Guide · sent by email
What a business-wide risk assessment actually involves.
For a compliance officer about to commission, build or defend one.
What is in it
The same four dimensions, in every regime.
A business-wide risk assessment looks at the risks a business carries because of what it sells, who it sells to, how money moves and where it moves. You rate each one, set the controls against it, then rate what is left.
- The four dimensions every regime asks you to weigh, and why they are the same four
- Rating inherent risk in named levels rather than bare numbers
- The difference between a control that exists and one that works
- What residual risk is for, and what to do with what is left
- The evidence trail that lets you defend a rating two years later
Roughly 767 words. Every regulatory statement carries the section it rests on, so you can read the provision rather than take our word for it:
Get the guide
Where should we send it?
It arrives as one email. Asking for the guide on its own does not add you to any list. What we do with this.
Not legal advice. Northward is a compliance practice, not a law firm. The guide sets out what the published rules say and how they are applied in practice at different risk appetites. What that means for your business is a conversation. Disclaimer.
Rather just ask?
If the question is specific to your business, a conversation gets further than a guide.