ERM Framework, Risk Register and KRI Library

Regulatory and standards basis

This engagement is performed against the following instruments. Each is cited in the deliverable at the point it is relied on.

• COSO Enterprise Risk Management — Integrating with Strategy and Performance
• ISO 31000:2018 Risk Management Guidelines
• Nigerian Code of Corporate Governance 2018

Who this is for

• Boards establishing a risk function
• Firms with a governance examination finding

What you receive

1. 01ERM framework and risk taxonomy
2. 02Board risk appetite statement with quantified tolerances
3. 03Populated risk register with owners and controls
4. 04KRI library with thresholds and escalation triggers

How the engagement runs

1. Phase 1

   Intake

   You complete a structured intake form and upload supporting documents. Autosaved, so it can be finished across several sittings.

2. Phase 2

   Evidence review

   We review what you have provided and raise a document request list for anything material that is missing. We do not guess at gaps.

3. Phase 3

   Analysis and drafting

   Your documents and answers are assessed against the applicable control universe. Findings are recorded with an evidence reference or explicitly flagged as an assumption.

4. Phase 4

   Quality review

   A named reviewer works through every finding and section, and a partner approves. Their name and credentials appear on the report.

5. Phase 5

   Delivery

   The deliverable is released in the portal within 5 business days of payment. Two revision rounds are included.

Questions