Service 08 of 11

Governance & Risk Management Consulting

Structures and frameworks that help your board make good decisions. We review governance arrangements and build enterprise risk management that people actually use.

Book a 20-minute call How it works

Covers: Boards, committees and risk frameworks
You get: A risk register and risk appetite statement
Format: Reviews and facilitated workshops
Outcome: Clearer accountability and better decisions

Overview

What is governance and risk management?

Governance is the system of structures, roles and processes through which an organisation is directed and controlled. Risk management is how it identifies, assesses and responds to the risks that could affect its objectives.

Together they help boards make better decisions, allocate resources wisely and avoid surprises. A working risk framework also gives internal audit a clear basis for its risk-based plan.

What it stands for

Clear accountabilityEveryone knows who decides, who advises and who acts.

Informed decisionsBoards see the right information at the right time.

Risk within appetiteRisks taken deliberately, within limits the board has set.

Who it’s for

When decision-making and risk need structure

Clear governance and a working risk framework help boards focus on what matters, and give internal audit something solid to plan around.

Boards reviewing their structures and committees
Organisations without a working risk framework
Leadership teams refreshing their risk register
Organisations preparing for growth, investment or regulation

How it works

Practical governance and risk frameworks

Stage 1
Review

We review current structures, roles, committee arrangements and decision-making.
Stage 2
Workshop

We facilitate sessions with leadership to identify and rate your principal risks.
Stage 3
Build

We develop the risk framework, register, appetite statement and reporting.
Stage 4
Embed

We train risk owners and set a regular review rhythm for the board.

Why it matters

Clear governance helps boards spend their time on the decisions that matter.

What you receive

Governance that supports good decisions

Every deliverable is tailored to your organisation and written for the people who will use it.

Governance review

Findings on structures and decision-making.

Terms of reference

For the board and its committees.

Risk management framework

Policy, roles and process.

Risk register

Principal risks, ratings and owners.

Risk appetite statement

How much risk the board will accept.

Board risk reporting

A clear, regular format.

Benefits

The value we add

Better decisions

Boards focus on strategy and the risks that matter.

Clear roles

Defined responsibilities for the board, committees and management.

Fewer surprises

Emerging risks identified and escalated early.

Efficient meetings

Better papers and clearer terms of reference.

Stakeholder confidence

Regulators, funders and investors see strong oversight.

A foundation for assurance

Internal audit can plan around a reliable risk register.

Senior-led

Delivered by chartered and certified professionals (ACA, ACCA, CIA).

Fixed fee

Scope and price agreed in writing before work starts.

Standards-aligned

Methodology aligned to the IIA Global Internal Audit Standards.

Frequently asked questions

Governance & Risk Management: your questions

How much does a governance review cost?

It depends on the scope, from a single risk workshop to a full governance review. We agree a fixed fee in advance.

What is a risk appetite statement?

A statement of how much risk the board is willing to accept in pursuit of its objectives, used to guide decisions and escalation.

How is this different from internal audit?

Risk management is how the organisation identifies and manages its risks. Internal audit gives independent assurance on whether that, and your controls, work.

Can you facilitate our risk workshop?

Yes. Facilitated workshops with leadership are usually the fastest way to agree principal risks.

Do you work with not-for-profit boards?

Yes. We work with private, public and not-for-profit organisations of all sizes.

Page last updated 2 November 2026

Internal Audit Function Set-Up Charter, methodology and risk-based plan. View service → Audit Committee & Internal Audit Training Effectiveness reviews and training. View service → Policies, Procedures & SOPs Review and drafting of usable documentation. View service →

More insights →

Governance

What does an independent audit committee member do?

The role of an independent audit committee member explained: independence, responsibilities through the year, skills, terms of appointment, and how to recruit the right person.

7 July 2026 · 14 min read

Controls

Delegation of authority matrix: what it is and how to write one

How to write a delegation of authority matrix that works: the legal basis for delegating, what to cover, how to set limits, segregation of duties and how to keep it current.

24 March 2026 · 11 min read

Controls

Provision 29 material controls: the declaration explained

Provision 29 of the UK Corporate Governance Code 2024 asks boards to declare whether material controls were effective. What it requires, who it applies to and how to prepare.

3 February 2026 · 12 min read

Want stronger governance and risk?

Book a free 20-minute call to talk through your situation.

Book a 20-minute call