100+ years of collective experience
Deep experience in risk management, regulation and financial services, spanning banking, supervision and consulting.
Specialist risk consulting, regulatory advisory and bespoke training for financial institutions, delivered by experienced industry and regulatory practitioners.
Explore our servicesMeet our teamWe bring the perspective of regulators and practitioners together, with a focus on delivering improvements that work in the real world.
Deep experience in risk management, regulation and financial services, spanning banking, supervision and consulting.
First-hand experience of regulatory policy, supervision, senior management and the practical realities of operating financial institutions.
Hands-on delivery of resilience, business continuity and risk and control frameworks within major institutions.
Experience delivering demanding regulatory projects, complex change and targeted remediation to challenging deadlines.
We build on what works, focus on value and avoid reinventing the wheel. Our approach is grounded in resilience by design.
Broad knowledge of banking processes, governance, technology and risk frameworks, supported by trusted professional relationships.
Helping firms design, implement and embed robust, effective frameworks for Operational Risk Management, Operational Resilience, Risk Governance and Third-Party Risk Management.
Risk framework and maturity assessments; regulatory gap analysis; implementation of new requirements; governance and control enhancement; support with supervisory visits, regulatory findings and remediation, including Section 166-related work.
Tailored in-house programmes, Board and executive workshops, practical scenario-based training, regulatory briefings and capability development for risk teams, business leaders and control functions.
From focused Board briefings to firm-wide learning and specialist practitioner workshops, our in-house programmes are tailored to your organisation, regulatory context and practical challenges. Sessions can be delivered virtually or in person, with case studies and exercises where appropriate.
Targeted briefings and interactive workshops for Boards, executive committees and senior managers, focused on oversight, accountability, regulatory expectations and informed challenge.
Examples: Operational resilience responsibilities; third-party risk oversight; operational risk governance; emerging non-financial risks and AI.
Consistent, accessible learning for staff across the organisation, including induction, refresher programmes and annual training to reinforce risk awareness, responsibilities and expected behaviours.
Examples: Annual operational risk awareness; operational resilience; third-party risk management; incident identification and escalation.
Focused, practical sessions designed around specific skills, projects, regulatory developments or identified capability gaps, with worked examples, discussion and exercises.
Examples: Root cause analysis and incident learning; RCSA; risk metrics and KRIs; risk management and AI; scenario testing; TPRM and operational resilience.
International training experience: We have delivered in-house training to regulators and central banks in Canada, the USA, the Middle East and the UK, covering non-financial risk (NFR), operational risk management (ORM) and operational resilience.
Programmes can range from short briefings to half-day or multi-day workshops, designed for your audience and learning objectives.
Discuss an in-house programmeIntegrated support across the disciplines that matter most to resilient, well-governed financial institutions.
Our published and forthcoming work reflects a commitment to advancing risk management through rigorous thinking and real-world application.

Tools, Techniques and Meeting Regulatory Expectations
By Jimi Hinchliffe and Andrew Sheen. A practical guide to integrating operational risk management and meeting regulatory expectations.

Embedding Resilience and Third Party Risk
We are seeing regulators globally introducing Operational Resilience and Third-Party Risk Management requirements into their rulebooks to ensure the safety and soundness of their firms and their financial system. The Book aims to provide a mechanism for firms to enhance their operational resilience by embedding Operational Resilience and Third-Party Risk Management into their risk framework and Discipline.
Endorsements of the 2025 Wiley book by Jimi Hinchliffe and Andrew Sheen.
“An indispensable guide to Operational risk management”
“Pragmatic and actionable, it is an essential read for every risk professional.”
“Such an accessible and enjoyable book, for all risk teams to read and discuss together.”
“An indispensable guide to Operational risk management, masterfully bringing the framework to life while providing much needed and often misunderstood regulatory context. I recommend this book wholeheartedly.”
“Adopting the unique perspective of regulatory experts active in the field since day one, this book provides a much-needed umbrella approach to risk management in an era of increasing fragmentation in the management of non-financial risks. Pragmatic and actionable, it is an essential read for every risk professional.”
“An insightful read for Chief Risk Officers and all risk professionals working in regulated environments. Andrew and Jimi, as former regulators themselves and risk experts, clearly explain how working positively with regulators can improve your risk framework. Such an accessible and enjoyable book, for all risk teams to read and discuss together.”
“A practical guide to building and enhancing operational risk frameworks while considering regulatory requirements, which have significantly evolved over the last few years. The authors draw on their lived experience to provide best practices suited to both new and more experienced practitioners; as well as those interested in the field.”
“I highly recommend this book to anyone with an interest in operational risk, which is ever more important as challenges such as AI and cyber risk grow. It sets out the unique perspectives of two ex-regulators with many years’ experience as practitioners and consultants on how to achieve operational resilience and meet regulatory expectations by implementing a robust and adaptable operational risk framework.”
Our three principals bring together decades of regulatory, banking and advisory experience. Each principal also operates through an independent consulting company. The relevant contracting entity will be identified in the proposal and engagement agreement.

Former FSA and PRA operational risk policy leader, UK representative on international regulatory working groups, and senior operational risk executive at HSBC and Credit Suisse.

Over 25 years’ experience across UK regulation, supervision of major financial institutions, senior banking risk and regulatory affairs roles, consulting and professional training.
NJ Risk and Regulatory Consulting LtdEstablished in 2016 to provide specialist operational risk and regulatory advisory services, with an emphasis on practical, proportionate solutions.
Over 30 years’ banking experience spanning first- and second-line leadership, risk frameworks, enterprise risk, governance, operational resilience and transformation.
NDS Consulting LtdEvery engagement is tailored to the firm's context, priorities and regulatory environment.
Maturity reviews, independent assessments and gap analysis against regulatory expectations and recognised practice.
Framework design, regulatory change programmes, policy and control enhancements, and practical implementation support.
Regulatory visit preparation, response to supervisory findings, remediation plans and independent challenge.
Board-level development, tailored training and facilitated workshops that translate expectations into action.
Selected anonymised engagement examples will be added once approved for publication.
Follow our latest regulatory briefings, forthcoming webinars, new publications and practical perspectives on operational risk, operational resilience, third-party risk management and regulatory compliance.
Details of forthcoming webinars and training events will appear here as they are announced.
New PRA/FCA reporting rules raise major challenges: deciding which incidents to report, defining intolerable harm, and managing detailed material third-party registers.
Read full article →Whether you need independent advice, implementation support or a tailored training programme, we'd welcome a conversation.
Email us at info@jadetcacademy.com to discuss consulting, training or regulatory advisory enquiries.