Regulatory Change Delivery
Assess the operational implications of new requirements and coordinate implementation.
Risk & Compliance
Risk Transformation
Connect risk frameworks with the decisions and controls used across the business.
Overview
What this means for your business.
An effective risk operating model connects appetite, governance, controls, information and accountability with business decisions.
Capmark helps institutions assess and improve risk frameworks, committee structures, decision rights, control ownership and reporting. We work with first- and second-line teams to align responsibilities and ways of working.
Technology and GRC tooling are considered alongside the operating model, supporting risk assessment, issue management, control testing and reporting.
What we do
The expertise we bring.
We rebuild the cascade from board risk appetite to the limits, indicators and escalation paths used day to day. Each limit has an owner, breach route and link back to the appetite statement it tests.
We redesign risk governance so each committee has clear decisions, inputs, escalation routes and accountability. Accountability maps are built into the design, so ownership on paper matches decision-making in practice.
We rebuild the control library at a testable level: what each control does, who owns it, what evidence it produces and how it is tested. Where the uplift closes findings, closure evidence is built into delivery from the start.
We build board and committee reporting on defined data with lineage back to source. Reporting is designed so the number in the pack matches the number in the system, and the board can trace the basis for the view it receives.
We design the risk operating model first, then select, configure or improve the GRC platform around it. Risk assessments, issue management, control testing and reporting are moved out of spreadsheets and into workflows that produce evidence as they run.
What to expect
A team shaped around the work.
A Senior Practitioner leads from day one. The first weeks map how risk actually runs today: where accountabilities sit, what committees decide, which controls are evidenced and where reporting breaks.
We then agree the target operating model with the CRO and deliver it into processes, platforms, governance forums and role definitions alongside first and second line.
Engagements range from a focused framework discovery to full risk operating-model delivery.
Engagements run from a six-week framework diagnostic to full operating-model delivery.
01
Assess
Establish the current state, the constraints, the risks and the value at stake.
02
Define
Shape the target model and the business case with the executives who own the outcome.
03
Mobilise
Stand up the team, the plan and the governance around the outcome.
04
Implement
Design, build and test the change, with the business alongside.
05
Sustain
Cutover, hypercare and handover, so the business runs it under its own control.
The same five stages on every engagement, led by senior practitioners end to end. How we work
Client result
Relevant client experience.
Banking · Operating Model
One client-onboarding and credit operating model across 38 countries
A Global Corporate & Investment Bank · Client Onboarding & Credit Operating Model
We helped implement a single global client-onboarding and credit operating model across 38 countries, recalibrating 110 roles, rationalising technology and strengthening the process and control model across wholesale banking.
- 38
- Countries on one operating model
- 110
- Roles recalibrated
- £50m
- Benefits-realisation target governed
Read the case study
Insights
Related perspectives.
Get in touch
Discuss Risk Transformation.
Tell us what you are working through and the expertise you need.