Operational Risk Program
Build a complete operational risk management (ORM) program: ERM framework, RCSA, loss monitoring, financial risk, KRIs, and the Contingency Funding Plan for chartered banks.
Price
$199
Individually $394 — save 49%
Delivered immediately after checkout — your template and guide links are emailed to you with your receipt.
Built for risk and compliance teams at financial-services organizations
◆ Quick buying summary
What you get and when you can use it
- Good fit if
- You're a CRO or VP of Risk building a formal ORM program designed around the components examiners typically review
- Format
- Editable workbook plus PDF/supporting guide materials where included. Instant download after checkout.
- Time to value
- Start reviewing, editing, and assigning owners the same day; customize to your organization before sharing outputs externally.
- After purchase
- After payment, download every file immediately from the confirmation page. RiskTemplates also emails a secure access link, and Stripe sends the payment receipt separately. No account required.
◆ What's included
- ◆ Enterprise Risk Management Framework (ERMF)
- ◆ RCSA (Risk & Control Self-Assessment)
- ◆ Loss Monitoring & Event Tracking Kit
- ◆ Financial Risk Management Kit
- ◆ KRI Library (152 Key Risk Indicators)
- ◆ Contingency Funding Plan — Banks (2023 Interagency Addendum-aligned)
Use rights: customize for internal business use and use outputs with your auditors, customers, bank partners, and regulators. Do not resell or redistribute the template files.
◆ What's in the bundle
Products in this bundle.
Template
Enterprise Risk Management Framework (ERMF)
Complete ERM documentation: risk appetite, 3 Lines of Defense, committee charter, and board reporting.
View →
Template
RCSA (Risk & Control Self-Assessment)
141 fintech risks with mapped controls, a 97-question self-assessment, control testing plan, challenge log and a one-page Board Summary.
View →
Template
Loss Monitoring & Event Tracking Kit
Operational loss and near-miss tracking for fintechs — with automatic escalation tiers, bank-partner notice flags and a dashboard that calculates itself.
View →
Template
Financial Risk Management Kit
Credit, liquidity, customer funds, payments losses, capital, interest rate and concentration risk for fintechs — with stress scenarios and a board-ready risk appetite statement.
View →
Template
KRI Library (152 Key Risk Indicators)
152 KRIs — including 20 emerging-risk KRIs for AI-enabled fraud, scams and AI governance — with thresholds, owners and a calculating dashboard.
View →
Template
Contingency Funding Plan — Banks
Examiner-ready contingency funding plan for chartered banks built to the 2023 Interagency Addendum.
View →
◆ FAQ
Frequently asked questions.
How do these 6 products fit together as an ORM program?
The ERMF provides governance (risk appetite, the three lines of defense (3LoD), committee structure). The RCSA evaluates control effectiveness against your risk inventory. The KRI Library monitors whether risk levels are moving in the right direction. The Loss Monitoring Kit captures when controls fail. The Financial Risk Kit provides the financial dimension. Together: you're identifying risks (ERMF/RCSA), monitoring them (KRIs), capturing losses (Loss Monitoring), tracking financial exposure (Financial Risk), and governing it all (ERMF). That's a complete ORM cycle.
What's the implementation sequence for all 6 products?
Recommended sequence: (1) Start with the ERMF to establish governance structure and risk appetite. (2) Use the RCSA to map risks and control effectiveness — this feeds your board reporting. (3) Stand up the KRI Library using the same risk taxonomy. (4) Configure the Loss Monitoring Kit and seed with any available historical events. (5) Implement the Financial Risk Kit for the credit and liquidity dimensions. Each step builds on the previous one.
Does this bundle include the RCSA's 141 pre-populated risk assessments?
Yes. The RCSA Kit includes all 141 pre-populated risk assessments, control effectiveness scoring, the self-assessment questionnaire framework, and the control testing plan. These use the same 21-category risk taxonomy as the Free Risk Register, so if you've already populated that, the risk IDs map directly.
Is this appropriate for a fintech that already has some ORM infrastructure?
Yes — all 6 products are designed to be adopted modularly. If you have an existing ERMF but no RCSA, you can use just the RCSA and KRI Library. If you have loss tracking but no financial risk monitoring, the Financial Risk Kit fills that gap. The RCSA uses the same 21-category taxonomy as the free Risk Register; the Financial Risk Kit is organized by financial metric (credit, liquidity, capital, concentration) instead, so it slots in alongside your existing reporting rather than sharing risk IDs.
How does the KRI Library connect to the Financial Risk Kit?
The KRI Library includes financial and lending KRIs that overlap with what the Financial Risk Kit monitors: current ratio, days of operating expenses, loan loss reserve adequacy, customer fund segregation, 30-day delinquency and net charge-off rates, plus concentration KRIs for bank partners, vendors and revenue. When a Financial Risk Kit metric crosses its threshold, the matching KRI should move to Amber or Red on the KRI Dashboard.
Can I share completed outputs externally?
Yes. You can use completed outputs with auditors, customers, bank partners, regulators, and internal stakeholders. Customize the template for internal business use — just don't resell or redistribute the source template files.
How do I receive the files?
Checkout is handled through Stripe. After payment, download every file immediately from the confirmation page. RiskTemplates also emails a secure access link, and Stripe sends the payment receipt separately. No account is required.
What if it's not a fit?
Email within 30 days for a full refund, no questions asked. The guarantee is meant to remove purchase risk while you evaluate whether the template fits your use case.
● First-time buyer offer
Get 20% off your first template.
Drop your email and we'll send the code.
◆ Not ready to buy?
Start with the free Risk Register.
141 pre-populated fintech risks across 21 categories. ISO 31000 structure.
Download free Risk Register →◆ Ready when you are
Get the Operational Risk Program.
Start building a defensible risk program today.