The development and further development of risk management systems is our core competence. Our advantage over other consulting boutiques is our broad competence in all relevant sub-areas as well as overarching organisational aspects. This experience allows us to develop solutions that actually work and fit smoothly into your existing organisation. Moreover, since our experts have worked for various financial service providers in the respective areas themselves, we also know, in contrast to the so-called senior advisors of the usual suspects among the big consulting firms, how risk management processes should be developed and implemented in accordance with the relevant business processes, so that an efficient and effective overall bank management is achieved.
In addition to the technical adequacy of our solutions and its smooth integration and coordination with existing structures, we also pay attention to developing your organisation’s risk culture. We are happy to carry out an assessment on this particular topic, as well as on all other areas of risk management, which will show what improvements should be looked at. Of course, we are also at your disposal for the quickest possible implementation of recommendations on already identified shortcomings

Credit Risk
We can analyse your lending process and the process for counterparty risk management following a method we have developed on the basis of related Basle and other recommendation papers.
Thereby we can highlight room for improvement and devise related recommendations in the areas of process efficiency, adequacy of controls and compliance with regulations and best practice.
The first-hand experience of our experts allows us to support you in all related process steps starting with the analysis of credit risks and risk classification, the decision-taking process and disbursement and includes loan portfolio management, intensified management and management of problem loans, too.
Of course, we will then help you implement agreed recommendations, developing new strategies, policies, procedures and tools and we can develop and execute related training programs.

Market Risks
We support you in revising your market risk management systems to implement them as efficiently and as effectively as possible, and in accordance with all respective regulatory requirements.
Our experience in creating processes and tools for managing interest rate and currency risks is a guarantee that we will meet both your internal goals and all external requirements when revising your strategies, policies, work instructions, reports or tools.

Liquidity Risk
If you are not fully satisfied with the liquidity management of your company, we offer our support in revising appropriate policies, process descriptions, control and monitoring with the help of appropriate tools and key indicators, as well as building meaningful and appropriate emergency funding plans. This gives you the required overview of your liquidity situation at all times, which allows you to ensure all short-term payment and long-term financing needs and at the same time to use surplus liquidity profitably without taking undesirable risks.

Operational Risks
With many years of experience in the development and implementation of optimally integrated ORM systems in several institutions, NomoRisk offers you the opportunity to find the best possible solution for managing Operational Risk your company. We are, of course, also happy to plan the development and implementation of individual components of an operational risk management system or support you in their execution – be that in carrying out risk assessments, defining meaningful risk indicators, establishing an efficient and effective new product process or designing a system for managing risk events.
In addition, we offer tailor-made consulting services for individual areas of Operational Risk such as fraud risk management, compliance risk, process risks, model risks, etc.

Sustainability Risks
According to related definitions (IPSF, NGFS, ECB, EBA), the scope of sustainability risk covers unexpected events or conditions in the areas of environment, social affairs or corporate governance. These can take the form of physical risks (heat waves and droughts, floods, storms, sea level rise, loss of biodiversity, …) or transition risks (unexpected cost related to changes to achieve the United Nations Sustainable Development Goals) and can have a significant negative impact on a company’s assets, its financial position or results or its reputation. Financial institutions will, in any case, be hit more or less hard by one of these risks: either through transition costs, if the governments of the countries with the greatest influence will begin to pursue the UN’s sustainability goals seriously – or by physical costs, if not. Responsible banks should therefore not only complement their risk management system in order to achieve regulatory compliance, but should also do so because these risks are essential – not only for the bank’s bottom line, but for our entire society.

Please contact us if we can help you adapt your risk management system to adequately address sustainability risks.

Together with Risk Management, a solid corporate governance system is prerequisite for long-term sustainable development of an enterprise.

Our Service for You:
NomoRisk can help you examine and, if necessary, optimise the governance structures of your company according to management’s ideas, taking into account in particular the role and functionality of the areas of internal audit, compliance and risk management and in accordance with the relevant regulatory expectations and legal requirements.
For this purpose, we have developed a unique governance assessment system in which we have integrated all relevant requirements and practical experience. With this, we can provide you in just a few days with a structured overview of possible weaknesses and show which measures are suitable to improve the structure and management of your company precisely.
.

When developing compliance and anti-money laundering solutions, we are guided by the relevant regulatory requirements, which we align with the business requirements of our customers.
In doing so, we take into account not only strategic coordination with other business areas (especially, but not only risk management, internal audit and fraud prevention) to avoid redundancies, but all common areas of work such as regulatory and legal requirements management, complaint management, whistleblowing, reporting, training, outsourcing management, etc.

In the field of money laundering prevention, we cover not only the relevant minimum requirements such as the definition of functional requirements, the selection of suitable software providers, the integration and calibration of monitoring systems, the definition of guidelines and work instructions, the implementation of AML risk assessments, the development and implementation of training programmes and the continuous development of existing systems, but also the use of these systems in connection with other requirements, such as to fight fraud or identify customer behavior and business opportunities.

The structure of an Information Security Management System can be found in proven standards such as ISO 270xx or the German BSI Basic Protection Catalogue. Nevertheless, the successful establishment of such a system in a company – taking into account all its individual requirements – is a huge task, and often insufficient staffing are a bottleneck for successful implementation.

Our Service for You:
If there are open requests or audit findings regarding the current state of your information security system, we are at your disposal to define and implement the next steps for further improvement, taking into account relevant guidelines (DORA, BAIT, VAIT, KAIT, EBA ICT Guidelines, etc.). We support you in protection needs analyses, business impact analyses, the definition of protective measures and the implementation of all requirements in the form of guidelines, work instructions, tools and reporting tools.

We support you with the implementation of your audit plan as well as in the conceptual design of your internal audit function. In both cases, we apply the standards and guidelines summarized in the International Professional Practices Framework (IPPF) for Internal Auditors. Our concrete offer for you ranges from the basic definitions for internal auditing (planning, implementation, reporting) and its integration into the entire monitoring and control system of your company, the fixation of all necessary working documents and reporting, to the execution of individual audits or the processing / follow-up of already existing recommendations.
In addition, we offer the implementation of an independent external review of the current structure and process organization of your internal audit function. We will assess its compliance with common standards (e. g. IPPF) as well as both its efficiency and effectiveness and make appropriate recommendations for further improvement, such as process adjustments, better consideration of underlying risks, improvements of document management, appropriate training measures, continuous quality assurance or optimising cooperation with management or other control functions in the wider sense, such as compliance and risk management.

Due to the corresponding regulatory requirements in the area of outsourcing, which have grown considerably in scope in recent years (and are likely to continue growing), this topic has also gained significant popularity in the boardroom. Depending on the institution’s current approach, significant further developments in this area are required, often also in connection with the requirements for a comprehensive and risk-oriented management of information and communication systems (as per, for example, BAIT or DORA).

Our expertise can help you develop and implement appropriate improvements to your entire outsourcing process and the associated organisational standards in an appropriate and strategic way. Of course, we also develop tailor-made training solutions for your company in this area. Depending on your regulatory situation, we focus on the requirements of either the MaRisk or the EBA Guidelines, without neglecting the required consideration of all pertinent regulations.