Internal Audit, Risk, Business & Technology Consulting

Risk and Compliance ServicesHelping clients manage business and regulatory risks

Protiviti 1

General background

Protiviti (www.protiviti.com) is a global

consulting firm that helps companies

solve problems in finance, technology,

operations, governance, risk, regulatory

compliance and internal audit. Through

our network of more than 70 offices in

over 20 countries, we have served over

30 percent of the FTSE 100, 60 percent of

FORTUNE® 1000 and 35 percent Global

500 companies.

Introduction

At its core, Protiviti is a client-centric, relationship-

based organisation. This approach has helped us

to achieve success with a variety of clients across a

broad range of industries.

We serve as trusted advisors to our clients,

helping them manage their critical risks through

a combination of people, process and technology

transformation. We enable our clients to achieve

better control and to be more effective and efficient

in navigating risks, thus taking advantage of the

opportunities that doing so better presents.

Primarily focused on services aligned with the

needs of financial services clients, our UK Risk &

Compliance Solution team provide a number of

offerings across the risk and regulatory compliance

market place. With our risk management and

regulatory consulting heritage, we have gained

unique perspectives on the challenges faced by our

clients.

of FORTUNE® 1000

60%of the FTSE 100

30%of Global 500 companies

35%Through our network of more

than 70 offices in over 20

countries, we have served over...

Protiviti 2

We use these perspectives to not only solve

regulatory, risk and compliance problems, but also to

help identify solutions that are practical and can be

readily implemented. We and our clients recognise

that the information required for effective risk

management also provides powerful insights about

business that can drive enhanced performance.

Reasons why clients select Protiviti

Expertise – We are good at what we do, but recognise

that true specialists do not do everything – we

identify the experts who understand the unique

and specific challenges your organisation faces and

assign them to your Protiviti team. Furthermore,

we have the unique capability of accessing

additional resources and skills through Robert Half

International (RHI) the world’s first and largest

specialised staffing firm.

Stability – We have the financial and management

stability that comes from our position as a wholly

owned subsidiary of RHI. RHI is a publicly held

company (NYSE: RHI) and a member of the S&P 500

index.

Proven capabilities – From decades of experience,

our teams have the sophisticated methodologies,

specialised tools and hard-earned industry

knowledge required to solve your most complex

problems.

Global – We have offices across the globe, but we

function as one seamless global organisation, not a

network of partner firms. Our clients can count on

us to deploy closely coordinated teams across the

various countries where they do business. With more

than 70 offices on five continents, combined with the

tremendous worldwide staffing resources of RHI, we

have the needed agility to assemble a team of experts

to meet your urgent consulting needs.

We are consistently told by our clients

that the way in which we interact with

them is unique among our competitors.

Performance – As part of our core values, Protiviti

commits to maintaining specific promises. We

promise every client that we will listen, provide the

right talent, collaborate and build relationships,

deliver value with excellence and openly share

leading practices. We are consistently told by our

clients that the way in which we interact with them

is unique among our competitors. We partner closely

with them and provide the continued attention of our

most senior resources as we work together to achieve

their objectives. We regularly receive feedback from

our clients and score 8.7/10 on average in our client

value management surveys.

Protiviti 3

Powerful insights

The risks of operating in global financial markets

have never been more apparent. Financial product

innovation drove opportunity, but the complexity

of these products and the assumptions of many

management teams obscured the risks many

organisations were taking. As a result, the accuracy

of financial models for decision-making and financial

risk measurement has never been more important.

With an ever evolving and increasingly more complex

regulatory environment, meeting business goals has

never been more difficult.

Organisations take pride in their hard won strong

reputations. The financial crisis has brought

into question the reputation of many companies

with questions raised over their ethics, culture or

leadership. Events that may put at risk organisational

brand strength or consumer loyalty are considered

critical so having processes, controls and a

cultural environment in place that seek to manage

an organisation’s risk profile and protect their

reputation is critical.

Operational risks are taken regularly by organisations

and are viewed as a normal cost of doing business.

The key is to manage these risks effectively

within a tolerable range of performance and avoid

the rare but potentially catastrophic headline-

grabbing situations that can threaten organisational

existence. Operational risks must also be managed

in an efficient and increasingly integrated manner,

reflecting the growing stakeholder and regulatory

demands for additional assurance processes.

Our Risk Management and Regulatory Compliance

consultants help CEOs, CROs, CFOs, COOs and

Boards of directors assess, measure, improve and

manage their regulatory strategies, risk management

capabilities and governance oversight arrangements.

The key is to manage these risks

effectively within a tolerable range of

performance and avoid the rare but

potentially catastrophic headline-

grabbing situations that can threaten

organisational existence.

Protiviti 4

Services overview

Our Risk & Compliance Solution, one of Protiviti’s

seven service lines, focuses on assisting clients

with their risk management and regulatory

compliance business issues. The core competencies

of our solution include deep regulatory experience

and expertise including programme and project

management around managing regulatory driven

change; policy and organisational structure design;

governance and oversight design and assessment;

and risk management. Highlighted below are seven

examples of some of the areas where Protiviti

is currently helping clients in the Risk and

Compliance space.

Managing regulatory risk

• Regulatory infrastructure assessment, design

and implementation

• Regulatory issues covering areas such as MIFID II,

SMR, MAR, CASS

• Conduct risk assessment

• Enforcement action advisory services

• Compliance function co-sourcing/outsourcing

• Target operating model design and

implementation for compliance departments

• Regulatory compliance audits

• Project/programme management

Protiviti 5

Governance and oversight

GOVERNANCE REVIEWS

• Board effectiveness evaluations

• Senior management responsibilities

• Role of non-executive directors

• Board and senior management training

• Significant influence functions

• Facilitation of risk and control self-assessments

• Optimisation of control functions

OVERSIGHT FUNCTION DESIGN AND SUPPORT

• Review and design “Three lines of defence”

• Control function operating model design

• Benchmarking against best practice

• Integrated assurance design and implementation

Responding to regulatory change and review

REGULATORY PROJECTS

• Gap analysis/impact assessments

• Detailed articulation of business requirements

• Implementation plans

• Post implementation reviews

• Independent verification

• Past business reviews

SUPERVISORY VISITS AND THEMATIC RISK

ASSESSMENT

• Response to information requests

• Pre visit preparation

• Mock interviews

• Management briefing packs

• On site project management

• Closure of RMP action points

• Section 166 reviews Managing enterprise risk

• Design governance frameworks and advise on

board committee structures

• Enterprise risk assessments

• Risk assessment process design and

implementation

• Risk reporting reviews

• Issue management and escalation processes

• Enterprise risk management audits

• Risk culture assessments

Protiviti 6

Managing operational risk

• Design/implementation of operational risk

programmes

• Design of executive reporting evaluations

(e.g. KPIs, KRIs)

• Risk control self-assessment and loss event support

• Operational risk model governance, development

and validation

• Convergence assessments, design and

implementation (ORM, ERM and credit risk)

• Risk technology software selection and the

management of implementation programmes

Managing financial crime

• Anti-money laundering (AML)

• Anti-bribery and corruption (ABC)

• Financial crime risk assessment programme

design and implementation

• End to end health-checks and benchmarking

exercises

• Financial crime policy development and roll out

• Know your customer (KYC) remediation process

• Counter terrorist finance (CTF)

• Sanctions compliance

• Look back reviews

• Transaction monitoring system design and

optimisation

• Programme management for complex

multi-location projects

Risk analytics & model risk

• Credit, market, operational risk model

validation, development, audit

• Capital management: regulatory, economic,

risk appetite

• Enterprise risk management: stress testing,

scenario analysis, capital adequacy

• Financial crime analytics: anti money

laundering, conduct risk

• Model risk management & governance

• Strategic decision support: capital planning,

risk diversification, portfolio analysis, asset

liability management

• Pricing and valuation models: equity,

commodity, derivatives, securitisations

Portfolio and lender due diligence

• Objective and independent due diligence &

collateral monitoring services

• Credit and operational risk focus across assets,

processes, reporting capabilities and quality of data

• Experience across industries and asset classes

• Custom reporting on policies, procedures,

processes, systems, etc.

• Support structuring and/or monitoring proposed

or existing facilities

• Experienced professionals across countries and

continents

• Framework to address questions and concerns,

allowing focus on sound business decisions

BERNADINE REESE

Managing Director

+44 207 024 7589

bernadine.reese@protiviti.co.uk

MATT TAYLOR

Managing Director

+44 207 024 7517

matt.taylor@protiviti.co.uk

PETER RICHARDSON

Managing Director

+44 207 024 7527

peter.richardson@protiviti.co.uk

ANDY CLINTON

Managing Director

+44 20 7024 7570

andrew.clinton@protiviti.co.uk

Protiviti (www.protiviti.com) is a global consulting firm that helps companies solve problems in finance, technology, operations, governance, risk and internal audit, and has served more than 60 percent of Fortune 1000® and 35 percent of Fortune Global 500® companies. Protiviti and our independently owned Member Firms serve clients through a network of more than 70 locations in over 20 countries. We also work with smaller, growing companies, including those looking to go public, as well as with government agencies.

Ranked 57 on the 2016 Fortune 100 Best Companies to Work For® list, Protiviti is a wholly owned subsidiary of Robert Half (NYSE: RHI). Founded in 1948, Robert Half is a member of the S&P 500 index.

© 2016 Protiviti Inc. An Equal Opportunity Employer M/F/D/V. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services.

For more information please contact:

www.protiviti.co.uk