations, together with selected international regulatory standards and local requirements for cross-border firms. Engagements are scoped to the jurisdictions, permissions and obligations that actually apply to your business.
Contact us
Send your risk query now.
Describe the issue, deadline or dashboard requirement. The form is designed to deliver the enquiry directly to info@riskconsultinglondon.co.uk, with your email set as the reply address.
End-to-end risk servicesExcel / Power BI / TableauPrudential frameworksManaged risk supportAudit & assurance
Prefer your email application?Email us directly ↗
“A risk framework is only credible when appetite, controls, data, decisions and assurance tell the same story.”
Our delivery philosophy
Need senior risk expertise without the consulting overhead?
Use us for a defined project, an urgent ad hoc requirement, or temporary on-site support on a daily-rate basis.
MONTHLY EMAIL BRIEFING
Regulatory & Risk Briefing
Selected regulatory developments and risk priorities, delivered monthly. Briefings only — no spam, sales pitches or promotional marketing emails. Unsubscribe at any time.