All tours/For the Head of Risk, COO or Head of Trust

A week inside the operating model

A Monday morning resilience check at Ardennes Trust Company surfaces twelve structures with no documented deputy. By Wednesday afternoon a senior administrator goes on unplanned medical leave, a £180,000 client distribution is found unposted, key-person risk re-rates above appetite, and an IAM offboarding gap is discovered from an internal role change eighteen months ago. Watch one operational event stitch across People & Conduct, Operational Resilience, Technology & Information and Strategic / Concentration — without a single regulatory rule in sight.

Auto-play this journey
← / → to navigate
Stage 1 of 5·Risk Register
Narrated

Single-person dependency flagged on routine resilience check

A trust officer notices twelve structures have no documented deputy on the cover matrix.

Helena Marquand · Senior trust officer, first line Mon 15 Jun 2026, 09:18 BST
Read along · Helena Marquand

It is Monday morning at Ardennes Trust Company. Helena Marquand, a senior trust officer, is working through the quarterly operational-resilience check. She opens the cover matrix and finds twelve active structures listed against a single administrator, Ravi Okonkwo, with no documented deputy and no recent cross-training entry. None of these structures are non-compliant — every CDD review is in date, every fee is correctly raised — but the operating model has a clear single point of failure. She raises a watch-list item against RSK-014, the firm's key-person dependency risk, so it cannot be lost in her inbox.

Human action

Helena opens the cover matrix, exports the twelve-structure list, and writes a one-paragraph rationale for the flag.

RiskAlign did

RiskAlign links the watch-list item to RSK-014 under the People & Conduct taxonomy branch, attaches the cover-matrix snapshot, and surfaces it on the second-line review queue — read-only, nothing in the register is changed yet.

What this saves you

Operating-model fragility surfaces from routine work, not after an incident. One flag, one queue, named owner.

Cover-matrix export + quarterly resilience-check worksheet · sha256:9c2f…a014 (illustrative)
What's next

See the same scenario from a different angle?

Ardennes is a fictional Jersey trust company. All names, timestamps, hashes and figures in this tour are illustrative.