Operational Resilience, Built to Last
Independent risk, assurance and resilience advisory for regulated firms navigating DORA and beyond.
What We Offer
From fixed-scope DORA readiness assessments to ongoing second-line oversight, we help regulated firms build resilience that stands up to scrutiny — without the big-4 overhead.
-
A fixed-scope, rapid assessment of your readiness against DORA’s requirements — gap analysis, prioritised remediation plan, and a clear path to compliance.
-
Resilience frameworks, scenario testing, and impact tolerance setting — built to hold up under both regulatory review and real disruption.
-
Independent second-line review and control assurance — objective reporting that gives boards and regulators confidence in how risk is actually managed.
-
Supplier risk frameworks, concentration risk, contractual resilience, and cloud readiness assessments for regulated workloads — tailored to your scope.
-
A fixed-scope readiness assessment against the EU AI Act — system inventory, risk-tier classification, and a prioritised remediation roadmap ahead of enforcement deadlines.
Our Process
Discovery Call
A free, no-obligation call to understand your regulatory position, timeline, and priorities — before anything is scoped or committed.
Fixed-Scope Engagement
Every engagement is scoped and priced upfront in a written statement of work, so you know exactly what you’re getting and what it costs — no open-ended billing.
Independent Assessment
Document review, stakeholder interviews, and a structured gap assessment against the relevant framework — delivered directly by the person doing the work, not a delegated-down team.
Prioritised Roadmap
A clear, board-ready roadmap and executive readout — practical next steps ranked by risk and effort, not a generic compliance checklist.
We start with where you actually are, not a template
No two firms come into this at the same point. Some have a resilience programme that’s mostly built and needs a second pair of eyes; others are starting close to zero. The discovery call exists to find out which, honestly, before any scope is fixed — not to sell a standard package regardless of what’s actually needed.
You get direct access to the person doing the work
There’s no account team, no partner who shows up for the kickoff and disappears until the invoice, no work quietly handed down to someone more junior. Every assessment, every workshop, every finding in the report is mine — twenty years on the second-line side of institutions like the ones I now work with, applied directly to your engagement, not managed at a distance.
Fixed scope, no surprises
Every engagement is quoted as a fixed fee before it starts, scoped from one of five defined service lines rather than open-ended time and materials. If something more serious turns up mid-engagement than the standard scope anticipated, it gets flagged clearly in the findings — what happens next is your call, not an automatic expansion of the bill.
Let’s Work Together
If you're interested in working with us, complete the form with a few details about your project. We'll review your message and get back to you within 48 hours.