Senior-led advisory for Boards and executive leadership teams across risk, compliance, governance and financial crime.
Start a conversationOur outcome
Regulator Readiness
Clarity in your risks. Simplicity in your controls. Certainty in your outcomes.
True Regulator Readiness is not simply about achieving compliance. It is about creating lasting confidence that your organisation's governance, risk and control framework is effective, operates as intended and consistently delivers the outcomes your Board and Executive Leadership Team expect.
It means knowing where you stand, understanding where weaknesses exist and having the assurance that those weaknesses are being addressed through structured, accountable and Board-directed remediation.
Above all, it means confidence without complacency and readiness without reaction.
Our approach is deliberately outcomes-based. We begin with what your Board needs to achieve, determine whether your existing framework is capable of delivering it, and design and execute the improvements necessary to close the gap.
Strategy-enabling risk
Risk management that supports delivery of business strategy, not one that slows it down.
Lower residual risk
Targeted control and governance uplift that reduces supervisory intensity.
Regulator relationships built on transparency and trust
Open, constructive engagement with your supervisors — where issues are raised early, progress is evidenced, and confidence in your Board and leadership grows over time.
The number one question for every Board
“Are we fully compliant with every law, rule, regulation and code that applies to us?”
Few Boards can answer it with confidence. We help you answer it — with evidence.
Questions worth asking
If your regulator walked in tomorrow, would your evidence prove your controls work — or just that you have them?
Do you want your next regulatory examination to feel seamless, with evidence ready and a Board-led remediation plan already in place?
Does your culture deliver the risk outcomes you are targeting? Culture-by-Design, or Culture-by-Default?
Are you satisfied with how your Board-led risk and regulatory strategy has been executed?
What we do
Better governance. Smarter risk. Stronger business.
We provide senior-level advisory, leadership and hands-on execution across corporate governance, financial and non-financial risk, regulatory compliance, financial crime, data protection, operational resilience and organisational culture.
From Boardroom strategy to operational delivery, we turn complexity into clarity, strengthen organisational capability and deliver meaningful, sustainable outcomes.
The Terrapin Risk Management Framework
Our proprietary approach connects business strategy, effective execution, evidence-based assurance and Board-level insight — creating clarity, accountability and lasting confidence in organisational outcomes.
Strategy
Aligning risk strategy, appetite and governance with the Board's objectives and business strategy.
Execution
Translating strategy into clear accountability, effective controls and disciplined delivery.
Assurance
Providing coordinated, evidence-based assurance that risks are managed and controls operate as intended.
Insight
Delivering decision-ready intelligence that enables Boards to understand risk, evaluate performance and act with confidence.
The Terrapin Standard
Three principles. One unwavering standard.
Clarity, simplicity and certainty are more than our brand values. They define how we think, how we work and the outcomes we strive to deliver for every client.
Clarity
A clear understanding of your risks, regulatory obligations and strategic priorities — giving Boards and Executive Leadership Teams the insight to make informed decisions with confidence.
Simplicity
Practical, proportionate governance, risk and compliance solutions that remove unnecessary complexity, strengthen accountability and enable decisive action.
Certainty
The confidence that comes from effective governance, well-managed risks and controls that demonstrably work — giving your Board the assurance that your organisation is delivering its intended outcomes.
Leadership
Gordon Malcolm
Founder & Principal Advisor
A senior corporate governance, risk and regulatory specialist with three decades of experience leading business transformation, strengthening organisational resilience and delivering meaningful, lasting change.
Most recently Chief Risk Officer and Executive Director of Investec Bank (Channel Islands) Limited, Gordon brings the perspective of someone who has held executive responsibility for governance, risk and regulatory outcomes. He understands the demands placed on Boards and leadership teams, the expectations of regulators, and what it takes to build and sustain confidence among stakeholders.
His approach combines strategic judgement with practical execution. Working directly with clients, Gordon helps Boards and Executive Leadership Teams define their ambitions, strengthen their governance and risk capabilities, and deliver the outcomes their organisations need to achieve.
Crucially, his objective is not to create dependency on external advice. It is to transfer knowledge, develop internal capability and leave organisations better equipped to make informed decisions, manage risk effectively and succeed long after an engagement has concluded.
Clarity in direction. Simplicity in execution. Certainty in outcomes.
Where we work
GUERNSEY · JERSEY · ISLE OF MAN · UNITED KINGDOM
Supporting financial services, banking, legal and trust organisations — remotely and onsite.
gordon@terrapin.gg