Compliance and risk.
Considered from every angle.

Bring relevant obligations into view and consider how they are reflected in day-to-day operations. A review can help organise the questions, processes and responsibilities that need attention.

Focus areas include:

• The business activities and relationships within the agreed scope.
• Existing compliance responsibilities and internal reporting.
• Gaps between documented requirements and operational practice.
• Priorities for further review or specialist input.

Policies should help people understand what is expected of them. Review their purpose, language and consistency, together with how they are maintained and used.

Focus areas include:

• Policy ownership, approval and review arrangements.
• Overlapping, inconsistent or unclear provisions.
• Practical responsibilities and escalation routes.
• Whether policy guidance reflects current ways of working.

Create a structured view of potential exposure and the controls already in place. Consider likelihood, impact and uncertainty in the context of the decisions your business needs to make.

Focus areas include:

• Defining the activity or decision being assessed.
• Identifying relevant risks and their possible consequences.
• Examining existing controls and remaining exposure.
• Recording priorities, action owners and review points.

Consider how decisions are made, recorded and overseen. Clear governance helps an organisation understand who is responsible, when matters should be escalated and how actions are followed through.

Focus areas include:

• Roles, responsibilities and decision-making authority.
• Approval processes and internal reporting.
• Records of significant decisions and actions.
• Oversight arrangements as the organisation changes.

Examine the points where unclear expectations or inconsistent processes can lead to disagreement. The emphasis is on earlier identification, clearer records and appropriate escalation.

Focus areas include:

• Responsibilities and expectations in commercial relationships.
• Processes for approvals, changes and issue reporting.
• Internal handling of concerns and complaints.
• Communication and documentation around emerging disagreements.