Skip to content

ERM Starter ยท Enterprise risk management

Your board asks what could go wrong and what it would cost. Answer both.

ERM Starter gives institutions under $10B a working enterprise risk program: a risk appetite the board approves, key risk indicators, a dollar figure on each exposure drawn from real enforcement penalties, a live read of what regulators are doing, and a board pack built from all of it. One annual subscription, set up by a forward deployed compliance officer.

Your problem

Risk scored one to five tells the board nothing about money

  • Your examiner expects a risk appetite the board has approved, and evidence you stay inside it.
  • Most risk registers rate impact from one to five. Nobody can say what a "four" costs.
  • Regulators change priorities faster than an annual risk assessment can follow.
  • Enterprise risk platforms are priced and staffed for much larger institutions.

What you get

Included in ERM Starter

  • A risk appetite statement and key risk indicators, with limits per risk area. You enter the indicator figures, and the platform tracks them against the limits.
  • Dollar exposure: a dollar range on each gap, drawn from penalties in real enforcement actions, refreshed every year. Where the data's too thin, it says so instead of guessing.
  • Regulatory weather: what regulators are doing now, from their own publications and actions, and a page showing what it means for your institution.
  • Regulatory change monitoring, matched to the rules that apply to you. Your controls are assessed at points in time, on the schedule you set.
  • TARC board-committee packs (Technology, Assessment, Risk & Compliance): your risk committee's own packs, with a board tier and a management tier, sealed each quarter so there's a fixed record of what the board was told.
  • Complaints management, at no extra charge.
  • The board pack: program standing, open findings and how long they have been open, and the risk read, with a version for your examiner.

Dollar exposure and regulatory change monitoring are also sold on their own. Inside ERM Starter, there's no separate charge for either.

Pricing

Two sizes, priced in the open

Two sizes: small institutions (fintechs, money transmitters, banks and credit unions under about $1B in assets) and mid-size institutions ($1B to $10B). Priced at scoping. How pricing works

ERM Complete

The full enterprise risk tier

  • A full risk register, with self-assessments, loss events and scenarios, on top of everything in ERM Starter.
  • Priced at scoping for your size and scope.

How the work is done

The audit you already buy, performed by an engine.

  1. Every record testedControls are tested against the full population of accounts and transactions, not a sample of twenty-five.
  2. Every requirement citedEach requirement the work runs against is cited to the rule it comes from, with the facts behind it labelled.
  3. Findings pricedFindings arrive priced in dollars, so remediation is ordered by what each gap is worth.
  4. A signed reportThe report is signed, and any reader can check that nothing in it changed after signing.

What happens next

Three steps from here.

  1. 01

    A short call

    Your size, your regulators, and what your board and examiner are asking for.

  2. 02

    Your risk appetite

    A practitioner drafts it with you, with limits per risk area, for your board to approve.

  3. 03

    The first board pack

    Your exposure in dollars, what regulators are doing, and where you stand against appetite.

Talk about ERM Starter