Operational Resilience

Redefining your purpose, aligning your organisation, prioritising your projects: transformations are multiplying, yet often struggle to materialise. Willing translates your strategic directions into operational roadmaps to secure the achievement of your objectives.

Our approach

Our teams, specialised in risk management, compliance, and internal control, support organisations through their transformations with an integrated, pragmatic approach geared towards value creation.

Bringing together professionals with diverse and recognised sector expertise, our teams combine a strong understanding of business challenges, mastery of regulatory frameworks, and a genuine capacity for innovation. We work to strengthen resilience, enable robust decision-making, and turn risk into a driver of trust and sustainable performance. Our conviction: effective risk management is a catalyst for transformation, supporting stronger governance and responsible growth.

Your challenges

Strengthening resilience

to protect digital assets and ensure the security of sensitive data.

Ensuring continuous monitoring

to respond to evolving regulatory requirements through specialist expertise.

Adapting culture

to optimise digital transformation.

Anticipating unforeseen and critical resource unavailability

that could affect the organisation.

Fighting corruption and fraud

to maintain trust, safeguard assets, and prevent the risk of sanctions.

Securing third-party relationships

to ensure continuity and protect reputation.

Integrating sustainability into strategy

to meet social regulatory requirements.

Adopting a forward-looking, strategic approach

to respond in real time to any disruption (economic and geopolitical tensions).

Our expertise

To support our clients in navigating the growing complexity of their environment, we have built our offering around eight complementary areas of expertise, designed to deliver robust, agile risk management, compliance, and internal control frameworks that create value.

Strategy & Risk Governance

We help define a tailored strategy, structure governance bodies, and formalise policies and procedures for risk management aligned with the organisation’s ambitions.

Internal Control Diagnostic

We conduct an in-depth assessment of the effectiveness of permanent controls and formulate targeted recommendations, supported by implementation assistance.

Business Continuity & Crisis Management

We develop and maintain business continuity arrangements (BCP, DRP) and build crisis management plans to strengthen resilience in the face of major events.

Outsourcing of Risk and Compliance Functions

We take charge of structuring, organising, and steering the operational delivery of key functions (risk, compliance, internal audit, etc.), through flexible and secure models.

Risk Management System

We support the mapping of risks, the definition of assessment methods, and the implementation of action plans tailored to the organisation’s priorities.

Regulatory Compliance

We assess the level of compliance with applicable requirements (SAPIN 2, GDPR, DORA, IDD, etc.) and define programmes tailored to our clients’ specific needs and maturity level.

Training & Awareness

We design targeted training programmes, from top management to operational teams, to embed a lasting risk culture within organisations.

Risk & Compliance Management Tools

We support the selection, design, and deployment of technology solutions tailored to our clients’ needs: ERM, GRC, compliance monitoring, or control tools.

Our Scope of Work

  • Strengthening the internal control framework
  • Selecting and implementing a risk management information system
  • Deploying a business continuity plan
  • Assessing project and investment management
  • Anti-corruption framework
  • Managing third-party relationships

Our experts

Complementary expertise

A project in mind?

Our team is here to help.

Strategy & Risk Governance

  • Defining a risk management strategy aligned with the organisation’s ambitions
  • Reviewing and optimising risk governance
  • Developing and updating risk management policies, charters, and procedures
  • Defining lines of defence and clarifying roles across key functions
  • Maturity analysis and benchmarking of existing frameworks
  • Integrating ESG and non-financial considerations into risk governance
  • Alignment with international standards
  • Supporting the transformation of frameworks in the context of reorganisations or mergers

Internal Control Diagnostic

  • Conducting internal control audits
  • Assessing the design and operational effectiveness of key controls
  • Identifying risk areas and providing recommendations
  • Benchmarking existing frameworks
  • Supporting the implementation of corrective action plans
  • Optimising risk coverage
  • Reviewing the quality of the permanent control framework
  • Supporting the professionalisation of internal control stakeholders

Business Continuity & Crisis Management

  • Conducting Business Impact Analyses and identifying critical activities
  • Developing and updating Business Continuity and Disaster Recovery Plans
  • Defining backup strategies
  • Building crisis management frameworks
  • Running crisis units and developing operational scenarios
  • Designing and running crisis exercises and continuity tests
  • Reviewing and assessing the maturity of existing frameworks
  • Raising awareness and training teams in emergency response best practices

Outsourcing of Risk and Compliance Functions

  • Outsourcing the risk, compliance, or internal audit function (full-time or part-time)
  • Providing experienced professionals (Risk Manager, Compliance Officer, Internal Auditor, etc.)
  • Structuring and running the governance of outsourced functions
  • Defining roadmaps, producing reporting, and steering key indicators
  • Designing and implementing control, compliance, or internal audit plans
  • Drafting and updating related policies, procedures, and mappings
  • Supporting change management and the operational embedding of frameworks
  • Managed reversibility to ensure a smooth transfer of know-how

Risk Management System

  • Initial risk mapping or updates to existing risk maps
  • Running risk scoring workshops and risk reviews with key stakeholders
  • Prioritising risks and identifying key areas for mitigation
  • Developing tailored treatment plans
  • Implementing dashboards to monitor risks and action plans
  • Alignment with international standards
  • Integrating risk management into strategic and budgetary planning cycles

Regulatory Compliance

  • Conducting compliance diagnostics and identifying gaps
  • Defining and deploying compliance programmes tailored to the organisation’s size and challenges
  • Developing mappings of regulatory obligations
  • Designing policies, procedures, control frameworks, and regulatory documentation
  • Implementing steering and monitoring frameworks for regulatory requirements
  • Supporting relations with supervisory authorities and audit preparation
  • Regulatory monitoring and continuous adaptation of frameworks

Training & Awareness

  • Developing risk culture awareness and training strategies
  • Designing tailored learning pathways
  • Delivering training on the fundamentals of risk, compliance, and internal control
  • Advanced modules for senior managers, committee members and key roles
  • Sessions focusing on major emerging risks
  • Serious games, role-play scenarios, collaborative workshops and crisis exercises
  • Training in risk management tools and methods
  • Measures to assess the impact and uptake of training

Risk & Compliance Management Tools

  • Defining the functional and technical requirements relating to risk and compliance management
  • Benchmarking, guidance on selecting and formalising specifications for GRC tools
  • Support with the roll-out and configuration of solutions
  • Integration of tools into the organisation’s existing processes and information systems
  • Definition of data models, workflows, metrics and associated reporting
  • Data recovery and migration of historical data
  • Change management and user training
  • Optimising the use of existing tools and conducting a performance audit of current solutions