Blocks spelling RISK next to a magnifying glass. Photo: Sasun Bughdaryan / Unsplash
Risk, Compliance & Regulatory · Service 02.03

Process benchmarking and technology fitment

Systems and processes set up right the first time, benchmarked against good practice and supported by technology that fits.

The service

Your processes and practices evaluated and benchmarked against good practice and peers, with a target design for the systems and processes you need and the tools and technologies that fit them.

02.1 · Risk assurance & internal audit

Companies often buy software before they have settled the process it is meant to run. The result is a tool that automates a weak process, or one that nobody uses. We start with the process and its people, and choose technology last.

We evaluate how your processes and practices work today, from the written policy to what happens on the ground, and benchmark them against regulation, good practice and peers in your sector. That shows where you are ahead, where you are exposed and what a fit-for-purpose process looks like.

We then design the target process with your teams, including roles, controls, approvals and reports, and assess the tools and technologies that could support it. Each option is scored on fit with your process, effort to implement and cost, so you choose with the facts in front of you.

When you need it

You are setting up or overhauling a risk, compliance or governance process and need to know what good looks like and which technology to adopt.

Signs we see most often

  • 01A new law, a listing or a fund-raise needs a process you do not yet have.
  • 02Teams run the same process in different ways across units or locations.
  • 03Work still runs on e-mail and spreadsheets and audit trails are hard to produce.
  • 04A software purchase is planned but the requirements are not agreed.
  • 05A tool has been bought but is not used as intended.
How we work

Scoped in writing, run by one accountable team.

Every engagement starts with agreed questions, a reporting line and a confidentiality protocol. The steps below are how this service usually runs; we adapt them to your matter.

  1. 01ScopeAgree the processes, units and outcomes in focus.
  2. 02EvaluateReview policies, walk through practice with owners and test what happens on the ground.
  3. 03BenchmarkCompare each process with regulation, good practice and peers, and rate its maturity.
  4. 04DesignSet out the target process with roles, controls, approvals and reports.
  5. 05Assess fitmentShortlist tools and technologies and score each on fit, effort and cost.
  6. 06RoadmapAgree a phased plan with owners and dates.
What you receive

A clear view of where you stand, the processes to put in place and a technology shortlist matched to your needs.

  • A current-state assessment of each process in scope
  • A benchmark and maturity rating against good practice and peers
  • A target process design with roles, controls and reports
  • A technology fitment assessment and shortlist
  • An implementation roadmap with owners and dates
Standards

The law and frameworks this work is aligned to

  • COSO Internal Control: Integrated Framework (2013)
  • ISO 37301:2021 Compliance management systems
  • ISO 31000:2018 Risk management guidelines
  • Companies Act, 2013 s.134(5)(e) on internal financial controls

References show the standard the work is built to. They do not imply accreditation or endorsement by the bodies that publish them.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
FAQs

Questions clients ask before we start.

Will you only recommend BDI's own platforms?

No. We recommend on fit with your process. Where a BDI platform is among the options, we say so and score it on the same basis as the others.

Can you help implement the new process?

Yes. We can work with your teams to roll out the process, configure the chosen tool and train the people who use it.

Which processes do you cover?

Risk, compliance and governance processes, such as compliance tracking, third-party onboarding, approvals, investigations and reporting to the audit committee.

Start a confidential conversation

Tell us what you are seeing. We will tell you how we would find out.