Who This Is For

You're running a frontier-finance business — a fintech, a crypto fund, a prop shop, an AI-native hedge fund, a stablecoin issuer, a tokenisation platform. You have a real risk surface: market, credit, liquidity, model, operational, fraud, regulatory. And regulators are catching up fast.

You don't want to hire a 12-person risk team modelled on a legacy bank. You need a senior operator who knows exactly what "good" looks like because they built it twice at global institutions — and who now delivers most of the work through an AI-agent stack that compresses what used to be a team-year of effort into weeks.

That's what this is.

Where the Methodology Came From

This isn't a framework lifted from a textbook. It was built from the ground up inside two global institutions, stress-tested against regulators, and refined across two decades of practice.

Credit Suisse — Global Head of Risk Identification

SVP, Group and Divisional risk identification. Built the framework across APAC, EMEA and the US, integrated CCAR-driven US risk identification, and linked ICAAP and ILAAP into the bank's strategic risk planning.

Standard Chartered — Risk Identification Lead

Enterprise Risk Management. Designed and implemented a comprehensive risk identification framework based on COSO and ISO 31000, facilitated workshops with senior stakeholders, ran the pilot and validated the methodology in production.

Zurich Insurance — Solvency II

Implemented central risk modelling and reporting for Zurich (ZIG) under Solvency II, SST and Z-ECM. Led successive releases of the internal model and managed a team of 20–30 spanning front-to-back delivery.

FRM-certified. Mathematical physics background. AIB quantitative risk, derivatives pricing, VaR implementation. Frontline market risk and dealing experience across MM, FX, options, futures and OTC.

The Methodology

Six Phases from Foundation to Continuous Improvement

The same framework that worked inside a G-SIB — now compressed by AI agents and sized for a frontier firm.

1
Foundation Setting

External context (PESTLE), internal environment and risk culture assessment, risk criteria, risk appetite, building the starting universe.

2
Dual-Track Identification

Top-down SWIFT workshops and Delphi method. Bottom-up with specialist sub-processes. Mandatory reconciliation and enterprise portfolio view.

3
Assessment & Prioritisation

Four-dimensional scoring. Multi-dimensional impact. Data quality ratings. Bow-tie analysis for critical risks. Cost-benefit with ALARP.

4
Documentation

Living risk inventory with full audit trail. One-page risk profiles for every material risk. KRIs with RAG thresholds. All generated and maintained through AI agents.

5
Integration

Direct linkage to ICAAP/ILAAP/CCAR scenario design, strategic planning, Board reporting, and regulatory submissions.

6
Ongoing Cycle

Quarterly re-identification. Event-driven updates. Annual full re-identification. Continuous scanning by AI agents between cycles.

Aligned to 16 regulatory frameworks

BCBS PRA SS31/15 Fed SR 15-18 OCC EBA ECB FCA ISO 31000 ISO 31010 COSO ERM AMLD6 DORA MiCA

How AI Agents Change the Economics

At a legacy bank, this methodology was run by a team. Today a senior operator plus an orchestrated agent stack does most of the same work — faster, cheaper, and more consistently.

📝

Drafting & Documentation

Risk taxonomies, risk profiles, control narratives, policy drafts, Board-pack sections, regulatory submission language — drafted by agents, edited by the senior operator.

🔍

Regulatory Scanning

Continuous monitoring of regulator publications, enforcement actions, peer disclosures and market events — surfaced as prioritised change deltas instead of a quarterly catch-up.

📊

Scenario Generation

Stress-test scenarios, reverse-stress scenarios and narrative construction generated against your actual portfolio, business model and risk appetite — in hours, not weeks.

📈

Model & VaR Review

Derivatives pricing, VaR methodology, backtest analysis and model documentation reviewed with agent-assisted comparison against regulator-grade standards.

🔗

Control Mapping

Risk-control mapping, gap analysis, bow-tie construction and KRI design — with agents doing the legwork and the senior operator making every judgement call.

🧠

Judgement Stays Human

The senior operator owns every material decision, every stakeholder conversation, and every call that matters. Agents do the volume work. Humans do the judgement work.

How We Work Together

Every engagement is contract, remote and globally available. No on-site, no subcontractors, no handover to juniors.

Free Resources

The full methodology is published openly. Self-serve first; talk to us if you want someone to operate it for you.

Self-Assessment

27 questions. 10 minutes. Find out where your risk identification process is strong and where supervisors or auditors would find weaknesses.

Score Your Process
📦
Free Toolkit

The complete methodology: 16-chapter book, 31-tab Excel template pack, AI prompt library, and agent definition.

Download Free
📚
The Book

Bank Risk Identification: The Complete Methodology. 200+ pages covering every phase, with worked examples and regulatory mapping.

Learn More

The Evidence

179 Bank Failures. One Recurring Problem.

In every case, the risk was identifiable before the loss materialised. We studied every one and built a methodology to prevent the next.

179
failures studied
10
failure modes
$2.3T
aggregate losses
6
decades
35
countries

Book a discovery call

30 minutes. Remote. No pitch — just a conversation about your risk surface and whether EON is the right fit.

Book a Discovery Call