Risk management, governance & resilience

Assess material risks, clarify decisions and put improvements into practice. Each mandate has a defined scope, clear responsibilities and useful deliverables.

Downtown Montréal seen from Mount Royal

Our areas of expertise

Enterprise Risk & Governance

Align enterprise risk management, risk appetite and oversight with business decisions. We assess gaps and help put agreed improvements into practice.

Enterprise Risk & Governance

What support may cover

Depending on the mandate, support may cover:

  • ERM frameworks and integration of financial and non-financial risks.
  • Risk appetite, limits, decision criteria and escalation.
  • Accountabilities across business, risk and oversight teams.
  • Controls, risk information and board or management reporting.
  • Implementation of agreed governance and risk improvements.

Operational Resilience

Identify critical operations and disruption risks. Clarify accountability and prioritize resilience improvements.

Operational Resilience

What support may cover

Depending on the mandate, support may cover:

  • Critical operations, services and key operational dependencies.
  • Resilience governance, risk ownership and escalation.
  • Impact tolerances, disruption scenarios and testing approaches.
  • Links between operational risk, business continuity and third-party risk.
  • Remediation priorities and evidence of implementation.

Technical testing and recovery activities are scoped with internal teams or specialist providers where needed.

Climate Risk & Resilience

Assess climate risk exposures, interpret scenarios and translate findings into decisions for assets, operations and investments.

Climate Risk & Resilience

What support may cover

Depending on the mandate, support may cover:

  • Physical and transition risk assessments, including climate risk and vulnerability assessments (CRVAs) as relevant.
  • Climate scenarios, stress testing and review of results.
  • Challenge of assumptions and third-party climate analytics.
  • Integration into enterprise risk management, risk appetite and reporting.
  • Adaptation options for assets, operations and supply chains.

Specialist climate data, modelling and engineering support is scoped separately when needed.

Risk transformation and regulatory readiness

Turn assessments into working frameworks, clearer ownership and useful reporting. For regulated firms, we can assess readiness against relevant OSFI guidance, including B-15 where applicable, or AMF expectations.

When clients bring us in

Making a strategic decision

The situation

You are entering a new market, expanding or changing your business model. What could undermine the plan, and which safeguards are needed?

Approach, deliverables and outcome

How we help

For a defined initiative, we challenge assumptions, prioritize material risks and clarify appetite, ownership and escalation. We help embed risk considerations in planning, approvals and reporting.

Typical deliverables

  • A prioritized assessment of risks to the initiative.
  • Practical decision criteria and clear responsibilities.
  • Reporting indicators and an implementation roadmap with review points.

The intended outcome

Leadership can decide how to proceed, under what conditions and with which safeguards. Teams know which changes in exposure require escalation.

Discuss your strategic risk priorities

Building climate resilience

The situation

Extreme weather threatens sites, assets or suppliers. Where are you vulnerable over relevant time horizons, and which responses merit priority?

Approach, deliverables and outcome

How we help

For agreed sites and dependencies, we assess climate exposure, vulnerability and business consequences. We interpret the findings and prioritize adaptation options, with climate, engineering or insurance specialists where needed.

Typical deliverables

  • An exposure and vulnerability assessment for the agreed scope.
  • Prioritized risks, information gaps and resilience options.
  • A phased action plan with owners and reassessment points.

The intended outcome

Leadership can prioritize action and further analysis with key uncertainties explicit. Findings inform operational, investment and supply-chain decisions.

Discuss your climate resilience priorities

Becoming federally regulated

The situation

You are proposing a federally regulated bank or trust and loan company, or considering credit union continuance. What risk and governance arrangements must be ready?

Approach, deliverables and outcome

How we help

We assess prudential risk and governance readiness, challenge business-plan assumptions and prioritize gaps. We support frameworks, implementation and evidence, coordinating with legal and technical advisers. For eligible applicants, work may support OSFI’s streamlined approvals process.

Typical deliverables

  • A readiness assessment with material gaps and dependencies.
  • Risk and governance arrangements suited to the proposed institution.
  • An implementation roadmap, readiness reporting and supporting evidence.

The intended outcome

Leadership understands the work, resources and sequencing needed to proceed. The institution strengthens capabilities for federal entry and ongoing supervision.

Discuss your federal entry or continuance plans

Ways we work

Assess and prioritize

A scoped diagnostic identifies material issues, decision points and priorities.

Design and implement

Implement agreed improvements with owners and milestones.

Review and challenge

Scoped review, challenge or advice at key decision points, with independence and potential conflicts addressed before engagement.

Let’s define the right scope

An initial discussion helps clarify your decision or challenge, the expertise required and what a useful engagement would deliver.

Discuss a mandate