We are a company specialized in advisory services for corporate risk management and in the development of technological solutions (Tech Services and RegTech) mainly dedicated to the banking and financial sector.

The company is linked to both Banks and private professionals.

For over 20 years we have been supporting our counterparts in dialogue and discussions with the Supervisory Authorities, with particular reference to governance and internal control issues.

We support all types of intermediaries and supervised entities from the banking and financial system, characterized from heterogeneous business models.

---

Our Strengths

The organization is divided into area and divisions functionally sapared, to offer a variety of services capable of meeting all needs in terms of internal control and compliance, while ensuring independence and specialization.

---

Internal Audit

The function of Internal Audit it is independent from any other company function.
It is organized inAudit Area, divided into two divisions:

• Audit – Banks;
• Audit – Intermediaries.

The function has obtained the Quality Assurance certification on the compliance of its activities with the International Standards of the Internal Audit Profession (IIA – IASB).

Our methodologies are based on industry best practices and supervisory guidelines, integrating:

• Quantitative indicators and qualitative analysis;
• Remote and on-site inspections;
• Evaluations, judgments and related corrective actions.

---

Regulatory Compliance Services

This area is dedicated to the management of the risk of regulatory non-compliance and is divided into:

• Compliance Division & AML;
• Data Protection Officer (DPO).

The main activities include:

• Impact analysis of the new legislation;
• Regulatory alert;
• Identification and assessment of risks and organizational measures;
• Monitoring and follow-up of corrective actions;
• On-site verification activities;
• Consulting and support at various company levels;
• Preparation of information flows for top management;

The services are completed by activities of regulatory assistance, to support the definition of governance and internal control systems.

---

Risk Governance Services

Area Risk Governance Services is divided into two specialized divisions:

• ICT and Security Risks Division;
• Risk Management Division.

The activities are aimed at the integrated management of corporate and ICT risks and include:

• Collaboration in defining government policies and risk management processes;
• Support in the development and maintenance of risk measurement and control systems;
• Constant monitoring of the evolution of corporate risks;
• Consulting and assistance to company management for informed decisions;
• Preparation of structured information flows to support governance.

Of particular note are all the services provided in the area of ​​cybersecurity risk management, through outsourcing or consulting and support services dedicated to risk management and cybersecurity, responding to a need destined to become essential for any company, organization, or institution.

---

Consulting and Tech Services

The Area is divided into:

• On-demand consultancy;
• Tech Services (RegTech).

We provide personalized consulting support for specific projects, covering all organizational and regulatory compliance needs arising from regulatory changes or internal needs.

Thanks to over twenty years of experience, we invest in the development of solutions RegTech which integrate compliance needs with the potential of the most advanced technologies, includingartificial intelligence.