Home / Consulting
MyRISK Consulting · GRC assessment and re-engineering
The tools exist. The workflow still fails.
MyRISK Consulting assesses how risk and assurance work actually runs — then rebuilds the parts that fail. An assessment that comes with the rebuild, not just the findings.
Three named scopes
We bought the platforms. The operating discipline never arrived.
GRC value recovery
The platform is used as a register and nothing else. We work out what can be recovered, what should be retired, and what needs redesigning around how the organisation actually works.
Assurance and evidence workflow
The same evidence is collected by hand for audits and customers who ask overlapping questions. We map what can be collected once and what the reuse rule has to be.
Policy-to-practice and reporting
Policies describe something nobody does, and reports are stale on arrival. We reconcile the two and rebuild the reporting line so it produces itself.
Every engagement is bounded before you sign: named outputs, named exclusions, agreed acceptance criteria and a fixed price. If your problem is not one of these three, we will say so and point you somewhere useful.
Independence
Consulting stands on its own commercial terms
You will never be pitched software mid-engagement. An engagement that ends without a product conversation has not failed — for you or for us.
If the assessment finds a decision class that keeps being challenged, or a rhythm nobody is running, a product conversation can open — as a separate discussion with its own reason and its own decision-maker on your side, never as the second half of work you already paid for. It is a term in the engagement letter, not a promise on a web page.
Before
Evidence chased by email each quarter. The exception approval sits in an inbox for three weeks. The report is accurate on the day it is written and stale by the meeting.
After
Evidence collected once against a named owner. The approval has a path, a signer and a clock. The report generates from the same source the work runs on.
For your reviewers
The boundaries, in writing
Where Consulting stops
- No directed capacity or staff augmentation. We rebuild workflows; we do not rent people.
- No open-ended time and materials. Bounded scope, named outputs, a fixed price.
- No independent audit opinion — we are not independent of the design we help build.
- No software pitch inside the engagement — in the proposal or anywhere else.
Bring one failed workflow, report or evidence pack
That one example is where the assessment starts. It scopes from it, with named outputs and a fixed price.