01 · Risk Advisory · Advice and consulting
Risk advisory and consulting
Risk Advisory is RiskTAE’s advisory and consulting practice for risk, capital and liquidity in regulated financial firms. As advisers, senior practitioners give CROs, CFOs and boards independent challenge and a second opinion. As consultants, the same people write ICAAPs and ILAAPs, build risk frameworks and move capital calculations onto the PRA’s Basel 3.1 rules.
You get work that holds up to board challenge and supervisory review, and a team of your own that can run it next year.
Two offers
What is the difference between risk advisory and risk consulting?
Advice
Advice is judgement. You keep the pen, and we give you an independent, senior view: a second opinion on the ICAAP before the board signs it, challenge on your risk appetite, preparation before a meeting with the PRA, or a steady hand through a skilled person review.
Consulting
Consulting is delivery. We hold the pen: we write the ICAAP and ILAAP, build the framework, run the Basel 3.1 recalculation and the stress tests, then hand everything over with documented assumptions so your team can run it next year.
Many clients use both, often in sequence: advice to scope the problem, consulting to fix it, then advice again as an independent check before submission.
Services
What do you deliver?
ICAAP
A first ICAAP, an annual refresh, or an independent review before the board signs it off. We cover Pillar 1 and Pillar 2 risks, stress and reverse stress testing, and the capital plan that follows from them.
ILAAP
Liquidity risk appetite, the LCR and NSFR, survival horizons, liquidity stress testing and the contingency funding plan, written so the board can see how each number was reached.
Basel 3.1 and capital
Impact assessment against the PRA’s final rules, recalculation of risk-weighted assets under the new approaches, and the knock-on changes to the ICAAP, the capital plan and Pillar 3 disclosures. For smaller firms, an assessment of whether the simplified regime for small domestic deposit takers applies.
Recovery and resolution planning
Recovery plans with credible indicators and options, resolution packs, and solvent exit and wind-down analysis for firms that need to show they could leave the market in an orderly way.
Risk frameworks and appetite
Risk appetite statements, risk taxonomies, policies and a three lines of defence model that works in a firm of your size.
Independent and skilled person reviews
A written, independent view for the board on a framework or a submission, and support before, during and after a Section 166 skilled person review.
Engagements
How does an engagement run?
Every engagement starts with a 30-minute scoping call and a written proposal that sets out the scope, the timetable and the fee. Where one of our RisKIT models fits, we start from it rather than a blank spreadsheet, which puts a first set of numbers in front of management sooner.
We work inside your team rather than beside it, and we finish with a handover of the models and their documented assumptions to the people who will run them next year. Training for the board or the team can be added from Risk Education, and if the work shows a gap in the team, Risk Talent can fill it.
Track record
What has the team done before?
Work our senior practitioners have led includes:
- Banking licence
an enterprise risk management framework for a start-up bank, which won its UK banking licence after two earlier applications had failed;
- Op risk capital
operational risk scenarios for a NYSE-listed market maker, after which the PRA accepted its revised operational risk capital and ICAAP;
- Model approval
a risk taxonomy and assessment policies that helped a major UK bank keep its approval to use the advanced measurement approach for operational risk capital;
- Section 166
new risk policies, procedures and staff training that satisfied the UK regulators after a Section 166 skilled person review at the London operation of an overseas bank.
Client names are withheld.
Regulatory deadline
What changes on 1 January 2027?
Basel 3.1 and the SDDT regime
Two sets of PRA rules take effect that day. Basel 3.1, published on 20 January 2026 in policy statement PS1/26, applies to PRA-authorised banks, building societies and PRA-designated investment firms, with the internal model approach for market risk following on 1 January 2028. The simplified capital regime for small domestic deposit takers, published the same day in PS4/26, applies to the firms that qualify and opt in.
A firm’s first ICAAP under the new rules needs recalculated risk-weighted assets well before the board is asked to approve it. If yours has not started, the scoping call is the place to begin.
Sources: Bank of England, PS1/26 Implementation of Basel 3.1: final rules, 20 January 2026; PRA PS4/26 The Strong and Simple Framework, 20 January 2026.
FAQ
Questions about Risk Advisory
Do you offer advice and consulting, or one of them?
Both. Some clients want an independent, senior view and keep the work in-house; others want us to do the work. The same senior people do both, and many engagements move from one to the other.
What is an ICAAP?
An ICAAP, or Internal Capital Adequacy Assessment Process, is a firm’s own assessment of the capital it needs for the risks it runs, now and under stress. The PRA reviews it as part of its supervisory review and uses it when setting the firm’s Pillar 2 capital requirements.
What is an ILAAP?
An ILAAP, or Internal Liquidity Adequacy Assessment Process, is the liquidity equivalent: the firm’s own assessment of the liquidity and funding it needs in normal conditions and under stress. The PRA uses it in its review of the firm’s liquidity position.
Can you review an ICAAP we have already written?
Yes. We review drafts against the PRA’s expectations and give the board a written view of the gaps before it approves the document.
Do you work outside the UK?
Yes. Alongside the PRA’s rules we work with the EU’s Capital Requirements Regulation (CRR III) and with national Basel implementations elsewhere, and our RisKIT models cover UK, EU, US and global Basel frameworks.
In depth
Our services in detail
Basel 3.1
Basel 3.1 applies in the UK from 1 January 2027. We help banks and building societies move capital, reporting and the ICAAP onto the final rules.
02SDDT regime
The simplified capital regime for small domestic deposit takers applies from 1 January 2027. We help eligible firms decide, apply and rework the ICAAP.
03ICAAP
ICAAP writing, review and challenge for UK banks, building societies and lenders, by practitioners who hand the document and the model to your team.
04Step-in risk
The PRA's step-in risk rules have applied since 1 January 2026. We build the policy, register and SI returns and assess each entity before your ICAAP.
05ILAAP
ILAAP writing and review, liquidity stress scenarios and board challenge for UK banks and building societies, with an open Excel model you keep.
06Recovery planning
Recovery plans that meet the PRA's expectations: indicators, recovery options, scenario testing and a playbook the board has rehearsed.
07Risk appetite framework
Risk appetite statements and frameworks a board can use: measurable limits, clear escalation and metrics that match the business model.
08Op risk capital
Moving to the Basel 3.1 standardised approach for operational risk: the business indicator, the capital impact and what changes in the ICAAP.
09Skilled person reviews
Support before and during a section 166 skilled person review: scoping, evidence, remediation plans and a senior practitioner at your side.
One expert firm
The rest of the risk function, from the same team
Next step
Scope it in 30 minutes
Tell us the deadline and where the work is stuck. We will tell you what it would take to finish it, and whether you need advice, consulting or both.
Scope an advisory need
Tell us what needs doing and by when. A partner will come back to you. Treated in confidence.
Prefer email? advisory@risktae.com or +44 20 3996 9599. We use these details only to reply to you: privacy notice.