CASE STUDIES

Building a new business inside an established one, where the starting material was a regulatory obligation and the output was a product with its own market, team and financing. The engagement ran from market thesis to public launch, covering the commercial model and P&L, the framework and platform architecture, the financing route, the team build and the operating functions.

The engagement designed a product security strategy across more than 160 product lines, a federated risk and governance operating model, and a capital allocation mechanism tying security investment to commercial return.

A large cloud migration was scheduled to begin in five months, under risk processes built for a smaller organisation. Commissioned as a single process update, the engagement grew into an ICT risk management framework integrated with ERM, tested on live initiatives before handover.

A new programme was about to raise the volume of processed data by an order of magnitude. The engagement assessed the existing security, governance and risk capabilities. It then established risk appetite at board level and designed the security strategy, operating model and architecture.