READ
Case Risk & Compliance

From findings to confidence: Transforming TPRM compliance and delivery for a global bank

 

The challenge

  • Multiple internal audit findings revealed significant TPRM compliance gaps.
  • Regulatory pressure intensified with evolving UK and EU requirements.
  • Needed to align global and local TPRM practices while restoring senior-level confidence.

 

Our approach

  • Deployed a team of six, including a senior TPRM SME, to assess and uplift the full TPRM framework.
  • Enhanced policies, operating models, and processes across both global and regional levels.
  • Transitioned into a managed service model, delivering risk assessments from our Cardiff center.

 

Key results

  • Closed all identified audit findings through targeted TPRM enhancements.
  • Established a scalable, repeatable service covering vendor and intra-group outsourcing risks.
  • Delivered lasting assurance and visibility to senior management—service now fully transitioned to client ownership.
Date:June 2, 2025

In a rapidly evolving regulatory landscape, one of the world’s largest banks faced mounting internal audit findings and growing pressure from UK and EU regulators. Bridging the compliance gap in Third-Party Risk Management (TPRM) required more than policy updates - it demanded structural change and sustainable delivery. Projective Group led a comprehensive uplift of the bank’s TPRM framework, aligning global and local practices with regulatory expectations, and transitioned into a managed service to ensure continuous, high-quality risk assessments at scale.

The client 

One of the world’s largest universal banks, with a strong focus on commercial and corporate banking and securities services. Our engagement spanned their operations in the UK and across EMEA. 

The challenge 

The client faced multiple internal audit findings highlighting non-compliance with third-party risk management (TPRM) requirements. Simultaneously, UK and EU regulators introduced stricter rules, widening the compliance gap. The organisation needed to align global and local TPRM policies with evolving regulations and build confidence at senior levels. 

Our approach 

We deployed a team of six consultants, including a senior TPRM SME/project manager, to: 

  • Review and uplift global and local TPRM policies to meet current and emerging regulatory expectations 
  • Assess the existing framework, including operating model, processes, people, and technology 
  • Recommend and implement enhancements across both global and regional levels 

Following successful implementation, we transitioned into a managed service, delivering ongoing third-party risk assessments—covering both external vendors and intra-group outsourcing—via our Cardiff-based delivery center. 

Key results 

  • Closed audit findings through implementation of an enhanced TPRM operating model 
  • Established a repeatable, scalable service for continuous third-party risk assessments 
  • Enabled a smooth transition to an offshore client-owned function, where the service continues to operate today 
  • Provided senior management with transparency, assurance, and confidence in TPRM compliance 

About Projective Group

Established in 2006, Projective Group is a leading Financial Services change specialist.

We are recognised within the industry as a complete solutions provider, partnering with clients in Financial Services to provide resolutions that are both holistic and pragmatic.  We have evolved to become a trusted partner for companies that want to thrive and prosper in an ever-changing Financial Services landscape.