Topic Operational Risk
The operational risk program, built one template at a time.
ERMF, RCSA, KRIs, issues management, loss tracking, third-party risk — the operational risk stack practitioners actually use. Aligned with COSO ERM, ISO 31000, FFIEC IT, and FRB SR 21-3.
◆ COSO ERM · ISO 31000 · FFIEC IT · FRB SR 21-3 · Basel
◆ What you'll find here
The core risk program — without the consulting markup.
◆ 01
ERMF, RCSA, KRIs
The three core building blocks of every operational risk program. Inventory the risks, self-assess the controls, monitor the indicators. Mapped to COSO ERM and FRB SR 21-3.
◆ 02
Issues & loss tracking
Track MRAs, audit findings, and operational losses with severity scoring, owners, and remediation timelines. Built for teams that need to show progress to regulators and bank partners.
◆ 03
Third-party & vendor risk
TPRM intake, due diligence, ongoing monitoring, and the evidence regulators expect when a critical vendor goes down. Aligned with FFIEC and OCC third-party guidance.
◆ Operational risk templates
Tools for the operational risk team.
Excel-native templates with editable workbooks and PDF guides. Buy once, tailor to your program, deploy in days.
Enterprise Risk Management Framework (ERMF)
Complete ERM documentation: risk appetite, 3 Lines of Defense, committee charter, and board reporting.
RCSA (Risk & Control Self-Assessment)
141 pre-populated fintech risks with control assessments, questionnaire framework, and testing calendar.
KRI Library (132 Key Risk Indicators)
132 KRIs with thresholds, data sources, and escalation triggers pre-built for financial services.
Issues Management Tracker & Template
End-to-end issues tracking and remediation management for risk and compliance teams.
Loss Monitoring & Event Tracking Kit
Basel-aligned operational loss event tracking and root cause analysis for financial services.
Financial Risk Management Kit
Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.
Contingency Funding Plan — Banks
Examiner-ready contingency funding plan for chartered banks built to the 2023 Interagency Addendum.
Contingency Funding Plan — Fintechs
Contingency funding plan for sponsor-bank fintechs — FBO reconciliation, runway-based triggers, post-Synapse stress scenarios.
Third-Party Risk Management (TPRM) Kit
Complete vendor risk management lifecycle from initial due diligence to ongoing oversight.
Fintech Customer AUP Kit
Acceptable Use Policy framework for fintech compliance teams evaluating high-risk customers and merchants.
222+
Operational risk articles
10
Templates · Excel + PDF
US
COSO · ISO 31000 · FFIEC · Basel
◆ Latest analysis
From the journal.
Operational Risk
KRI Traceability Matrix: Link Risk, Control, Incident, Threshold, Owner, and Action
Build a KRI traceability matrix that connects each indicator to risks, controls, incidents, thresholds, owners, breaches, and actions.
Compliance Strategy
Conduct Risk KRIs: Indicators, Thresholds, and Incentive Blind Spots
Build conduct risk key risk indicators that expose sales pressure, weak overrides, complaints, cancellations, and customer harm before they become findings.
Operational Risk
RCSA Risk-Statement Rewrite Lab: Cause–Event–Impact Examples and Testability Checks
Vague RCSA risk statements don't just frustrate examiners — they make your entire RCSA unauditable. Here's how to rewrite them using cause–event–impact syntax, with before-and-after examples and a testability rubric.
Operational Risk
Post-Approval Product Change Review: When to Reopen the Risk Assessment
Run a product change risk assessment review with clear reopen triggers, targeted reassessment rules, approvals, and retained evidence.
Operational Risk
RCSA Scoping: Build a Defensible Business-Unit, Process, and Risk Coverage Matrix
Before the first workshop, your RCSA program needs a documented scope. Here's how to build a coverage matrix that proves what's in, what's out, why, and who approved it — and how the matrix evolves when the business does.
Operational Risk
How to Build a Flow-of-Funds Diagram for a New Product Risk Assessment
A flow-of-funds diagram maps every entity, account, ledger, rail, and control point in a product's money movement—before launch. Here's how to build one that holds up in a risk committee meeting, a bank partner review, and an OCC examination.