Service
Risk, Regulatory and Governance
Proportionate risk control and governance.
Overview

We strengthen how organisations are governed: risk frameworks, regulatory strategy, board effectiveness and resilience. The work is proportionate and fits the jurisdictions where you operate.
Regulation is tightening, risks are more connected and boards are expected to see further ahead. Many risk functions are built for compliance reporting rather than for decisions. We design risk and governance systems in proportion to the business. They give boards real visibility and prepare organisations for crises before they happen. We work across UAE (United Arab Emirates), UK, Indian and wider GCC (Gulf Cooperation Council) frameworks.
Questions we help answer
- 01Does our board see the risks it needs to see?
- 02Are we ready for the next regulatory change, and are we dealing with the regulator well?
- 03Could we keep operating through a major disruption?
Capabilities
What this service covers.
Open any capability to see what it covers.
Internal audit and compliance advisory
We co-source internal audit, design compliance programmes and test controls. Boards get assurance without extra bureaucracy.ERM (enterprise risk management) frameworks
We set risk appetite, a risk taxonomy, key risk indicators and reporting. Risk then becomes part of strategic and operating decisions.Regulatory strategy and regulator engagement
We track coming regulation, map licensing routes and build compliance roadmaps. We also help you deal constructively with regulators.Corporate governance and board advisory
We design board structures, committee charters and delegations of authority, and run board evaluations. This covers listed, family and state-owned companies.Financial and commodity risk management
We build market, credit, liquidity and commodity risk frameworks. We also set hedging policies and governance for treasury risk.Operational resilience and business continuity
We identify important business services, set impact tolerances, and write and test continuity plans. Critical operations keep running.Crisis management
We write crisis playbooks, run simulations and support leaders before, during and after a major incident.Geopolitical risk advisory
We assess geopolitical, trade and sanctions risks using scenarios. We then show what they mean for strategy, supply chains and investment.
Outcomes
What clients get from the work.
Where we see this most
Available to clients in every industry we work in.
Often combined with
Related
Related articles and illustrative work.

Emiratisation targets in 2026: what the rules require
Illustrative engagementTaking AI from pilot to production in claims
An insurer has run a dozen AI pilots in claims. None has reached production, and the business is losing patience.
Read the scenarioIllustrative engagementGovernance and portfolio focus for a family group
A family group owns fifteen businesses across several sectors. Capital is spread thin, and the next generation is joining without clear roles.
Read the scenarioStart a conversation about Risk, Regulatory and Governance.
Tell us what you are working on and what you need to decide.