Integrate enterprise risk management into KPI systems, Balanced Scorecards and incentive structures. We develop risk-adjusted metrics like RORAC and RAROC and embed risk perspectives in your management processes for value-oriented corporate governance.
Our clients trust our expertise in digital transformation, compliance, and risk management
30 Minutes • Non-binding • Immediately available
Or contact us directly:










Risk-adjusted KPIs like RORAC or Risk-Adjusted EBITDA are only effective when they consistently feed into target agreements and incentive systems. Without this anchoring, risk management remains a pure reporting instrument without steering impact.
Years of Experience
Employees
Projects
We support you with a structured approach to integrating risk management into your corporate objective system.
Analysis of the existing objective system and risk management processes
Development of an integrated concept for risk-oriented corporate management
Implementation, training, and continuous improvement
"Integrating risk management into the corporate objective system is the key to sustainable and value-oriented corporate management."

Head of Risk Management
We offer you tailored solutions for your digital transformation
Development and implementation of risk-adjusted metrics for your corporate objective system
Integration of risk management into your Balanced Scorecard and performance management systems
Development and implementation of risk-oriented incentive systems and compensation models
Choose the area that fits your requirements
An effective enterprise risk management framework connects risk strategy with operational execution. We guide you through building an ERM framework based on COSO ERM and ISO 31000 or optimize your existing risk management framework.
Targeted improvement of existing Enterprise Risk Management frameworks. From maturity assessment through gap analysis to sustainable optimization of your risk management structures.
Integration of enterprise risk management into the corporate target system. Risk as part of strategic steering and decision-making.
Integration systematically links risk management with corporate steering so that risks are considered in every strategic and operational decision. In practice this means: risk-adjusted targets instead of pure performance goals, KRIs alongside KPIs in the balanced scorecard, risk appetite as a guardrail for strategic planning, and risk-related components in incentive systems. The COSO ERM Framework and ISO
31000 explicitly require this integration.
Risk-adjusted metrics combine performance and risk measurement. RORAC (Return on Risk-Adjusted Capital) relates earnings to deployed risk capital. RAROC adjusts earnings for expected losses. EVA-based approaches include capital costs with risk premiums. Each metric requires defined thresholds and escalation mechanisms. The metrics feed into the balanced scorecard and are linked to individual target agreements.
Integration occurs through an additional risk perspective or by supplementing existing perspectives with risk metrics. The financial perspective adds RORAC and VaR limits to return targets. The customer perspective incorporates concentration risks and credit default rates. The process perspective measures operational risk indicators and control effectiveness. The learning and growth perspective captures risk culture indicators and training completion rates.
Key Performance Indicators (KPIs) measure historical performance and goal achievement, looking backward. Key Risk Indicators (KRIs) are forward-looking early warning indicators that signal potential risks before they materialize. Example: The KPI credit default rate measures realized losses, while the KRI overdraft quota warns of rising defaults. Effective integration links both: when a KRI breaches its threshold, the associated KPI forecast is adjusted.
The linkage occurs through risk-adjusted compensation components. Variable compensation is tied to risk-adjusted results like RORAC rather than pure revenue targets. Deferral periods account for long-term risk effects. Malus and clawback provisions enable recoupment when risks materialize after payout. MaRisk institutional remuneration requirements (InstVV) explicitly demand consideration of risks in variable compensation.
ESG risks are integrated as a standalone risk category or as drivers of existing risk types within the objective system. This includes ESG KRIs such as portfolio carbon intensity, social risk scores for suppliers, and governance compliance indicators. ESG targets in the balanced scorecard with clear metrics and time horizons. Linking ESG performance with variable compensation. BaFin sustainability risk guidelines require integration into business and risk strategy.
Costs depend on the complexity of existing steering systems. Typical projects include design of risk-adjusted metrics (eight to twelve weeks), integration into BSC and reporting (four to eight weeks), and linkage with incentive systems (four to six weeks). ADVISORI supports the entire process from maturity assessment of existing ERM through design of the integrated steering model to implementation in IT systems and reporting structures.
Discover how we support companies in their digital transformation
Klöckner & Co
Digital Transformation in Steel Trading

Siemens
Smart Manufacturing Solutions for Maximum Value Creation

Festo
Intelligent Networking for Future-Proof Production Systems

Bosch
AI Process Optimization for Improved Production Efficiency

Is your organization ready for the next step into the digital future? Contact us for a personal consultation.
Our clients trust our expertise in digital transformation, compliance, and risk management
Schedule a strategic consultation with our experts now
30 Minutes • Non-binding • Immediately available
Direct hotline for decision-makers
Strategic inquiries via email
For complex inquiries or if you want to provide specific information in advance
Discover our latest articles, expert knowledge and practical guides about Integration into the Corporate Objective System

The credit risk function of 2026 looks materially different from the one most banks still operate. Here are the five shifts, from generative AI to ESG integration, that risk managers should plan for now.

How the new IRB rules transform many previously time-consuming model changes into simple notifications—thereby drastically shortening approval times and significantly accelerating implementation

An ESG dashboard makes sustainability performance visible and auditable. This guide covers essential environmental, social, and governance KPIs, CSRD/ESRS alignment, data collection strategies, and tool selection for organizations building audit-ready ESG reporting.

DORA Articles 5–15 establish the ICT risk management framework that financial institutions must implement. This guide breaks down governance, framework structure, ICT systems management, detection, business continuity, and the learning loop — with a practical implementation roadmap.

A Data Protection Impact Assessment (DPIA) is mandatory for high-risk data processing under GDPR. This step-by-step guide covers when a DPIA is required, the 6-step methodology, risk evaluation, mitigating measures, and documentation requirements for regulatory compliance.

Third-party risk management (TPRM) identifies, assesses, and mitigates risks from vendors and suppliers. This guide covers the full TPRM lifecycle, risk classification, due diligence methods, continuous monitoring, DORA Articles 28–30 requirements, and practical tools for every maturity level.