ENTERPRISE RISK MANAGEMENT
Appetite, registers, scenarios and treatment
4URIGHT builds risk and resilience inside ONE FILE: appetite and tolerance, registers, third-party exposure, scenarios, KRIs, continuity, incident readiness and treatment plans that change decisions — contracting, expenditure, access, suppliers and escalation.
A visible incident is rarely the whole risk. It is often also a control, ownership, evidence or monitoring problem. The first task is to name appetite, map exposure and choose treatment before reacting.
Contact us when:
- risk appetite and tolerance are undefined or unused;
- registers do not drive contracting, access or escalation;
- third-party exposure is concentrated or unowned;
- scenarios, KRIs or continuity plans are missing;
- incidents recur without treatment that changes decisions;
- risk evidence must reconcile with governance and ONE FILE.
FIRST NAME THE RISK
Do not respond
before the file is understood.
A letter, fine, correction, or payment demand is only the visible part of the matter. The underlying cause may sit in the books, the cash flow, missing evidence, late treatment, unowned third-party exposure, incident administration, weak director oversight, or poor document retention.
Appetite must bind decisions
Risk signals and decision limits often contain response periods, payment dates, escalation windows, or filing consequences that must be mapped quickly.
Registers must be living
A register without owners, treatments, filings, calculations, KRI data, or risk evidence may create more risk than clarity.
Treatment must change behaviour
Compliance & fiscal control may reveal deeper problems in control, reporting, cash management, director discipline, or administrative habits.
WHAT WE MAP
Six common tax-pressure situations.
You do not need to know whether the matter is purely fiscal, bookkeeping-related, financial, or structural. During intake, we identify what must be read first and what evidence is needed.
01
Risk appetite & tolerance
Appetite workshops, register reviews, scenario tests, escalation notices, audit-related communication, or letters that require a structured and evidence-based response.
02
Risk registers & owners
Findings, untreated register items, treatment requests, disputed amounts, unexpected assessments, and situations where the company needs to understand what is correct, missing, or contestable.
03
Third-party exposure
Supplier, customer, ICT and outsourcing concentration, dependency and treatment options that must change decisions.
04
Scenarios & KRIs
Missing scenario coverage, late payment, key-person dependency, incident-response gaps, unclear employer obligations, or payment obligations connected to staff costs.
05
Continuity & incident readiness
Untested continuity assumptions, filing concerns, profit calculation issues, corrections, uncertain balances, financial statements that are not ready, or exposure linked to poor administration.
06
Treatment plans
Untreated register items, payroll financial exposure, corporate financial exposure, payment backlog, collection pressure, cash-flow visibility, and the need to understand what can realistically be stabilised.
WHAT MUST BE MAPPED FIRST
The first reading separates
urgency from noise.
Not every risk matter requires panic, but every risk matter requires sequence. The deadline, amount, tax type, evidence, previous filing history, and business condition must be placed in the right order.
What appetite applies?
Response date, payment date, escalation window, filing deadline, collection pressure, or formal escalation risk.
What exposure is material?
Letters, registers, scenarios, third parties, KRIs, calculations, risk exports, prior correspondence, and missing proof.
What treatment changes decisions?
Cash-flow stress, administrative drift, unreliable records, role confusion, late treatments, or broader recovery and restructuring need.
THE RISK BEHIND THE SYMPTOM
Risk usually
has an operational history.
The visible tax issue often starts earlier than the letter. It may come from late bookkeeping, missing documentation, unowned third-party exposure, weak incident administration, cash-flow pressure, previous professional mistakes, poor internal controls, or founder overload.
Unowned third parties
Unowned third-party logic, dependency misunderstanding, classification errors, unclear cost treatment, or assumptions that were never tested.
Untested scenarios
Tax money used to keep the company alive, payment backlog, poor forecasting, creditor pressure, or delayed recognition of liquidity problems.
Missing KRIs
Directors or founders did not receive clear reporting, did not check filings, or relied too long on informal reassurance.
Incidents without learning
Contracts, invoices, payroll records, supplier files, risk signals, and evidence are missing, scattered, or impossible to retrieve quickly.
WHAT 4URIGHT DOES
We read the matter
before action is taken.
The work starts by understanding the letter, deadline, numbers, records, filings, documents, payment position, and underlying business condition. Only then can the next responsible step be chosen.
01
Appetite workshop
We help identify which risks must change decisions, what deadlines apply, what is being requested, what is at stake, and what the company must understand before responding.
02
Register build-out
We read exposure together with filings, bookkeeping, invoices, bank records, KRI data, reports, prior correspondence, and supporting evidence.
03
Third-party mapping
We check whether treatments change decisions or whether cleanup, reconstruction, reconciliation, or correction is needed before meaningful action can be taken.
04
Scenario & KRI design
We map appetite limits, treatments, escalation windows, continuity gaps, missing evidence, escalation risk, and practical urgency.
05
Continuity & incident readiness
Where appropriate, we help prepare the factual basis for correction, explanation, response, documentation, payment discussion, objection support, or professional escalation.
06
Treatment implementation
If the risk matter reveals broader business pressure, we help identify whether cleanup, payment planning, control and monitoring, or company-control work is needed.
HOW THE WORK STARTS
We do not start with panic, assumptions, or aggressive language. We start with the facts: the letter, the deadline, the amount, the period, the filing history, the books, the bank records, and the evidence available.
The first objective is to understand whether the matter is correct, incomplete, disputable, urgent, document-based, payment-based, or a symptom of deeper company disorder.
From there, we identify the responsible next step.
THE BASIC PROCESS
1. Risk intake
You explain the letter, fine, debt, filing issue, deadline, or payment obligations.
2. Document review
We identify the relevant filings, records, letters, invoices, bank information, KRI data, and missing evidence.
3. Treatment map
We clarify urgency, deadline risk, payment exposure, document gaps, correction needs, and possible escalation.
4. Practical direction
The matter may move to response preparation, evidence reconstruction, correction work, payment planning, restructuring, or professional coordination.
RELATED ONE FILE DISCIPLINES
Risk control often connects
to other company work.
Once the fiscal matter is readable, the company may need evidence reconstruction, restructuring, review before a decision, or assurance readiness if the pressure cannot be stabilised.
BOUNDARIES
What this service does not promise.
- We do not guarantee cancellation of fines.
- We do not hide facts from the tax authority.
- We do not use delay tactics as a strategy.
- We do not dispute matters without evidence.
- We do not give serious tax direction detached from documents.
- We do not create false comfort around real exposure.
- We do not replace formal legal representation where required.
- We do not treat risk control as isolated when the company structure says otherwise.
The purpose is clarity, evidence, priority, and responsible action.
RISK & RESILIENCE INTAKE
Tell us what happened
and what deadline you are facing.
Use the intake form to explain the letter, fine, correction, financial exposure, payment obligations, third-party issue, risk exposure matter, corporate tax concern, bookkeeping problem, or deadline.