Taking a large, complex organisation from non-compliance to full ISO 31000 alignment while embedding a stronger risk culture across leadership and strategy.
We were engaged to reform the risk management framework and organisational performance approach of a large organisation with more than 20,000 employees and an annual operating budget of approximately $3.5–4 billion. The organisation had been assessed in the previous year as not compliant with ISO 31000, with risk management not yet embedded consistently across leadership practice, business decision-making, and strategic planning.
We redesigned and implemented the enterprise risk management framework, strengthened governance and accountability, clarified risk ownership, and helped embed a more practical risk-based culture across the business. The work went beyond documentation. It focused on making risk management operationally relevant for leaders, aligned to strategy, and capable of being applied consistently across a large and complex environment.
Outcome: within 12 months, the organisation was returned to full compliance with ISO 31000, with stronger leadership ownership of risk, a more mature enterprise risk framework, and a risk-aware culture better embedded across the business.
Details adjusted to protect confidentiality.