Risk Function Benchmarking

Is your Risk function proportionate
to the Society it supports?

A holistic deep dive into the whole Risk function — structure, resource, governance, MI, assurance, capability and how capacity is deployed — grounded in CRO experience, available sector evidence and your specific operating context.

What we examine

Not just the org chart. The actual operating burden.

Resource & capabilityHeadcount, cost, seniority, specialist skill and the balance between leadership, analysis and administration.
Governance & MICommittees, reporting packs, standing agenda items, duplication and the analyst time consumed by recurring governance.
Assurance & control activityMonitoring, QA, RCSA, thematic reviews, control testing and where second-line activity may overlap or be underpowered.
BAU versus improvementHow much capacity is absorbed by repeating established activity versus improving frameworks, analytics, automation and risk insight.
Scope

Whole-function review, not a narrow issue review.

Risk Function Benchmarking is designed for a broad, holistic assessment of the Risk function. If you already have a specific question — for example Board MI, risk appetite or lending policy — a Targeted Risk Review is the narrower intervention.

Explore Targeted Risk Reviews
How the review works

A holistic diagnostic of how the Risk function operates, where capacity goes and whether that allocation makes sense.

01

Understand the operating model

A concise information request plus structured discussions with the CRO and relevant leaders. We map organisation, resource, governance, MI, assurance activity and recurring BAU demand.

02

Benchmark & diagnose

Dharma Risk assesses the model using sector evidence where available, experience across building societies and lenders, and the specific size, complexity, risk profile and strategy of your organisation.

03

Prioritise action

The output distinguishes what appears heavy, light or simply misallocated — with practical recommendations on what to stop, simplify, automate, strengthen or redirect.

What you get

An independent CRO-level view of what is proportionate — and what is worth changing.

Clear diagnosticWhere the function appears appropriately resourced, stretched, over-engineered or misallocated.
Market contextRelevant sector evidence and practitioner comparison without implying false precision that the available data cannot support.
Prioritised actionsSpecific opportunities to stop, simplify, automate, consolidate or strengthen activity.
Senior readoutA practical discussion with the CRO / executive team focused on choices and trade-offs rather than a long consultancy report.
Risk Function Review

Want an independent view of whether your Risk function is proportionate?

The starting point is a short conversation about the shape of the function, where you think capacity is being lost and what you want the review to help you decide.