Kompassed is a modern advisory firm built on decades of practitioner experience across financial and non-financial risk. We help institutions modernize controls, strengthen governance, build resilience, and align technology and AI risk to real-world operating demands.
THE NARRATIVE · WHERE TO START
The Modern Risk Imperative
Institutions face complexity, velocity, and supervisory pressure — yet many still rely on legacy risk capabilities.
Our Advisory Mandates
Six connected capabilities forming a modern ERM operating system.
Our Approach
Practitioner insight and proprietary research, applied together.
Insights
Independent, practitioner-grade analysis.
Resources
Tools for investment committees and senior leaders.
The Kompassed Difference
Practitioner-led, modern, supervisory-credible.
WHAT WE DO · SIX CONNECTED CAPABILITIES
A modern ERM operating system.
Six capabilities spanning financial risk — credit, market, liquidity, capital, IRRBB — and non-financial risk: operational, compliance, technology, cyber, data, third-party, resilience, culture. Each stands alone; together they form a unified, exam-ready system.
01
Strategic Risk Governance & Enterprise Decision Architecture
How institutions make decisions, allocate accountability, and govern risk.
We design governance systems that create clarity, accountability, and strategic alignment across financial and non-financial risk.
Outcome: governance becomes a strategic enabler — not a constraint.
02
Modern Operational Risk & Control Engineering
How institutions identify, measure, and control risk in digital operations.
We modernize operational risk and control environments so they work in production.
Outcome: operational risk and controls become reliable, scalable, and exam-ready.
03
Ecosystem Resilience, Third-Party Intelligence & Data Governance
How institutions manage external dependencies and internal data integrity.
We make ecosystem and data governance risk visible, managed, and resilient.
Outcome: ecosystem and data governance risk become managed capabilities — not blind spots.
04
Technology, Cyber, AI & Digital Risk Operating Models
How institutions govern technology, cyber, AI/ML, and digital operations.
We build modern technology, cyber, AI, and digital risk operating models aligned to supervisory expectations.
Outcome: technology, cyber, AI, and data risk become modern, integrated, and credible.
05
Enterprise Operational Resilience & Scenario Engineering
How institutions withstand stress and maintain critical services.
We build resilience capabilities that withstand stress — not just satisfy compliance.
Outcome: resilience becomes a connected capability — not a documentation exercise.
06
Risk Culture, Leadership Capability & Organizational Behavior
How institutions behave, escalate, and make decisions under pressure.
We build risk culture as a performance capability — not a slogan.
Outcome: culture becomes a force multiplier — not a vulnerability.
PRACTITIONER EXPERIENCE
1998
Advising institutions since
ADVISORY MANDATES
6
Connected capabilities in one operating system
COVERAGE
13
Financial and non-financial risk domains
INSIGHTS · RESEARCH DESK
Independent By Design.
THE KOMPASSED DIFFERENCE
Practitioner-led, modern, supervisory-credible.
We have built and led risk functions — not just observed them. Our work reflects how decisions are made, how controls function, how technology is built, and how supervisors evaluate credibility.
Build Your Modern ERM Operating System.
Strengthen governance. Modernize controls. Elevate resilience.