100+ years of collective experience
Deep experience in risk management, regulation and financial services, spanning banking, supervision and consulting.
Independent expertise · Practical solutions
Better risk management starts with real-world experience.
Specialist risk consulting, regulatory advisory and bespoke training for financial institutions, delivered by experienced industry and regulatory practitioners.
Explore our servicesMeet our team
Why JADEtc?
Regulatory insight. Industry experience. Practical solutions.
We bring the perspective of regulators and practitioners together, with a focus on delivering improvements that work in the real world.
Regulatory and industry perspectives
First-hand experience of regulatory policy, supervision, senior management and the practical realities of operating financial institutions.
Operational resilience in practice
Hands-on delivery of resilience, business continuity and risk and control frameworks within major institutions.
Delivery under pressure
Experience delivering demanding regulatory projects, complex change and targeted remediation to challenging deadlines.
Proportionate, effective solutions
We build on what works, focus on value and avoid reinventing the wheel. Our approach is grounded in resilience by design.
Specialist capabilities and networks
Broad knowledge of banking processes, governance, technology and risk frameworks, supported by trusted professional relationships.
What we do
Consulting and training, grounded in practice.
Helping firms design, implement and embed robust, effective frameworks for Operational Risk Management, Operational Resilience, Risk Governance and Third-Party Risk Management.
01 / ADVISORY
Consulting & Regulatory Advisory
Risk framework and maturity assessments; regulatory gap analysis; implementation of new requirements; governance and control enhancement; support with supervisory visits, regulatory findings and remediation, including Section 166-related work.
02 / DEVELOPMENT
Bespoke Training & Board Development
Tailored in-house programmes, Board and executive workshops, practical scenario-based training, regulatory briefings and capability development for risk teams, business leaders and control functions.
In-house training
Training built around your people and your priorities.
From focused Board briefings to firm-wide learning and specialist practitioner workshops, our in-house programmes are tailored to your organisation, regulatory context and practical challenges. Sessions can be delivered virtually or in person, with case studies and exercises where appropriate.
01 / LEADERSHIP
Board & Senior Management Training
Targeted briefings and interactive workshops for Boards, executive committees and senior managers, focused on oversight, accountability, regulatory expectations and informed challenge.
Examples: Operational resilience responsibilities; third-party risk oversight; operational risk governance; emerging non-financial risks and AI.
02 / FIRM-WIDE
All-Staff & Periodic Training
Consistent, accessible learning for staff across the organisation, including induction, refresher programmes and annual training to reinforce risk awareness, responsibilities and expected behaviours.
Examples: Annual operational risk awareness; operational resilience; third-party risk management; incident identification and escalation.
03 / SPECIALIST
Ad Hoc & Tailored Practitioner Training
Focused, practical sessions designed around specific skills, projects, regulatory developments or identified capability gaps, with worked examples, discussion and exercises.
Examples: Root cause analysis and incident learning; RCSA; risk metrics and KRIs; risk management and AI; scenario testing; TPRM and operational resilience.
International training experience: We have delivered in-house training to regulators and central banks in Canada, the USA, the Middle East and the UK, covering non-financial risk (NFR), operational risk management (ORM) and operational resilience.
Programmes can range from short briefings to half-day or multi-day workshops, designed for your audience and learning objectives.
Discuss an in-house programmeFaculty-led training
Training Delivered by JADEtc Academy Faculty
JADEtc Academy faculty bring extensive practical experience in financial services regulation, operational risk management, operational resilience and third-party risk management. Our faculty also deliver specialist professional training through established international providers, including CTP and Risk Learning. These programmes combine regulatory insight, real-world case studies and practical application.
Explore training programmes and upcoming dates directly with the providers:
Programme details, registration and bookings are managed by the respective training providers.
Our specialisms
Focused expertise across non-financial risk.
Integrated support across the disciplines that matter most to resilient, well-governed financial institutions.
Operational Risk Management
Operational Resilience
Third-Party Risk Management
Regulatory Advisory & Compliance
Risk Governance & Culture
AI Governance & Emerging Risk
Books & thought leadership
Ideas grounded in practical experience.
Our published and forthcoming work reflects a commitment to advancing risk management through rigorous thinking and real-world application.
Published · Wiley 2025
Integrated Operational Risk Management
Tools, Techniques and Meeting Regulatory Expectations
By Jimi Hinchliffe and Andrew Sheen. A practical guide to integrating operational risk management and meeting regulatory expectations.
Related webinar: Rethinking Integrated Operational Risk Management — Jimi Hinchliffe and Andrew Sheen, hosted by Clew. Watch the webinar ↗
Forthcoming · 2027
Holistic Enterprise Risk Management
Embedding Resilience and Third Party Risk
We are seeing regulators globally introducing Operational Resilience and Third-Party Risk Management requirements into their rulebooks to ensure the safety and soundness of their firms and their financial system. The Book aims to provide a mechanism for firms to enhance their operational resilience by embedding Operational Resilience and Third-Party Risk Management into their risk framework and Discipline.
Insights from our books
Ideas worth exploring
Selected perspectives from Integrated Operational Risk Management (Wiley, 2025) by Jimi Hinchliffe and Andrew Sheen. Practical ideas to challenge assumptions and inform better risk decisions.
Control trade-offs
“As the old saying goes, you can never have too much of a good thing. This may be true for guitars, cars and even handbags, but too much control can be inefficient, costly, and counterproductive.”Hinchliffe & Sheen · Wiley (2025), p. 164
Good ORM balances the benefits, costs and unintended consequences of controls.
GRC technology
“The framework leads the GRC system that supports it, not the other way around.”Hinchliffe & Sheen · Wiley (2025), p. 208
Demonstrating the value of ORM
“If operational risk managers cannot demonstrate their value in improving business outcomes, their role could be marginalised.”Hinchliffe & Sheen · Wiley (2025), p. 241
The measure of ORM is better outcomes, not simply completed processes.
Source: Jimi Hinchliffe and Andrew Sheen, Integrated Operational Risk Management: Tools, Techniques and Meeting Regulatory Expectations (Wiley, 2025), pp. 164, 208 and 241.
Praise for Integrated Operational Risk Management
What industry experts say
Endorsements of the 2025 Wiley book by Jimi Hinchliffe and Andrew Sheen.
“An indispensable guide to Operational risk management”
“Pragmatic and actionable, it is an essential read for every risk professional.”
“Such an accessible and enjoyable book, for all risk teams to read and discuss together.”
Read all five endorsements
“An indispensable guide to Operational risk management, masterfully bringing the framework to life while providing much needed and often misunderstood regulatory context. I recommend this book wholeheartedly.”
“Adopting the unique perspective of regulatory experts active in the field since day one, this book provides a much-needed umbrella approach to risk management in an era of increasing fragmentation in the management of non-financial risks. Pragmatic and actionable, it is an essential read for every risk professional.”
“An insightful read for Chief Risk Officers and all risk professionals working in regulated environments. Andrew and Jimi, as former regulators themselves and risk experts, clearly explain how working positively with regulators can improve your risk framework. Such an accessible and enjoyable book, for all risk teams to read and discuss together.”
“A practical guide to building and enhancing operational risk frameworks while considering regulatory requirements, which have significantly evolved over the last few years. The authors draw on their lived experience to provide best practices suited to both new and more experienced practitioners; as well as those interested in the field.”
“I highly recommend this book to anyone with an interest in operational risk, which is ever more important as challenges such as AI and cyber risk grow. It sets out the unique perspectives of two ex-regulators with many years’ experience as practitioners and consultants on how to achieve operational resilience and meet regulatory expectations by implementing a robust and adaptable operational risk framework.”
JADEtc Academy
Experienced practitioners. Personal engagement.
Our three principals bring together decades of regulatory, banking and advisory experience. Each principal also operates through an independent consulting company. The relevant contracting entity will be identified in the proposal and engagement agreement.
Andrew Sheen
View full profile →Operational risk & regulatory policy
Former FSA and PRA operational risk policy leader, UK representative on international regulatory working groups, and senior operational risk executive at HSBC and Credit Suisse.
Consulting companyAJ Sheen Consulting Limited
Dr Jimi Hinchliffe
View full profile →Risk, regulation & training
Over 25 years’ experience across UK regulation, supervision of major financial institutions, senior banking risk and regulatory affairs roles, consulting and professional training.
Consulting company
NJ Risk and Regulatory Consulting LtdEstablished in 2016 to provide specialist operational risk and regulatory advisory services, with an emphasis on practical, proportionate solutions.
NJ Risk and Regulatory Consulting LtdEstablished in 2016 to provide specialist operational risk and regulatory advisory services, with an emphasis on practical, proportionate solutions.
Dr David Goodyear
View full profile →Risk governance & transformation
Over 30 years’ banking experience spanning first- and second-line leadership, risk frameworks, enterprise risk, governance, operational resilience and transformation.
Consulting company
NDS Consulting Ltd
NDS Consulting LtdHow we help
Support from diagnosis to delivery.
Every engagement is tailored to the firm's context, priorities and regulatory environment.
Assess & benchmark
Maturity reviews, independent assessments and gap analysis against regulatory expectations and recognised practice.
Design & implement
Framework design, regulatory change programmes, policy and control enhancements, and practical implementation support.
Respond & remediate
Regulatory visit preparation, response to supervisory findings, remediation plans and independent challenge.
Build capability
Board-level development, tailored training and facilitated workshops that translate expectations into action.
Explore our 13 client case studies →
Experience includes eight UK banking entities supported on operational resilience and four banks supported on third-party risk management.
AI, Technology & GRC
JADEtc Academy works with Protecht, a technology partner providing governance, risk and compliance (GRC) solutions, to help organisations understand how technology can support effective risk management. The formal partnership and referral agreement is held by AJ Sheen Consulting Limited. Our GRC advisory services remain independent and client-focused.
Emerging Technology. Evolving Risks. Practical Lessons.
AI, automation, cybersecurity and GRC platforms are transforming financial services. Our technology risk insights examine what happened, why it matters, and what risk managers and Boards should ask. Explore Technology Risk in Focus, AI & GRC Innovation, and our Technology Risk Round-up. Everyone and every system is fallible: effective governance detects, challenges and corrects errors.
AI & CYBERSECURITY · NOVEMBER 2026
AI and Cybersecurity: Does the Advantage Lie with the Attackers or the Defenders?
Does AI favour cyber attackers or defenders? Why the quality and speed of AI-powered detective controls and containment may be decisive.
Read the Insight →QUANTUM, AI & OPERATIONAL RESILIENCE · NOVEMBER 2026
Post-Quantum Cryptography: The Next Y2K Challenge — Are You and Your Critical Third Parties Ready?
The quantum cryptography challenge, six threat scenarios — including AI agent swarms — and the importance of critical third-party readiness.
Read the Insight →AI GOVERNANCE & OPERATIONAL RISK · NOVEMBER 2026
When AI Agents Go Rogue: The Operational Risk and Governance Challenge
What the Hugging Face agent incident and the Bank of England/FCA survey mean for AI governance, control design, operational risk and third-party oversight.
Read the Insight →GRC TECHNOLOGY · PRACTICAL GUIDE
Selecting and Implementing a GRC System: 12 Golden Rules and Pitfalls
Revisiting the 2021 paper by Jimi Hinchliffe and Ariane Chapelle, originally published with Chapelle Consulting — with new commentary on AI-enabled GRC.
Read the guide →TECHNOLOGY RISK IN FOCUS · OCTOBER 2026
Binance's $6.3 Billion Cyberattack: When Security Controls Fail at Scale
A major cyber incident raises questions about transaction authorisation, privileged access, containment and resilience.
Read article →AI & CYBER RISK · OCTOBER 2026
AI Agents and Cyber Threats: When Old Vulnerabilities Meet Machine-Speed Attacks
Indian cyber advisories show how AI agents and insecure APIs can amplify established operational risks.
Read article →TECHNOLOGY RISK ROUND-UP · OCTOBER 2026
Technology Risk Round-up | October 2026
Binance, AI agents, payment API attacks and the evolution of GRC technology: four developments and practical lessons.
Read article →Latest Insight · Operational Risk Management
There Are No Solutions, Only Trade-Offs
The Real Value of Operational Risk Management
Risk management is not about eliminating every risk or maximising controls. It is about understanding trade-offs, enabling informed risk-taking and improving business decisions.
By Jimi Hinchliffe · November 2026
Read the Insight →Latest Insight
What's Going On Here?
The most important question in operational risk management.
Operational Risk Management · Risk Culture
What's Going On Here? The Most Important Question in ORM
Radical uncertainty, imperfect knowledge, groupthink and obedience to authority: why understanding reality matters more than an apparently reassuring risk dashboard.
By Jimi Hinchliffe · November 2026
Read the Insight →Academy Perspectives · Risk Heresy Series
Risk Heresy: Challenging Risk Management Orthodoxy
Provocative, evidence-led perspectives by Dr Jimi M.V. Hinchliffe on the assumptions, incentives and unintended consequences that shape risk management. The first two papers were originally published on Jimi's LinkedIn; their Academy summaries link to the complete originals.
RISK HERESY · SERIES 01
Box-Ticking Matters – The Heresy of Evidence
Why documentation, evidence and well-designed checklists can be central to effective risk management rather than its enemy.
By Dr Jimi M.V. Hinchliffe · Originally published on LinkedIn, 7 November 2025
Read Academy summary →RISK HERESY · SERIES 02
Why Inaction Can Be the Least Risky Option
Challenging the assumption that visible action, more controls and additional governance always reduce risk.
By Dr Jimi M.V. Hinchliffe · Originally published on LinkedIn, 14 January 2026
Read Academy summary →RISK HERESY · AI GOVERNANCE
AI Innovation Is Outrunning Risk Management – The Heresy of Governance
Why innovation, governance and GRC capabilities need to evolve together.
Read article →Regulatory Intelligence
Regulatory Horizon Tracker
Plan ahead with a curated quarterly view of UK, Middle East and other international regulatory milestones in operational risk, resilience, TPRM, governance and AI. Includes direct links to official regulator documents and practical implications.
Explore the Regulatory Horizon →News & insights
Breaking News & Academy Updates
Follow our latest regulatory briefings, forthcoming webinars, new publications and practical perspectives on operational risk, operational resilience, third-party risk management and regulatory compliance.
Explore earlier articles · From the Archive →
LATEST INSIGHT · 13 NOVEMBER 2026
Microsoft’s Global Outage: When a Common Dependency Becomes a Common Point of Failure
Banking communications disrupted across Asia: lessons for operational resilience, third-party concentration, workarounds and impact tolerances.
Read full article →NEW REGULATORY INSIGHT · NOVEMBER 2026
Operational Resilience: The Regulatory Bar Keeps Rising
The FCA’s 11 November feedback, why non-duration impact tolerances raise the challenge for firms of all sizes, and what supervisors expect firms to demonstrate.
Read full article →NEW COMPANION INSIGHT · AI & POWER · NOVEMBER 2026
Could Electricity Become AI’s Biggest Constraint? Elon Musk’s G20 Warning
Musk’s G20 warning of a potential AI electricity shortfall in 2027 — and what physical infrastructure constraints could mean for financial services.
Read companion Insight →NEW INSIGHT · AI & THIRD-PARTY RISK · NOVEMBER 2026
AI’s Hidden Dependencies: Why Power, Politics and Infrastructure Are Becoming Third-Party Risks
Power shortages, geopolitics and data-centre constraints reveal new resilience and concentration risks behind AI and agentic AI services.
Read Insight →HERE’S HOW… GUIDES · NO. 1 · OCTOBER 2026
Here’s How to… Manage a Regulatory Visit
Five practical principles for preparing for, managing and learning from supervisory visits, plus our BSA training programme.
Read the guide →FEATURED INSIGHT · RISK GOVERNANCE
The Three Lines of Defence Are Dead. Long Live the Three Lines!
Jimi Hinchliffe on the updated IIA model, seven lines of defence, training gaps and AI’s potential to transform Second Line challenge.
Read the article →FEATURED TECHNICAL INSIGHT · EBA & ORX TAXONOMIES
Risk Taxonomies: Has the EBA Finally Found a Better Way?
MECE event types, causes versus impacts and why AI, cyber and third-party themes belong in complementary analytical dimensions.
Read Insight →FEATURED PERSPECTIVE · INTEGRATED ORM & NFR
The Nexus of Harm: Integrating Consumer Duty and Operational Resilience
Why avoiding an impact-tolerance breach does not necessarily avoid foreseeable consumer harm — and why ORM should connect both concepts.
Read Academy summary →RISK MANAGEMENT PERSPECTIVES · ORIGINAL ESSAY OCTOBER 2025
Stop Chasing the “Unprecedented Volatility” Frisbee
Resist headline-driven risk management: strengthen controls, resilience, indicators, scenario testing and learning from errors.
Read Academy summary →THIRD-PARTY RISK & RESILIENCE · ORIGINAL ESSAY OCTOBER 2025
“It’s Only a Third Party” Is Not a Defence When You Suffer a Disruption
Critical dependencies, impact tolerances, workable backups, tested playbooks and resilience by design — adapted from Jimi Hinchliffe’s LinkedIn article.
Read Academy summary →FOUNDATIONS OF ORM · ORIGINAL ESSAY OCTOBER 2025
ORM – Back to Basics: 10 Fundamentals Risk Managers Can’t Ignore
Revisit appetite, taxonomy, risk identification, controls, KRIs, incidents and GRC. Adapted from Jimi Hinchliffe’s original LinkedIn essay.
Read Academy summary →NEW REGULATORY INSIGHT · NOVEMBER 2026
Beyond the Regulatory Perimeter: The Direct Oversight of Critical Third Parties
DORA, the UK CTP regime, concentration risk and AI dependencies — and why Boards remain accountable through the three Os of TPRM.
Read article →NEW REGULATORY INSIGHT · OCTOBER 2026
SM&CR Reform: Reducing Red Tape or Reopening the Door to Rolling Bad Apples?
Will simplifying SM&CR undermine safeguards against rolling bad apples? We examine accountability, the evidence of effectiveness, regulatory costs and barriers to competition.
Read article →NEW EXECUTIVE BRIEFING · OCTOBER 2026
FCA AI Good and Poor Practice: What Firms Need to Do Next
An executive summary of the FCA's AI findings, with practical implications for operational risk, resilience and the 3 Os of third-party risk management.
Read executive briefing →RISK HERESY · AI GOVERNANCE · OCTOBER 2026
Risk Heresy: AI Innovation Is Outrunning Risk Management
Is AI moving too quickly, or are governance, risk management and controls failing to keep pace? A perspective on the latest Bank of England and FCA survey.
Read article →FEATURED WEBINAR · 2025
Rethinking Integrated Operational Risk Management
Jimi Hinchliffe and Andrew Sheen discuss integrated operational risk management in a webinar hosted by Clew, complementing their 2025 Wiley book.
FEATURED INSIGHT · OCTOBER 2026
March 2027: A New Era for Operational Resilience and Third-Party Reporting
New PRA/FCA reporting rules raise major challenges: deciding which incidents to report, defining intolerable harm, and managing detailed material third-party registers.
Read full article →Start a conversation
Let's discuss your priorities.
Whether you need independent advice, implementation support or a tailored training programme, we'd welcome a conversation.
Email us at GetInfo@JADETCAcademy.com to discuss consulting, training or regulatory advisory enquiries.