Explore Tools to Support Your Organization’s Risk Management and Business Process Optimization
Advisory Frameworks & Implementation Tools
Proprietary frameworks, assessments, and reporting resources developed from executive-level experience building and overseeing risk programs in regulated financial-services environments. Use the tools independently or as the starting point for a tailored advisory engagement.
Professional Risk Management Toolkits
Our professional toolkits provide structured methodologies and editable implementation resources for organizations establishing, evaluating, or modernizing risk management programs.
By downloading these tools, you agree that Chimayo Consulting LLC may use the information you provide to respond to your inquiry and communicate with you about the requested services. Please do not submit confidential, sensitive, financial, or regulated personal information through this form. For details about how we collect, use, disclose, and protect personal information, see our Privacy Policy.
Designed For
Financial institutions and other organizations developing, using, validating, or relying on models and model-driven decision-making.
What This Toolkit Helps You Do
Establish or strengthen a comprehensive model risk management program covering governance, model classification, development, validation, implementation, ongoing monitoring, third-party models, and executive oversight.
The toolkit provides a consistent structure for managing models throughout their lifecycle and aligning the level of governance with each model’s materiality, complexity, and risk.
What Is Included
Model Risk Management Framework
Model Risk Management Policy
Model Risk Appetite Statement
Model Tiering Template
Model Development Documentation Template
Model Validation Template
Model Monitoring Template
Model User Guide Template
Third-Party Model Risk Due Diligence Questionnaire
Board and Executive Reporting Template
Implementation Guide
Implementation Support
Use the toolkit independently or engage Chimayo Consulting for model inventory development, model tiering, governance assessments, framework customization, and implementation support.
Designed For
Risk, compliance, internal control, and business teams establishing or strengthening a consistent control-testing program.
What This Toolkit Helps You Do
Develop a structured approach to planning, executing, documenting, and reporting control testing. The toolkit supports evaluation of individual control readiness, documentation of testing procedures and evidence, identification of control deficiencies, remediation monitoring, annual test planning, and reporting to management and the board.
What Is Included
Control Testing Framework
Individual Control Testing Readiness Checklist
Control Testing Documentation Template
Issue Tracking and Remediation Monitoring Tool
Sample Control Testing Calendar
Board and Executive Reporting Template
Implementation Support
Use the toolkit independently or engage Chimayo Consulting for control-program assessments, testing-methodology development, facilitated control reviews, framework customization, and implementation support.
Designed For
Organizations seeking to strengthen business continuity, disaster recovery, critical-service governance, scenario testing, and operational resilience reporting.
What This Toolkit Helps You Do
Develop an integrated approach to preparing for, responding to, and recovering from operational disruption. The toolkit helps identify critical business services, assess operational impacts and dependencies, establish continuity requirements, conduct scenario and tabletop exercises, and communicate resilience posture to management and the board.
What Is Included
Business Resilience Policy
Business Impact Analysis Template
Business Resilience Assessment Template
Critical Business Services Inventory
Operational Resilience Dashboard Template
Tabletop Exercise Template
Disaster Recovery and Business Continuity Plan Template
Board and Executive Reporting Template
Implementation Support
Use the toolkit independently or engage Chimayo Consulting for facilitated business impact analysis, critical-service mapping, tabletop exercises, program assessments, and resilience framework implementation.
Designed For
Organizations evaluating operational processes, governance responsibilities, improvement priorities, and appropriate opportunities for automation or AI enhancement.
What This Toolkit Helps You Do
Create a structured approach to identifying, evaluating, prioritizing, and governing process-improvement opportunities. The toolkit supports process inventory development, ownership and accountability, maturity assessment, improvement planning, executive reporting, and consideration of appropriate AI and automation opportunities.
What Is Included
Process Governance Model
Process Improvement Roadmap
Process Inventory and RACI Template
Process Maturity Assessment
Process Optimization Executive Dashboard
Implementation Support
Use the toolkit independently or engage Chimayo Consulting for facilitated process assessments, process and control redesign, prioritization workshops, AI-opportunity evaluation, and transformation support.
Designed For
Financial institutions, capital markets firms, commodity organizations, and fintechs establishing or modernizing an integrated enterprise and operational risk management program.
What This Toolkit Helps You Do
Build a consistent approach to identifying, assessing, managing, and reporting material risks across the organization. The integrated ERM and RCSA methodology supports inherent and residual risk assessment, control evaluation, remediation, risk acceptance, and management reporting.
The toolkit addresses operational, strategic, market, credit, liquidity and funding, regulatory, legal, reputational, ESG, and capital structure risk.
What Is Included
ERM Policy Template
Integrated ERM and RCSA Assessment Tool
ERM Risk Appetite Statement
Board and Executive Reporting Template
Implementation Support
Use the toolkit independently or engage Chimayo Consulting for framework customization, facilitated risk assessments, management workshops, and implementation support tailored to your organization’s risk profile and operating model.
Need Tailored Implementation Support?
Effective risk management requires more than templates. Chimayo Consulting provides facilitated assessments, framework customization, management workshops, and implementation support tailored to your organization’s risk profile, regulatory environment, and operating model.
Designed For
Organizations adopting artificial intelligence and seeking a practical framework for governing AI use cases, associated risks, third-party providers, and management oversight.
What This Toolkit Helps You Do
Establish a structured AI governance program that supports responsible adoption while addressing risks related to data, models, compliance, operations, third parties, and reputation.
The toolkit helps organizations inventory AI use cases, assess risk before deployment, establish governance requirements, evaluate AI vendors, monitor identified risks, and provide meaningful reporting to management and the board.
What Is Included
AI Use Case Risk Assessment Template
AI Inventory Template
AI Governance Policy Template
AI Vendor Due Diligence Questionnaire
AI Risk Register
Board and Executive Reporting Template
Implementation Guide
Implementation Support
Use the toolkit independently or engage Chimayo Consulting for AI governance assessments, framework customization, use-case review, management workshops, and implementation support.
Designed For
Organizations seeking a consistent process for identifying, evaluating, escalating, remediating, and reporting operational-risk incidents and related issues.
What This Toolkit Helps You Do
Establish a structured incident-management lifecycle from initial identification through remediation and closure. The tools support financial and non-financial impact assessment, incident classification, escalation, root-cause documentation, issue management, remediation monitoring, risk acceptance, exceptions, and executive reporting.
Incidents can be associated with relevant risks, controls, vendors, systems, models, and AI tools to support more complete analysis and management oversight.
What Is Included
Incident Management Procedure
Incident and Issue Management Template
Remediation, Risk-Acceptance, and Exception Tracking
Board and Executive Reporting Template
Implementation Support
Use the toolkit independently or engage Chimayo Consulting for incident-management program design, taxonomy and escalation development, framework customization, management workshops, and implementation support.
Complimentary Resources
Not sure where to begin? Our complimentary readiness assessments provide a practical starting point for evaluating program maturity, identifying potential gaps, and determining where additional governance or implementation support may be needed.
Each assessment can be completed independently and used to support internal discussions with management, risk committees, and boards.
By downloading these tools, you agree that Chimayo Consulting LLC may use the information you provide to respond to your inquiry and communicate with you about the requested services. Please do not submit confidential, sensitive, financial, or regulated personal information through this form. For details about how we collect, use, disclose, and protect personal information, see our Privacy Policy.
Artificial intelligence can create significant business value but organizations need appropriate governance to manage risks related to data, models, compliance, operations, and reputation.
Use this checklist to assess whether your organization has the foundational elements needed for responsible AI adoption.
This checklist provides a rapid, self-administered diagnostic of your organization's operational resilience posture across seven core program areas.
This free checklist helps you assess how ready your organization is to identify, rate, escalate, remediate, and learn from operational-risk incidents. Use it as a quick maturity scan, a gap analysis before an audit, or a discussion aid with your risk committee.
A Practical Toolkit for Evaluating Your Organization's Control Testing Program Readiness
Assessing Your Organization's Model Governance, Controls, and Oversight Capabilities
A Practical Toolkit for Evaluating, Scoring, and Prioritizing Process Improvement Opportunities, including use of AI
Identified Opportunities for Improvement?
Chimayo Consulting can help interpret your assessment results, prioritize material gaps, and develop a practical roadmap aligned with your organization’s objectives and regulatory expectations.