Risk management that reacts to yesterday’s news is failed risk management. — Douglas W. Hubbard✦

Framework library / 11 systems

Risk thinking, structured for use.

A curated set of operating models for recurring risk problems. The library shares design thinking and intended outcomes while protecting employer data, proprietary logic and implementation detail.

01

Product & Project Risk Gate

A decision-focused approach for identifying and treating material risks before launch, without turning delivery into a paperwork exercise.

Product riskChange riskDecision design
02

Enterprise RCSA Operating Model

A practical operating model that connects process reality, risks, controls, actions and management decisions.

RCSAControl assuranceGovernance
03

Vendor Criticality Assessment

A tiering method that directs due diligence, monitoring and exit planning toward the third parties that matter most.

Third-party riskResilienceTiering
04

Incident-to-Control Improvement Loop

A closed-loop method for turning incidents and near misses into verified, sustainable control improvement.

Incident managementRoot causeControl improvement
05

Take 5 Risk Awareness System

A lightweight behaviour system that helps teams pause, check and speak up at the moments where small decisions create risk.

Risk cultureAwarenessFirst line
06

Operational Risk Stress Testing

A scenario-led approach for testing operational vulnerability, management response and financial resilience under severe conditions.

Stress testingScenario analysisResilience
07

Operational Loss Database & Insight System

A governed loss-data structure that turns incidents, financial impacts, recoveries and root causes into usable management insight.

Loss dataIncidentsRisk analytics
08

Risk Appetite-to-KRI Decision Engine

An automated linkage between risk appetite, KRIs, thresholds and escalation workflows that supports timely, informed risk decisions.

Risk appetiteKRIAutomation
09

Compliance & Transaction Monitoring Decisioning

A risk-based approach to decisioning and rule design across AML/CFT monitoring, fraud prevention and enhanced due diligence.

AML/CFTFraud preventionEDD
10

Startup Risk Management Toolkit

An integrated, founder-friendly toolkit covering the risk library, control library, risk register, assessments and management dashboard.

Startup riskRisk registerDashboard
11

Governance, Policy & Process Architecture

A practical system for developing policies and frameworks, strengthening SOPs and improving the processes that make governance work.

GovernancePolicyProcess improvement