How an Energy Holding Group Achieved Consolidated Strategic Risk Oversight

Organisational Context

A diversified energy holding structure overseeing multiple subsidiaries across oil and gas production, gas infrastructure, trading operations, mining activities, and emerging energy transition initiatives.

The group operates in highly volatile commodity markets while navigating electricity market reform, funding constraints, restructuring dynamics, and governance oversight obligations.

Each subsidiary maintained its own risk registers, control frameworks, and reporting formats. While risk management activity existed at entity level, there was limited consolidation at group level. Board committees required a unified view of exposure across the portfolio.

The environment included commodity price volatility across oil, gas, and electricity; counterparty and trading exposure; infrastructure and operational risk; integration and restructuring risk; and mandate alignment and strategic positioning challenges.

The group required not just risk identification — but structural coherence.

The Challenge

Several structural issues became apparent across the group. Risk registers differed in structure and scoring methodology across subsidiaries. Strategic risks were duplicated under different names in different entities. Controls were layered inconsistently across business units.

Reporting to the board required manual consolidation. Electricity trading exposure was emerging but not fully embedded into the group-level framework. Scenario planning was informal rather than structured.

Leadership needed clarity on cross-entity exposure, systemic risk patterns, strategic risk velocity, control density and duplication, and alignment between group objectives and subsidiary risks.

Executive & Subsidiary Risk Workshops

We facilitated strategic risk workshops at both group and subsidiary levels. Structured scenario analysis was conducted covering oil price shocks, gas supply disruption, electricity trading volatility, funding and liquidity constraints, and regulatory reform exposure.

Cause–Event–Impact methodology was applied to standardise risk articulation across all entities.

Cross-Entity Risk Consolidation

Subsidiary risk registers were reviewed and compared. Duplicated strategic risks across entities were identified and consolidated. Scoring thresholds were standardised across the group.

Risk descriptions were rationalised into a consistent taxonomy, and all risks were mapped to group-level strategic objectives.

Control & Mitigation Architecture

Control layering across subsidiaries was analysed to identify redundant or overlapping controls. Control design effectiveness was evaluated across the portfolio.

Mitigation plans were linked directly to defined risk exposures, and clearer ownership allocation was introduced across all business units.

Formal Strategic Risk Reporting

For the group and each relevant subsidiary, structured strategic risk reports were produced. Consolidated board-level risk summaries and executive-ready reporting packs were developed.

Narrative risk analysis was prepared for committee discussions. Findings were presented directly to executive leadership and board structures.

Our structured risk platform was used internally to consolidate risk data, model cross-entity exposure, and produce consistent reporting outputs.

Impact & Results

The engagement resulted in measurable structural improvements: a consolidated group-level risk architecture, elimination of duplicated strategic risks across subsidiaries, and clear linkage between group objectives and subsidiary exposure.

Electricity trading risk visibility was improved at the holding level. The control environment was rationalised, and manual reporting effort was significantly reduced. Board confidence in risk narratives was strengthened.

Most importantly, leadership shifted from reviewing fragmented entity reports to engaging with a coherent, portfolio-level risk view. Risk oversight became integrated rather than reactive.