Risk analysis
Identification of threats, vulnerabilities and impact, and assessment of each risk according to its likelihood and consequences.
DRYKO Risk & Advisory
Risk consulting
We identify and assess the organisation's risks and bring order to how they are managed: risk analysis, regulatory compliance and business continuity.
The challenge
Regulatory obligations are growing, and so are operational risks. Many companies have scattered policies, plans that nobody has tested and responsibilities that have not been assigned.
When an audit, an inspection or a serious disruption arrives, that lack of order becomes a problem.
What we do
01
02
Compliance
Identification of the applicable obligations, compliance risk map, policies and controls.
03
Business continuity plan (BCP)
Critical processes, maximum tolerable downtime and alternatives to keep operating.
04
Disaster recovery plan (DRP)
Procedures to restore systems and data after a serious incident.
Deliverables
Corporate risk map with impact and likelihood ratings.
Map of compliance obligations and risks, with policies and controls.
Documented business continuity and disaster recovery plans.
Report on the testing of the plans, with proposed improvements.
Who it is for
01
Companies that need to bring order to their risk management.
02
Organisations preparing for an audit, a certification or a corporate transaction.
03
Sectors with continuity or information security obligations.
Frequently asked questions
What is the difference between a BCP and a DRP?
The business continuity plan (BCP) defines how to keep operating during a disruption. The disaster recovery plan (DRP) focuses on restoring systems and data. The two complement each other.
Do you implement criminal compliance programmes?
We prepare the risk analysis, policies and controls, and work alongside the company's legal advisers, who assess the legal aspects.
How are the plans tested?
Through simulation exercises and agreed technical tests. The results are documented and used to adjust the plan.
Can you support us on an ongoing basis?
Yes. We can support the person responsible within the organisation on a regular basis, with scheduled reviews and assistance with decisions.
Other areas in this division
Corporate and executive security
Corporate security, personal and travel risk, and coordination with authorised providers.
About this serviceDigital risk and cybersecurity
Vulnerabilities, online exposure, impersonation and incident response.
About this serviceCorporate advisory
Advice to management, family wealth and family offices on risk and technology decisions.
About this serviceNote. Personal protection services are provided exclusively through authorised private security companies registered with the Spanish Ministry of the Interior, with which the client contracts directly.
Let us discuss your case
Tell us about your situation. Every enquiry is handled in confidence and, if you prefer, we will sign a non-disclosure agreement before the first meeting.
Request a meeting