A decision map on a display, laptop closed, advisor annotating with a stylus

Shaped to the decision at hand, not to the retainer.

Three ways to work. Shaped to the decision at hand.

Mode 01

Risk, audit, and control program reviews

You inherit a program — or a doubt about one — and need an honest read before you commit budget.

A sharp read on a risk, audit, or control program, whether it is being designed, rebuilt, scaled, or stress tested. Work spans enterprise risk, internal audit, SOX, IT and cyber risk, third party risk, model and AI risk, and adjacent programs across the first, second, and third lines of defense. Drawn from work for Fortune 1000 and multinational clients across the Americas.

Executive Risk and Controls Diagnostic: Clients receive a board ready findings brief, maturity scorecard, assurance gap map, control simplification plan, and 90 day action roadmap.

Typical level of effort: 6 to 12 weeks, single working document.
Mode 02

Board and executive advisory

You are approaching a vote that cannot be unmade, and the room needs the picture before the show of hands.

Counsel for boards, audit committees, and C-suites navigating consequential decisions. Common threads include IPO and capital markets readiness, cross-border expansion, post-merger integration, regulatory and enforcement exposure, cyber and AI risk posture, and leadership or function transitions. Engagements range from focused counsel on a single decision to sustained advisory relationships over a longer horizon.

Board and Executive Risk Counsel: Clients receive independent risk counsel, board briefing materials, audit committee questions, governance maps, executive dashboards, and decision support on sensitive or high stakes matters.

Typical level of effort: from a few weeks of focused counsel to engagements running 6 to 24 months.
Mode 03

Keynotes and executive workshops

You want a room of senior people to leave thinking differently — and to know what to do on Monday.

Keynotes and closed sessions on risk as a leadership discipline, the three lines of defense, cyber and AI governance, audit transformation, and cross-border resilience. Workshops designed for boards, executive teams, and audit or risk functions who want to sharpen judgment, not thicken process. Every session is shaped to the audience and the decisions they are working through.

Executive Risk Workshop: Clients receive a tailored executive session, pre read, discussion guide, scenario exercises, takeaway guide, and post session recommendations.

Typical level of effort: keynotes are 45 to 60 minutes. Workshops run 1/2 day to 2 days.
A tabbed board pack open on a polished boardroom table, fountain pen across the page, a glass of water at the edge
The week before the vote Most of advisory is not the meeting. It is the quiet work that lets directors walk in already aligned.
Andrés J. Castañeda signature
Andres J. Castañeda · Miami
Tweaks