Services
Whether your agency is just starting to implement ERM, or you are looking to add capabilities and mature and existing ERM program, Kestrel Hawk Consulting is ready to assist. Our comprehensive risk management and strategy consulting services are based on recognized industry standards and best practices adopted across federal government. Our belief is that a government ERM program must reflect the unique needs, mission and culture of the agency and our approach reflects that belief across four broad consulting service categories.
Enterprise Risk Managment
Government organizations need an ERM program that delivers more than just a listing of key risks and producing the agency risk profile. Agency leaders require an ERM program that supports decision making and helps them anticipate, adapt, and respond to changes in context, and align agency personnel and financial resources on key risks – both potential threats and opportunities – that can impact strategic goals and objectives, and agency performance. Kestrel Hawk Consulting provides a complete ERM solution including:
-
Tailored ERM Framework Development
-
ERM Policy Development
-
Risk Governance Structure and Decision Rights
-
Standardized Tools, Methods, and Templates
-
ERM Maturity Model Development and Maturity Assessments
-
Risk Culture Assessments
-
Multi-year ERM Development and Maturity Planning
-
ERM Program Metrics and Reporting
-
Executive Dashboards and Risk Metric
-
Risk Appetite Statement Development
-
Administrative Support to ERM Program Staff, and Risk Governance Councils/Committees
-
ERM Support Technology Needs Analysis
-
Assessing the internal and external risk environment/context
Kestrel Hawk Consulting can also assist with ERM technology selection, technology implementation, and configuration through our business partners.
Risk Management
At the core of any ERM Program is a structurally sound risk management process. With a good risk management process, organizations can identify and prioritize key risks (threats and opportunities); analyze causal chains and calculate the likelihood of occurrence; and analyze the potential impacts on operations and organizational performance. Risk management also involves identifying potential risk response options aligned with risk appetites, developing response implementation plans, along with monitoring and reporting on risk response implementation and impact. Kestrel Hawk Consulting provides a range of support services for agency risk management efforts including:
-
Risk identification – both top-down and bottom-up
-
Risk Causal Chain and Impact Chain Analysis and Evaluation
-
Risk Analysis and Evaluation workshops
-
Risk Register and Risk Profile Development
-
Risk Profile Portfolio Analysis
-
Key Risk Indicator (KRI) Development
-
Aligning KRIs with Key Performance Indicators (KPIs)
-
Implementing Risk Tolerance and Tolerance Limit Triggers
-
Identifying and Evaluating Potential Risk Response Options
-
Developing Risk Response Plans
-
Monitoring and Reporting on Risk Response Actions and Impacts
Training & Development
Expanding an agency's risk management capacity and building new ERM capabilities requires a focused training and development effort. Training and development are also foundational to change management and to creating the desired risk culture across the organization. Experiences across government agencies shows that the success of ERM programs is a result of the people involved in its execution and not the artifacts, defined processes, and standardized methods associated with the ERM Framework. Kestrel Hawk Consulting provides a variety of ERM-related training and development support services which include both generic content applicable to any agency, and content specific to the client agency. To reinforce the understanding of content and concepts, we incorporate scenario-based leaning and small group application exercises. The training and development support services provided by Kestrel Hawk Consulting include:
-
Long-Range Training Plan Development
-
ERM Training Needs Assessment
-
ERM Training Seminars and Workshops
-
Developing ERM Training Courses,
-
Creating Instructional Materials, and Related Training Exercises
Kestrel Hawk Consulting follows the ADDIE instructional system design framework for training course development.
Strategy & Integration
An adaptive and responsive ERM program that drives improved agency performance and value is integrated into strategy and strategic planning, agency program performance, resource planning, and key decision-making. A key value proposition of ERM is breaking down organizational silos to elevate key enterprise risks from within agency components and programs for leadership visibility and understanding of agency risk exposure. Identifying an elevating key agency risks requires integrating ERM with programs and processes across the agency and enhances the agency’s ability to manage key threats and opportunities and achieve strategic goals and performance objectives. Kestrel Hawk Consulting provides the expertise and perspective needed to help agencies fully integrate their ERM program with:
-
Strategy Development and Strategic Planning
-
Internal Controls Program
-
Fraud Risk Management Framework
-
Cybersecurity Risk Management Framework
-
Performance Management