
Risk Assessment and Management
SERVICE OVERVIEW
A strong fiduciary governance program is built on clarity—clarity about your organization’s goals, responsibilities, and the level of risk you are willing to accept in fulfilling your fiduciary duties. Our services help fiduciaries define that clarity through the creation of a Risk Appetite Statement and the facilitation of comprehensive Fiduciary Risk Assessments. Together, these tools form the foundation for a targeted, efficient, and defensible oversight framework.
Kropschot Consulting Partners’ experts have extensive experience facilitating and performing company-wide and targeted risk assessments. We collaborate with your professionals to identify, analyze, and prioritize risks that may affect your ability to execute the business plan and achieve strategic objectives. In addition to prioritizing risks for review by leadership, we recommend risk mitigation alternatives that align with your institution’s risk appetite. We also help translate and integrate risk assessment results into your business planning process, as well as the creation of your fiduciary audit, risk management and compliance testing activities.
Building a Governance Program That Allows You to Work Smarter
We help organizations of all sizes develop the clarity, insight, and structure necessary to manage fiduciary responsibilities with confidence. From determining risk appetite to conducting risk assessments and building risk‑based oversight plans, our services strengthen the foundation of your fiduciary governance program.
Defining Your Risk Appetite
A well‑crafted Risk Appetite Statement sets the direction for all fiduciary decision‑making. It expresses the level of risk your organization is prepared to take in pursuit of its objectives, and it guides committees, leaders, and service providers in aligning their activities with your strategic and regulatory expectations. A clear risk appetite statement helps fiduciaries:
- Establish a shared understanding of acceptable and unacceptable risks
- Strengthen decision‑making across administration, investment, operational, compliance and other fiduciary activities
- Provide evidence of prudence and intentionality to auditors and regulators
- Ensure governance practices are aligned with the interests of the trust company and its clients
This Risk Appetite Statement becomes a guiding document—anchoring your governance program and informing how resources are deployed on a risk-based basis.
Fiduciary Risk Assessments: Turning Intent Into Insight
With the risk appetite defined, we conduct a fiduciary risk assessment, to evaluate how current practices compare to your risk appetite statement. This assessment identifies and measures risks across key fiduciary activities, including:
- Marketing and new business development
- Account administration
- Investment management, oversight and monitoring
- Legal and compliance oversight
- Risk management
- Fee reasonableness and transparency
- Privacy and information security
- Vendor selection and oversight
The results of the risk assessment will provide a clear, data‑driven understanding of where you are exposed, where controls are strong, and where improvement is needed.
Directing Resources Through Risk‑Based Oversight
One of the most valuable outcomes of a fiduciary risk assessment is the ability to allocate audit, compliance, and monitoring resources based on actual risk—not tradition or guesswork. Using risk assessment results, we help organizations:
- Prioritize high‑risk areas for deeper review and more frequent monitoring
- Scale oversight in lower‑risk areas to match exposure levels
- Build annual fiduciary compliance and audit testing scheduled and workplans grounded in objective risk data
- Optimize use of internal teams, committees, and external advisors
- Create a defensible rationale for how oversight and business decisions are made
This risk‑based approach increases efficiency, reduces unnecessary costs, and strengthens your ability to your trust company and its clients.
Benefits to Your Organization
Stronger, More Transparent Governance - Clear documentation of risk appetite and risk exposure supports a robust governance framework and demonstrates fiduciary diligence.
Improved Readiness - Proactively identify gaps before they become findings—creating confidence during compliance testing. audits and examinations.
Better Decision‑Making and Prioritization - Leadership and fiduciary governance committees gain a structured decision‑making foundation tied to your organization’s risk tolerance.
Efficient Allocation of Oversight Resources - Risk‑based planning ensures the right level of attention is given to the right activities at the right time.
Links to Important Risk Assessment and Risk Management Information
-
OCC Comptroller's Handbook - Community Bank Supervision (See pages 181-213, Community Bank Risk Assessment System)
-
COSO Compliance Risk Management: Applying the COSO ERM Framework - 2020
-
IEC 31010:2019 - Risk Management - Risk Assessment Techniques (International Standard Available for Purchase on ANSI Webstore)
-
ISO 31000:2018 - Risk Management - Guidelines (International Standard Available for Purchase on ANSI Webstore)
-
ISO 31073:2022 - Risk Management - Vocabulary (International Standard Available for Purchase on ANSI Webstore)
-
FFIEC BSA/AML Examination Manual - BSA/AML Risk Assessment
-
12 CFR 30, Appendix B, Section III. B. and C. - Information Security Standards, Assess Risk and Manage and Control Risk
-
12 CFR 41, Subpart J (Specifically 12 CFR 41.90(c) and Appendix J) - Identity Theft Red Flags Risk Assessment
-
ISACA - The Key(s) to Writing Good Risk Statements

