Risk & Regulation 

Risk transformation 

Risk transformation is a critical aspect of modern business strategy. How do you ensure that you are effectively identifying, assessing, and managing risks? We help companies with robust internal controls and thorough risk assessments to be in control and to ensure compliance with regulatory requirements, for example for SOx, J-SOx, and NIS2. How PwC can support you: 

• internal audit services; 
• optimising the risk and control framework with our in-house developed Integrated Risk & Control Management software, IRMA; 
• risk assessment and management; 
• governance, risk and compliance (GRC) solutions;
• technology integration for improved and efficient risk management; 
• offshore support with audit execution, assessment and testing services; 
• building a risk-conscious corporate culture with our human-led & tech-powered approach; 
• providing relevant insights in risk and control environments by leveraging (in-house built) AI tooling. 

For risk transformation, please contact:

• Steven Hordijk 

Modernisation of internal audit 

A flexible and digitally-led end-to-end audit lifecycle not only reveals past events, but provides a dynamic, up-to-date view of your risk landscape. We ensure that your IAF evolves with your organization, so that it provides assurance, generates insights and supports the growth of your business. How PwC can support you: 

• analyzing and optimizing your internal audit function, including strategic plan, assurance map and (pre-) external quality reviews; 
• (partial) outsourcing of your internal audit function; 
• executing your annual audit plan (operational, IT, project/program, financial and ESG internal audits); 
• subject matter experts to strengthen your audit team; 
• digitizing internal audit through GenAI, data analysis and process mining; 
• advising on and applying technology to streamline the internal audit process. 

For internal audit, please contact:

• Jan Driessen
• Anoep Singh

Staying Compliant with Complex Regulations 

Many (financial) companies have to deal with a multitude of complex regulations that require a transformation. Regulators and supervisors are demanding compliance with laws and regulations and quantification of risks, and are placing increasing demands on reporting and (data) governance of processes. How do you ensure that your company goes through the regulatory transformation of skills, processes and systems to remain compliant?

We support clients with deep technical expertise combined with execution power in the field of important new laws and regulations. We support our customers with, among other things: 

• interpretation of regulations; 
• collecting, processing and analysing data; 
• developing and validating predictive risk models for financial risk and non-financial risk (e.g. IRB, Cyber, ESG); 
• designing and implementing automated (legal) reporting to support decision-making and achieve compliance. 

Our main areas of expertise 

Prudential regulation of banks (e.g. CRR II/III and CRD V & VI and ESG), accounting and reporting standards for financial institutions (i.e. IFRS 9) and risk management around Environmental, Social & Governance (ESG).

For regulatory transformation, please contact:

• Fayaaz Adalat