The Second Opinion

An independent read on your risk position.

Fifteen questions. About five minutes. At the end you will have an honest read on where your risk position holds, where it is uneven, and the questions a board, a regulator or a counterparty would be entitled to ask next.

Five minutes
Nothing leaves your device
No sign-up, no email required

Why this exists

Most assessments measure process. This one tests judgement.

Maturity assessments usually score an organisation against a framework and return a chart. They are useful, and they rarely change anything, because a framework can be well described and still fail to change a decision.

This works the other way round. It asks what you could actually evidence if someone outside the organisation asked today, and it treats “not sure” as the most informative answer available. What comes back is not a score to file. It is a short list of questions you cannot yet answer.

It draws on twenty-five years of enterprise risk, audit and transaction work across twenty-one countries, and on the three lines of defence as they operate in practice rather than on paper.

What it is built on

Grounded in the standards your board already knows.

The five dimensions follow ISO 31000:2018, the COSO ERM framework (2017), the IIA Three Lines Model (2020) and, for Australian financial services, APRA CPS 220 and CPS 230. Each dimension names the standard it draws on alongside your result.

The questions come from twenty-five years of enterprise risk, audit and transaction work across twenty-one countries, including some of the world’s most demanding regulatory environments. They are the questions that tend to go unanswered until something forces the issue.

Rather talk it through?

The read is a starting point, not a substitute for a conversation.