Enterprise-wide Risk Assessment (EWRA) / A Rotunda product

A governed EWRA app, from first response to final sign-off.

Rotunda brings methodology, evidence, scoring and oversight into one consistent process—without turning your assessment into an IT programme.

Try the demo Book a walkthrough
Risk domainsControls & residual riskSanctionsWorkflowComparisonReporting

Standalone from day one

Start without an integration project.

Log in, enter aggregate information about the firm and produce a structured first assessment. For a straightforward firm, initial data entry can take around 30 minutes. Enterprise-wide risk assessment is the product category; some financial-services guidance uses business-wide risk assessment, while legal practices generally use firm-wide risk assessment.

The familiar route

Six months of requirements. Six figures of consultant costs. One spreadsheet already going stale.

We hear the same story: an organisation hires expensive consultants, spends months documenting requirements and receives a complicated Excel workbook that starts going stale as soon as it is delivered. We have been there.

EWRA works out of the box.

Start with a tested framework, configure it yourself and spend budget on the assessment rather than a long implementation. Less setup time and a more predictable cost.

  1. 01Log in

    Open a secure workspace for your firm and choose the relevant financial services or legal sector configuration.

  2. 02Enter aggregate data

    Answer structured questions using information you already hold. No data pipeline or systems build is required.

  3. 03Review and report

    Check the rationale, challenge the scoring and export the assessment and underlying data when you are ready.

Configure it yourself

Adapt the framework without a rebuild.

Tune the settings available to your organisation as its risk appetite, methodology or operating model changes. Routine configuration should not require a software change request or a new implementation fee.

Your data remains yours

Private by default. Portable when needed.

Your detailed assessment is visible only to authorised users in your organisation. Download your own assessment data and reports at any time.

Anonymous benchmarking

Compare the outcome, not the firm.

Only anonymous, category-level overall results are used for peer benchmarking. Narrative answers, evidence and identifiable firm-level data are not used for the comparison.

YOUR CATEGORY RESULTCustomer risk · Moderate
ANONYMOUS PEER RANGEModerate–High

Transparent annual pricing

One annual plan. Based on entity reviews, not seats.

Every plan includes 12 months of access, unlimited internal users and the complete assessment workflow. No per-user charges and no integration project required.

Annual Review · Founding price

£2,000+ VAT / year

One entity. One assessment cycle each year.

  • 12 months of access
  • Unlimited internal users
  • Reports, exports and year-on-year comparison
Group Review · Founding price

£4,000+ VAT / year

Up to three entities. One governed view.

  • Consolidated group results
  • Cross-entity comparison
  • Unlimited internal users
  • £750 + VAT per additional entity
Integrated

Fixed quotein addition to Group Review

For established data environments.

  • Everything in Group Review
  • Optional automated data feeds
  • Integration scoped separately

Founding-customer pricing. The prices shown apply to your first 12-month term. Standard renewal prices are £2,500 + VAT for Annual Review and £5,000 + VAT for Group Review, confirmed before the next assessment cycle.

The data comes first

You must be wondering: where is the AI?

It is the cherry on top, not the reason to digitise your assessment.

Most of the benefit comes from replacing scattered documents with structured, consistent data. Rotunda keeps answers, scores and conclusions in a machine-readable format, so each assessment leaves a richer record behind. The next review becomes easier to compare, challenge and improve, creating a useful data flywheel: better inputs, clearer trends and stronger decisions.

Machine-readable CSV and Markdown results can be exported for use with LLMs and other analysis tools approved by your organisation. Rotunda also offers optional AI assistance to help authorised users interrogate results, identify themes, draft summaries and give the final narrative a quick polish. It supports the practitioner; it does not invent evidence, set the firm’s risk appetite or replace accountable judgement.

  • 01Comparable year-on-year data
  • 02Machine-readable for approved tools
  • 03Human review stays in control
01 / Risk domains

Build a complete view of financial crime risk.

Use structured questionnaires across customers, products, geography, channels and emerging risks. Each response carries its supporting rationale and evidence, so reviewers can follow how the conclusion was reached.

  • Defined factor and domain scoring
  • Guidance held alongside each question
  • Evidence linked to the relevant response
02 / Controls & residual risk

Connect control effectiveness to the risk it changes.

Evaluate control design and operating effectiveness against clear criteria. Rotunda calculates residual risk consistently while preserving the underlying judgements for review.

  • Design and operating effectiveness scores
  • Transparent calculation logic
  • Documented overrides where judgement is required
03 / Sanctions risk assessment

Assess sanctions risk on its own terms.

Run a separate sanctions risk assessment without losing the firm-wide view. Keep sanctions-specific exposure, controls and conclusions distinct from the wider financial crime methodology.

  • Dedicated sanctions factors and questions
  • Separate scoring and governance record
  • Clear output for specialist review
04 / Review & challenge

Give every decision an owner and a record.

Route assessments through preparation, review, second-line challenge and approval. Comments remain attached to the relevant answer, with dates and decisions preserved in the audit trail.

  • Role-based stages and clear ownership
  • Comments resolved in context
  • Time-stamped review and sign-off history
05 / Year-on-year comparison

Explain what changed, not just the latest score.

Compare current and prior assessments side by side. Focus review time on material changes in exposure, controls and residual risk, with the reason recorded.

  • Prior-year responses retained
  • Changed answers and scores highlighted
  • Movement commentary ready for governance packs
06 / Audit trail & reporting

Produce the record senior management needs.

Export a clear report of the methodology, inputs, scoring, challenge and conclusions. Use CSV for further analysis or Markdown with approved LLM tools — yes, we know your LLM likes that — and retain the complete audit history.

  • PDF assessment report
  • CSV and Markdown data exports
  • Complete audit trail of edits, reviews and approvals

See the workflow

Take a closer look at Rotunda.

Explore the demonstration environment or arrange a focused walkthrough.

Try the demo Book a demo