GRC Consulting

Regulatory Compliance and Financial Crime

Helping regulated entities and DNFBPS navigate the complex regulatory environments and enhance operational resilience:

• Financial Services Rule Book procedures and controls: development, implementation, and testing

• AML/CFT Code procedures and controls: development, implementation, and testing

• 2LOD Compliance Monitoring - audit and assurance

• Refresher training, tailored to senior staff and operational teams

• Assistance with both ARR and AML statistical return reporting

• Mentoring and training of first-time HOCs and in-house compliance teams

• Business, Technology, and Customer Risk Assessment framework review

• Enterprise Risk Assessment framework review

• Whistleblower process review, training, and independent investigation*
  (*subject to conflict of interest check)

Data Protection and Information Security

Assisting businesses with GDPR compliance:

• Procedures, and controls: development, implementation, and testing

• Data mapping (compilation of the Data Asset Inventory)

• 2LOD Compliance Monitoring - audit and assurance

• Refresher training, tailored to senior staff and operational teams

• Data Breach management and response

Please note that Castle Digital does not provide Data Protection Officer services

Regulatory visits, remediation, and Enforcement

Whether it is the post-license visit, regular visit, or thematic inspection - it is imperative that a regulated entity can demonstrate its ongoing compliance with all of its regulatory requirements.

• Pre-visit preparation including mock inspections

• Post-visit response

• Visit Report - remediation project

• Business turn around and enforcement action response

• Regulatory liaison and ongoing progress reporting

Interim, fractional, or consultancy appointments

Providing interim, locum cover, and appointments in exceptional circumstances for the following positions:

• Executive Director

• Head of Compliance

• MLRO / DMLRO

For those businesses that do not require a full-time role holder, a fractional appointment or retained compliance consultancy arrangement may be more suitable - please contact us for more details.

Corporate Governance

Providing your business with strategic oversight and demonstrate effective governance:

• Provision of Independent Non-Executive Director*

• Audit, Risk, and Compliance Committee membership

*Appointment subject to regulatory approval and conflict of interest checks with other client appointments.

License surrender and wind-down

Castle Digital has experience with the licensing surrender or de-registration and wind-down process, having been part of or led a number of licence surrenders and company wind-down programmes across both Financial Services and eGaming.

Castle Digital can assist and support your licence surrender, DNFBP de-registration and business wind-down programme - ensuring the regulated entity is both wound down appropriately and continues to meet all of its regulatory requirements post licence surrender date - specifically record keeping and retention.

Secure your Regulated Business

Contact us