Consider a regional bank with operations across several markets. Each market grew its own credit-risk operating model — its own policies, its own systems, its own committees. The bank now wants a coherent operating model that supports cross-border corporate growth without losing the local risk view. Use this playbook to frame the work, sequence the analysis, and avoid the common traps in a brief like that.
The consulting question
Multi-market banks accumulate risk-policy debt the way large companies accumulate any other operational debt. Each market has rational reasons for its current state. The aggregate is incoherent: similar credit decisions take materially different paths in different countries, the group risk committee cannot compare like-for-like, and growth at the cross-border corporate layer is blocked by the policy difference.
How to approach it
Inventory the policy estate honestly. Many regional banks have multiples of the policies they think they have. The inventory itself is the first deliverable.
Distinguish principles from procedures. Group principles should be common; local procedures should respect local regulation and local market reality. The mistake banks make is trying to harmonise procedures, which is impossible. Harmonising principles is achievable.
Rebuild the policy framework around principles. A smaller set of group principles, layered with market-specific procedures that explicitly cite which principle they implement. Auditable and growable.
Consolidate the risk technology selectively. One credit-decision platform across markets is usually the right destination, but the migration sequence matters more than the destination. Markets with the highest cross-border activity migrate first.
Suggested workplan
Months 1–3: Policy inventory, risk-data harmonisation, principle framework design.
Months 4–8: Group-principle ratification through the risk committee. Market-by-market procedural refresh against the new principles.
Months 9–12: Technology consolidation begins. Cross-border corporate credit lane goes live on the new operating model. In-house team owns the framework.
Questions to pressure-test
- How many distinct credit policies exist today, and how much of the variance is necessary?
- Where does cross-border corporate credit currently break against the policy stack?
- Which markets have the strongest in-house risk function — and which need capability build?
- What does the regulator in each market expect of the consolidated framework?
- Who owns the framework after external support ends?
A strong answer includes
A smaller, sharper policy framework. Cross-border corporate credit moves through a single coherent process. The group risk committee can review decisions across markets on like-for-like terms. The risk function supports the bank's growth strategy rather than constraining it. And the in-house risk team can extend the framework to new markets without external support.
Common traps
The inventory takes longer than expected. Policy estates in multi-market banks are messier than anyone admits at the start.
Principles vs. procedures is the hard intellectual work. Get this right and the rest follows; get it wrong and you spend two years arguing about procedural detail.
Regulator engagement per market is non-negotiable. Each supervisor needs comfort with the consolidated framework.
Technology consolidation should follow the operating-model change, not lead it. Banks that lead with platform migration spend years undoing it.
Use this playbook to frame a risk-modernisation case across policy, committees, systems, local-market nuance, regulator confidence, and business usability.