← Back to consulting

PROFESSIONAL SERVICE

Enterprise risk program design

Build a consistent way to assess, own, escalate, and report risk.

What this helps you do

  • Risk taxonomy and assessment method
  • Risk appetite and escalation criteria
  • Ownership and treatment workflows
  • Executive reporting and governance cadence
Scoped project fee$200/hour planning rate; final scope and fee agreed in a proposal.
Discuss Scope

We confirm scope, deliverables, fee, and timing in writing before work begins.

Explore sample deliverables →

Sample deliverables

Executive report: six open risks, two above appetite, two overdue actions and all risks assigned to owners. Fictional example. Expand preview

Six open risks, appetite breaches, exposure trend and the decisions leadership needs to make.

Fictional examples. Actual deliverables and criteria follow your agreed scope.

Executive report

Fictional executive risk report

Six open risks, appetite breaches, exposure trend and the decisions leadership needs to make.

Engagement details

What is included

Build a consistent way to assess, own, escalate, and report risk.

  • Risk taxonomy and assessment method
  • Risk appetite and escalation criteria
  • Ownership and treatment workflows
  • Executive reporting and governance cadence

How engagement works

Review the current approach, agree a target operating model, design the core artifacts, and hand off to your team. Risk domains, entities, workshops, and revisions are agreed in the proposal.

Pricing

Scoped project fee, using $200/hour as the planning rate. Estimated effort, deliverables, and the final fee are agreed before work starts. Enterprise-wide coverage and implementation are explicitly scoped.

Scope and responsibilities

We confirm deliverables, responsibilities, timing, dependencies, and fees in writing before work begins. Any scope changes or additional work require prior agreement. Delivery is remote unless separately agreed.

Independent audits, certification, legal advice, software subscriptions, technical testing, and technical remediation are excluded unless expressly included in the proposal.