Scroll Top
Risk Advisory
GDFM Non-Financial Risk Practice provides clients with a new or enhanced level of risk capability by integrating risk management approaches and deep industry expertise. This allows our clients to meet their business requirements and ensure their businesses remain resilient and cost-effective.

Risk Advisory Services

RISK & CONTROL FRAMEWORK DESING
OPERATIONAL RESILIENCE
THIRD PARTY RISK MANAGEMENT
CYBER RESILIENCE

GOVERNANCE

REGULATORY IMPACT ASSESSMENT & HEALTH CHECK

Case Studies

Target Operating Model Design, Implementation and Execution:

GDFM supported the client with the design and implementation of a third-party risk management policy (TPRM), framework and risk assessment approach across EMEA (main sites included UK, Belgium, France and Germany). The TPRM policy was created in accordance with EBA guidelines but also captured local considerations from member states/ regulators. The GDFM project team closed internal and external audit points, established the new operating model, and trained client staff to deliver the requirements. The implemented framework embedded processes for; outsourcing determination, service criticality assessment, service provider risk assessment, cyclical reviews, exit strategies, onsite reviews and service delivery management approaches.

Front-to-Back Process and Key Controls Mapping Global Operations:

GDFM supported the client in defining and building its Operations service catalogue and identifying all underlying processes. The scope of work was Global Operations covering all post-trade activities, i.e. settlement, transaction reporting, and confirmations. The GDFM project team identified the underlying business processes and catalogued these, initiated business process mapping across all processes (covering the activity lifecycle, owner/ people, and systems), and identified and mapped Key controls and control owner. Chief client drivers were process improvement/ consistency and transparency. The client managed the technology implementation of the process maps, i.e. migrating the process maps to B-Control and B-Check.