Our highly experienced team of risk advisors provide our clients with new insight into the nature and significance of risks and their controls, and a refreshingly different “less is better” approach.
By focusing on the things that matter most, risk management supports decision making, encourages forward thinking, and as a result better business outcomes while meeting governance and regulatory requirements for effective enterprise risk management.
In delivering our risk management services we work collaboratively with our clients, individually and in teams, to capture the essence of material risks, understand drivers and ensure appropriate perspective on and justification of their significance for action.
Enterprise Risk Management
When working with clients, we often find they have an ill-defined, cumbersome and ineffective internal control model. At one end of the scale there may be excessive procedures and processes that create confusion and are difficult to comply with. At the other end we find there is little to no control imposed on employees which compromises outcomes.
Over many client engagements, we have learnt that a “good” control model is one that balances leadership and direction with standards, procedures and process. Management should set standards and expectations around required outcomes and your people should be empowered to do what you engaged them to do, to achieve those outcomes and only be told how to do it by exception.
Our approach starts by working with your team on the fundamentals – what is it that your organisation must deliver to be successful, what are your critical activities, what outcomes must your people achieve and where do we need to tell them how to do something. From here, we advise on an appropriate internal control model for your organisation and facilitate development of critical controls to address gaps. Our aim is to simplify control and in doing so, improve efficiency and effectiveness.
Internal Control Framework
Internal Control Development
Compliance Framework
Internal Control Development
There are basically three lines of defence for
providing organisational assurance and these
should be integrated for efficiency and effective
business outcomes:
MYR works with our clients to review the adequacy of
the assurance framework, how the layers of assurance
are applied and to ensure appropriate review is
conducted having regard to the significance of the
activity and risk and maturity of the control
environment.
We work at all levels of the organisation to gain insight into cultural and strategic issues affecting service delivery and key risks. We help you structure your services for better marketing, improved margin and more effective delivery of outcomes in line with your customer’s expectations and experience.
We work with a range of professionals who self-deliver services and contractors who manage risks on the professional supply chain including:
Contractors
How to control design and other professional risks delivered by the consultant supply chain.
Consultants
How to control self delivered design, advice and management services risk.
Lawyers
How to control practice and matter management risk in the provision of legal services.
With management focused on day to day activities, BCM is often seen as a “nice to have” capability. The occurrence of an extreme event, such as cyber, natural disaster, major safety incident or equipment failure, has the capacity to destroy vulnerable businesses. When working with clients we review extreme risk, existing capabilities and practices to advise on how our clients might build a more resilient culture and capability going forward.
We assist clients in developing the overall BCM framework, developing client capability in managing a crisis (through plans, training and drills), and developing business continuity plans for restoring organisational activities as safely and efficiently as possible.