Services/Risk Advisory

Risk Advisory

We develop practical risk management capabilities that inform real decisions, clarify exposure, and enable organisations to manage uncertainty and pursue opportunity with confidence.

Abstract image representing risk and opportunity

Risk as insight, not a barrier

Too often, risk management becomes a periodic exercise or a control function. We take a different approach: practical risk management that supports decisions, every day.

We embed clear principles and consistent processes, build organisational capability, and create a culture where risk is discussed openly.

We focus on the interdependencies between risks, showing how they interact, compound, and cascade across systems, teams, and functions. The result is a clearer view of exposure, fewer surprises under pressure, and leaders who can make informed decisions, prioritise effectively, and pursue opportunity with confidence.

What our clients say

"The work Berwicks delivered to review and align risk across our business led to real improvements in our risk management practices. The benefits have been substantial, including a significant reduction in our insurance premiums."

Director of Global Operations, Petrochemical

“For over 20 years, Berwicks have supported us with consulting services from strategic and executive level down to the operational. There is no better example of the Berwicks effect than the 2020 pandemic where they were invaluable to the Executive Management Team by providing embedded, permanent collaboration.”

Transformation Director, Nuclear Generation

“When I took over as MD, I identified a need for a profound shift in organisational risk to empower and develop my leadership teams. Berwicks provided the programme which has transformed my team at every level. I would recommend them to any organisation.”

Managing Director Technology

Frequently Asked Questions

Who is accountable when an external team runs your programme?
+

You are. Accountability does not transfer. What transfers is the work of running it, and the responsibility for telling you the truth about where it stands. Berwicks reports what is actually happening, including when that is not what you wanted to hear.

What is the difference between project management, programme management and a PMO?
+

A project delivers one thing. A programme delivers several that depend on each other, so the job is managing what happens between them. A PMO does neither. It reports on both. Berwicks runs programmes rather than reporting on them.

What happens to a programme when the person running it leaves?
+

You keep the plan and lose the reasoning. Why things were done that way, what was already tried, who to call before anything moves. The next person spends months working it out again. Berwicks picks programmes up mid-flight and rebuilds that picture quickly.

When should you bring in external programme management?
+

When the programme has got bigger than the person running it, or when the person accountable for delivery also runs the operation it disrupts. Berwicks takes on the running of it so the accountable person keeps the decisions without carrying the load.

How do you know when a programme is in trouble?
+

Dates keep moving. The same risks sit there month after month. Nobody decides anything. If you cannot tell what has changed since the last report, that is your answer. Berwicks gives you an honest read on where a programme actually is.

What does Skills for Justice accreditation mean?
+

Skills for Justice accreditation means our incident command training has been independently assessed against recognised sector standards for content, delivery and assessment. It gives clients confidence that the programme meets an established external benchmark rather than an internally defined one.

What is Bronze, Silver and Gold command training?
+

Bronze, Silver and Gold training develops the distinct skills needed at each level of incident command: Bronze for operational, on-scene response; Silver for tactical coordination; and Gold for strategic direction. Each level is trained separately because the decisions, information and pressures involved are different.

What is the difference between operational, tactical and strategic incident command?
+

Operational (Bronze) command manages the immediate response at the scene; tactical (Silver) command coordinates resources and priorities across the wider incident; and strategic (Gold) command sets overall direction, manages external stakeholders and protects the organisation's long-term interests. Each level needs to understand its own remit and how it interfaces with the others.

How do we know whether our emergency response team is properly trained?
+

Training is properly embedded when your team can demonstrate command, coordination and decision-making under realistic pressure, not simply when a course has been completed. We assess this through structured exercises and independent evaluation against defined performance criteria, so you have evidence rather than assumption.

How often should emergency response personnel receive training?
+

This depends on role, turnover and how frequently real incidents occur, but most high-hazard organisations need refresher training and exercising at least annually, with more frequent practice for command roles. We can help set a training and exercise cycle appropriate to your risk profile.

How should critical infrastructure companies prepare for cyber-related operational disruption?
+

Assume it becomes an operational and commercial crisis, not a technical one. Plan for degraded systems, manual workarounds, communications that do not depend on the network, and early Regulator engagement, then rehearse with the executives who will carry it. Berwicks supports the UK nuclear estate, energy and defence clients, and designs cyber simulations that test decision making when the usual tools are gone.

How can a company protect enterprise value during a major operational disruption?
+

Keep senior leaders away from the technical fix and on the consequences. Cash, customers, contracts, supply chain, Regulators and reputation all move faster than the incident itself. Berwicks works alongside leadership teams before, during and after events, holding governance through recovery where value is most often won or lost. We have done this in high consequence industries since 1999, boardroom to frontline.

What should a crisis management team do during the first 24 hours of an incident?
+

Protect life, stabilise the situation, then move the executive team into strategic mode. Set priorities, agree decision rights, build a reliable operating picture and look past the incident to cash, customers, contracts and regulators. During Hurricane Harvey our embedded team spotted a cash flow event holding up roughly $300m of invoicing. Berwicks supports leaders live, not only beforehand.

How do you create a common operating picture during a crisis?
+

One source of truth, a disciplined reporting rhythm, agreed information standards and somebody who owns it. Without that, every function arrives with a different version of events and decisions slow to a crawl. Berwicks builds information management into crisis arrangements then proves it under pressure in exercises. It was central to one client restoring production in 14 days rather than six months.

How should an executive leadership team prepare for a business crisis?
+

Practise together. Technical teams fix technical problems. The executive job is strategic priorities, direction and protecting enterprise value while others handle the incident. Berwicks develops Crisis Management Teams for CEOs and boards, then tests them with realistic scenarios, coaching and accredited training. Our consultants have led people through genuine adversity in the military, emergency services and industry, not just in theory.

How do you test an executive team's response to a cyberattack?
+

Take away the tools they rely on. Berwicks was appointed to run a series of cyber crisis simulations for a high value megaproject, testing response plans plus the alerting and information systems bought specifically for use when networks are down. Cyber turns commercial fast, hitting production, customers, cash and regulators. We test the business decisions, not the firewall.

How do you conduct a crisis simulation for an executive team?
+

Start with the risks that could genuinely hurt the business, then design a scenario forcing real trade-offs with incomplete information. No script reading. Berwicks designs and runs tabletop, live and full-scale simulations, applying pressure through media, regulators, staff and third parties. We debrief honestly and tell you what we saw. The friction it exposes is the whole point.

How can an independent crisis management review identify gaps in our current plans?
+

An outside team sees what familiarity hides. Berwicks combine governance analysis, leadership interviews, operational observation and cultural insight to show how risk really works in your business, not how the paperwork says it does. You get an exposure view, a capability assessment, the material gaps and prioritised recommendations. Low cost, light touch and valuable in its own right.

What should a corporate crisis management plan include?
+

Clear decision accountability, defined roles, escalation triggers, a way to build one operating picture and a route from response into recovery. Responses fail when individuals aren't accountable. Berwicks designs crisis and incident management arrangements from control room roles up to board level, then exercises them to build confidence so people can actually deliver a capable response when it counts.

How do I know whether my company is adequately prepared for a major crisis?
+

If your executive team has never made hard decisions together under pressure, your plan is still an assumption. Berwicks runs an independent Risk and Crisis Management Review looking at people, plans, governance, information flow and decision rights, then tests them against your real risk profile. You get an honest view of the gaps and what to fix first. If you are in good shape, we say so.

Let’s work together

We reduce uncertainty and move forward with confidence. If you’re navigating risk, resilience or delivery under strain, let’s talk.

About us
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.