Risk and Governance Advisory

MGRA builds the risk programs, frameworks, policies, and procedures organizations need to operate and grow. Engagements are scoped and outcome-driven, anchored by a single four-stage framework that flexes to the mandate without losing discipline.

Four Stages. One Discipline.

No two organizations are in the same place, and a framework built for someone else's maturity will not survive here. We start from where you actually are, build at a depth your team can operate and your risk appetite supports, and raise the level as risk awareness grows. Every engagement moves through four stages. Depth, duration, and deliverables flex. The discipline does not.

2. Design

Develop practical, scalable frameworks aligned to the organization’s goals, culture, and operational environment.

Governance framework and operating model: committee structure, charters, decision rights, and escalation paths
Maturity-based design: built for the level you can run now, with a defined path to the next
Enterprise risk framework and risk management structure
Risk taxonomy and a common risk language across units
Risk appetite, thresholds, and tolerance definition
Control design and documentation
Issue management and remediation process
Board and management reporting model
Policies, procedures, and job aids

A control framework nobody can operate is not a control. We build to the maturity you have, prove it runs without us, and step it up when you are ready.

3. Implement

Support execution with a focus on operational sustainability, accountability, and cross-functional coordination.

Governance structure stand-up and committee launch
Risk, control, and issue register stand-up
Control testing and evidence standards
Issue intake, ownership, and closure discipline
Role-based training that builds risk understanding rather than procedure compliance
Business continuity and disaster recovery planning and exercises
Third-party risk program rollout
Board and executive reporting cadence in operation

4. Sustain

Confirm the program is still running a year later, and step it up when the organization is ready.

Post-implementation sustainability assessment
Governance maturity and effectiveness review
Control effectiveness and quality assurance review
KPI and KRI development and monitoring
Issue and remediation trend reporting
Board and committee reporting support
Risk maturity and awareness re-assessment, with a roadmap to the next level

1. Assess

Find out where risk actually sits, who owns it, and what is worth spending money on first.

Risk awareness and culture baseline: how risk is currently understood, discussed, and escalated across the organization
Capacity and appetite assessment: what the organization can realistically operate today
Enterprise risk assessment and risk landscape mapping
Governance and operating model review: committee structure, reporting lines, decision rights, and where accountability is unclear
Current-state control inventory and gap analysis
Risk, control, and governance maturity assessment
Open issue and audit findings review
Third-party and vendor exposure review
Business impact analysis
Prioritized findings report with recommended sequence

Where the Work Has Already Been Done.

A snapshot of the institutions and engagements MGRA's principals have led, built, or contributed to, spanning global banking, regional banking, global enterprise, impact platforms, and on-the-ground program execution. Client and institution names are disclosed where appropriate and withheld where engagement terms require where risk and governance advisory was performed.

Cooperative Formation and Farmer Training, Bugiri, Eastern Uganda

Developed and oversaw implementation of a Good Agricultural Practices program reaching 3,000 farmers across 29 villages. Led establishment of a new farming cooperative in partnership with the community, working through engagement with the Uganda Government and the Ministry of Agriculture. Following a probation period evidencing community demand and completed training at scale, the cooperative received approval and formal certificate of formation. Delivered under The Boon Project since 2019.

Women's Enterprise Development, Eastern and Northern Uganda

Designed and implemented a women's enterprise program across Bugiri, Iganga, and Amuru districts, focused on closing the gender gap and building economic independence. The model combines technical training, access to production resources, initial start-up capital, and household financial management support, structured so participants build the capacity to sustain the enterprise themselves. Scope covered program design, fundraising, national and local government relationships, community engagement, and financial planning and capacity forecasting. Inception 2022, rollout January 2023, with the model refined through implementation across sites.

Global Enterprise — Business Continuity & IT Disaster Recovery

Global Risk Manager leading the design and implementation of an enterprise business continuity and IT disaster recovery program spanning multiple regions, business units, and critical infrastructure. Engagement included global program development, regional rollout, cross-functional coordination, and governance reporting to senior leadership.

Child Protection and Alternative Care — Uganda

Founded and led a Ugandan nonprofit serving vulnerable children and underserved communities, working alongside local leaders, Ministry of Gender representatives, and District Senior Probation Officers on alternative care initiatives. Covered safeguarding, governance, donor relationships, and operational oversight. Transitioned to local leadership, where it continues to operate.

Global Banking — Enterprise Risk Program Design & Regulatory Remediation

Designed and implemented enterprise-wide risk and control frameworks across a global banking institution, including the issue management framework, remediation governance structure, and enterprise risk reporting adopted across 16 business lines. Led regulatory remediation and compliance risk framework redesign tied to approximately $350M in fines, MRAs, and a Cease and Desist order, with oversight across a portfolio of 12+ enterprise programs and strategic liaison responsibility to MUFG Tokyo Head Office. Current engagement with RSM delivers independent audit validation of consent order remediation at a top-tier U.S. bank tied to $250M in enforcement actions.

Impact Platform — Multi-Country Architecture

Founder-led design of a paired for-profit and nonprofit platform deploying agricultural infrastructure across nine African countries. Work spans multi-jurisdiction structuring, blended-finance governance, ministerial and government engagement, partner diligence, and operating model design. Building an institutional architecture for capital to deploy into hard places — and stay deployed.

Ten years of in-country presence since 2016

Direct execution of community-level programs under the platform mandate, including the launch of women-led agricultural cooperatives, the Mushroom Empowerment Program for women in rural Uganda, and Garden Hub projects supporting nutrition, micro-enterprise, and local market access. Work includes framework rollout, cooperative formation and governance, training, partner coordination, and community engagement across multiple districts. Nine years of in-country presence since 2016.

NGO Operations and Program Coordination — Uganda

Frameworks Only Work If the People in the Room Adopt Them.

Governance work in complex environments doesn't happen at a desk. It happens in conversations with regulators, community leaders, ministry officials, legal counsel, NGO partners, and the people whose livelihoods the program is meant to change. MGRA engagements are built on the assumption that no framework, no risk model, and no operating design survives contact with reality unless it has been shaped by, and is owned by, the stakeholders who have to live with it.

Professionals in a meeting, possibly for advisory

Large group of people gathered outdoors in a rural setting

Risk and Governance Advisory engagement across:

Government & Regulatory Bodies

Private Sector & Local Partners

Direct engagement with national ministries, regulatory agencies, and government officials to align programs with policy frameworks, secure approvals, and navigate jurisdictional requirements. Experience includes Ugandan ministerial engagement on agricultural and hemp policy, U.S. and global banking regulator response, and multi-country agency coordination.

Building working relationships with local operators, suppliers, processors, and commercial partners on the ground. Translating program goals into commercially viable structures that local partners can own, scale, and sustain after the initial engagement concludes.

Legal Counsel & Compliance Teams

Community Members & Local Leaders

Coordination with in-country legal teams, regulatory counsel, and compliance functions to ensure program design holds up under local statute, international standards, and donor or investor requirements. Experience spans U.S. financial services regulation and East African commercial and agricultural law

Direct, sustained engagement with the people a program is meant to serve: women farmers, cooperative members, smallholders, and local leadership. Designing programs in dialogue with the people in them, rather than for them. Building trust through presence, consistency, and shared accountability.

NGOs & Mission-Aligned Partners

Cooperatives & Local Institutions

Collaboration with NGO partners, faith-based organizations, and mission-driven institutions on shared objectives — from malaria reduction and nutrition programming to anti-trafficking work and women's economic empowerment. Coordinating across institutions with different mandates, funding models, and reporting requirements.

Designing and supporting the formation of cooperatives, women-led business groups, and local governance structures that allow program benefits to compound and sustain beyond the engagement. Stakeholder engagement is not extractive — it is institutional infrastructure-building.

Not Sure If There's a Fit?
Start With a 20-Minute Conversation.

Most engagements begin with a short, exploratory call. No proposal pressure, no commitment — just enough conversation to understand what you're trying to do and whether MGRA is the right fit. If it's not, I'll often know who is.

Schedule a Call

Conference Consulting on Emerging Market Opportunity