Mandate
Ausgewählte Mandate
Eine repräsentative Auswahl aus den Bereichen Risiko, Compliance, Resilienz und Third Party Risk Management. Kundennamen werden vereinbarungsgemäss nicht genannt.
Nine selected engagements. Four regulated financial institutions. Two insurance groups. Three multi-year relationships.
Eine für die Veröffentlichung freigegebene Auswahl, nicht das gesamte Portfolio. Namentliche Referenzen und detaillierte Fallstudien sind auf Anfrage in der Shortlist-Phase verfügbar.
Showing 9 of 9 published engagements.
Swiss private banking and asset management group
Financial services · Multi-year relationship
Integrated Risk Management across operational risk and resilience. Risk event management including automated financial impact processing to the accounting system, the common control and control objective model, and entity-based access across a legal entity and business unit structure spanning multiple jurisdictions. A concurrent business continuity implementation runs alongside, supported by a dedicated account manager for instance performance and platform health.
- Operational risk
- Risk events and loss management
- Internal control and control testing
- Entity model and access design
- Business continuity and IT service continuity
Liechtenstein-headquartered private banking and asset management group
Financial services · Multi-year relationship
A continuing engagement now in its second year. IT compliance delivered on ServiceNow IRM, covering policy management and the control library. Business continuity management is in delivery, with operational risk and third-party risk management on the agreed roadmap. A multi-year relationship across successive modules on a single platform and entity model.
- Policy and compliance
- Internal control and control testing
- Business continuity and IT service continuity
- Operational risk
Major Swiss cantonal bank
Financial services
End-to-end operational risk implementation covering the risk register and assessment framework, compliance management, policy management and risk event reporting. Delivered as a single integrated programme rather than a sequence of modules.
- Operational risk
- Risk events and loss management
- Policy and compliance
Regional payments and financial technology group
Financial services · Multi-year relationship
Full Integrated Risk Management implementation end to end: risk management, risk events, internal audit, policy and compliance, third-party risk and business continuity. AI-supported capabilities are on the agreed roadmap.
- Operational risk
- Risk events and loss management
- Internal audit
- Policy and compliance
- Third-party risk and DORA
- Business continuity and IT service continuity
- AI and data-driven control assurance
Global insurance group
Insurance
End-to-end Internal Control System implementation, including an intelligence layer that collects control supporting data into a data platform, applies AI to compare that evidence against control guidance, and writes an adjusted compliance score back into ServiceNow. Control effectiveness is derived from evidence rather than from periodic attestation.
- Internal control and control testing
- AI and data-driven control assurance
European industrial insurance group
Insurance
Third-party risk management implementation delivered for DORA compliance, covering the ICT third-party register, contractual requirements and the concentration and criticality assessment the regulation expects.
- Third-party risk and DORA
Global brewing and beverages group
Industry
Enterprise-wide Integrated Risk Management implementation across risk management and policy and compliance, covering the full group.
- Operational risk
- Policy and compliance
Global industrial automation manufacturer, European division
Industry
Integrated Risk Management implementation covering the entity model and hierarchy, risk identification, the risk register, multiple risk assessment methodologies, and policy and control management on a common control model. Delivered together with the risk advisory work that preceded it: definition of the risk framework and its content, and design of the control library.
- Operational risk
- Policy and compliance
- Internal control and control testing
- Entity model and access design
- Risk framework and control library advisory
Global industrial technology group
Industry
IT Service Continuity Management implementation, covering service continuity planning and recovery capability for critical IT services.
- Business continuity and IT service continuity
| Capability | Engagements |
|---|---|
| Operational risk | 6 |
| Risk events and loss management | 3 |
| Policy and compliance | 5 |
| Internal control and control testing | 4 |
| Third-party risk and DORA | 2 |
| Business continuity and IT service continuity | 4 |
| Internal audit | 1 |
| Entity model and access design | 2 |
| Risk framework and control library advisory | 1 |
| AI and data-driven control assurance | 2 |
Three multi-year, multi-module relationships across financial services, insurance, industry.