Thames Kay Consultancy LLCBoard-level risk visibility and early warning.
A risk register is not risk management — appetite, ownership and response make it real.
A risk picture the board actually reads.
We agree with the board how much risk the company can accept, run workshops to find and score the real risks, connect each big risk to the control that stops it, build simple heatmaps and early-warning signals, and keep the risk picture fresh with regular reviews.
Core deliverables
At a glance
Pairs with
A risk list nobody reads is false comfort.
Small risks compound unseen
Small risks grow quietly into big disasters when nobody is watching them.
False comfort
A risk list nobody reads gives the board false comfort.
Surprises are costly
Investors and boards hate surprises.
What we build with you.
Risk appetite
Agree with the board how much risk the company can accept.
Risk workshops
Run workshops to find and score the real risks.
Risk-to-control mapping
Connect each big risk to the control that stops it.
Heatmaps & signals
Build simple heatmaps and early-warning signals.
Regular refresh
Keep the risk picture fresh with regular reviews.
Identify → Assess → Respond → Monitor.
Identify
- Risk appetite agreement
- Risk identification workshops
Assess & Respond
- Risk-to-control mapping
- Heatmap and early-warning design
Monitor
- Regular risk review cadence
- Board reporting
See the ten risks that actually matter.
Start with a free discovery session — a maturity read against COSO ERM before anything is scoped.
Book a consultation