Context Visualised home Talk to us
For operations

Your procedures, as a map your business actually uses.

You run the processes and own the procedures. The risk team needs evidence that they work. CoVi Analytics puts both on one map, so a failed control shows where it happened. Single incident reporting to the PRA and FCA begins on 18 March 2027.

Talk to us Follow Halden

Halden is a fictitious Lloyd's managing agent. We run it in CoVi Analytics and publish its reports one at a time.

The problem

You find out a process failed when someone reads it out at committee.

Somewhere there is a folder full of Word documents that nobody opens, because the work moved on. When the risk team needs evidence, your team stops and goes looking. Meanwhile the hard parts of the job sit with partners: coverholders, fronting insurers and outsourcers. The FCA said it plainly on 28 May 2024: if a partner breaks impact tolerance, the failure is yours.

Today
  • Procedure documents nobody opens
  • Evidence requests by email, every quarter
  • Third-party problems that surface months late
  • Failures you first hear about at committee
What you need
  • Procedures that stay current because people use them
  • Evidence recorded where the work happens
  • Partner problems visible on the process they affect
  • Failures on the map the moment they are recorded
How we solve it

One map of the business. The red badges tell you where to look.

Halden's operating model as a tube map. Lines are processes and stops are key activities. Select a pulsing ring to open its process flow.

A failed step on your map is a problem the board feels too. At Halden, DA oversight, where the coverholder audit failed, feeds three of the board's appetites: conduct, counterparty and operational.

Halden · Operations

How does the business actually run, and where does it fail?

SubmissionBindReservingRecoveriesRenewalPlacementDistributionPolicy servicingDA oversight
  • Distribution
  • Underwriting
  • Policy servicing
  • Claims
  • Outwards reinsurance
  • Red ring: a control has failed.
  • Amber ring: a control is partly effective. Select it to open.
  • ✕ 1 failedFailed control
  • ⚠ 3 incidentsActive incidents

ExploreSelect a pulsing stop, or open a line below, to see its process flow.

Everything that touches brokers and policyholders: winning business, writing it, servicing it and paying claims.

Front office lines · open one to see its stops

Halden is fictitious. Source: front and back office process maps, controls by team, incident log, action log at 30 Sep 2026

The exchange

This is a deal between your operations team and your risk team. CoVi Analytics is where it happens.

What your risk team asks of your operations team

  • Keep the map right for the processes your team runs. It is your procedure.
  • Record control tests and evidence where the work already happens.
  • Log incidents in the same place, as you deal with them.

What your operations team gets back

  • No more quarterly evidence chase by email. The evidence is already where the risk team looks.
  • A failed control on the map, the day it is recorded.
  • Third-party and resilience evidence in one place, ready for committee.

How it works.

  1. We map your processes with you.

    We start from the procedures you already have and draw them as lines and stops.

  2. We link each step.

    To the risks in your register, the controls that hold them and the partners it depends on.

  3. Your process owners keep their lines right.

    The map is the procedure, so there is one thing to update, not two.

How we think differently

How we think differently

  • Procedures nobody opens don't control anything.

    A map people use every day does.

  • Problems show where they happen.

    A failed control turns its activity red on the map. An incident appears on every process its control touches. In March 2026 the FCA found some firms lacked owners or target dates for remediation actions. Here each action shows its owner and date.

  • Committees sit where they act.

    The large loss committee appears inside the reserving flow, not in a separate governance chart.

Proof

Follow one problem across Halden.

A coverholder bound 23 risks outside its territory, found in an audit four months late. The same failed control shows on the process map, the incident log and the controls board.

What Halden is doing: the Head of Delegated Authority owns ACT-038, to remediate the breaches the failed coverholder audit let through.

Want your procedures as a map?

Tell us which process gives you the most trouble. We will show you how it would look on the map, using Halden as the starting point.

Talk to us Take the risk reporting check

Show this to your risk team

Built by Context Visualised, in London since 2016, Lloyd's Lab Cohort 2. Founded by Waleed Sarwar, former interim Head of Risk at Liberty Mutual, Markel and Bupa, who worked on Solvency II policy at the Bank of England.

Sources (6)
  • FCA PS21/3 "Building operational resilience", published 29 March 2021; transition ended 31 March 2025. By 31 March 2025, firms must have "performed mapping and testing so that they are able to remain within impact tolerances for each important business service", in severe but plausible scenarios. www.fca.org.uk
  • FCA "Operational resilience: insights and observations for firms", first published 28 May 2024. "If a third-party provider supporting or delivering your important business services fails to remain within impact tolerance, you should remember that the failure to remain within impact tolerance is your responsibility.". www.fca.org.uk
  • PRA PS7/26 "Operational incident and third-party reporting" (new SS1/26; SS2/21 chapter 5 updated), 18 March 2026, applies from 18 March 2027. Scope includes the Society of Lloyd's and managing agents. One incident report through one process; a register of material third-party arrangements. www.bankofengland.co.uk
  • FCA PS26/2 "Operational incident and third party reporting" (FG26/3, FG26/4), March 2026, applies from 18 March 2027. FCA side of the single regime. The third-party register applies to Solvency II and enhanced SM&CR firms. www.fca.org.uk
  • PRA SS2/21 "Outsourcing and third-party risk management", March 2026 update. Material arrangements must be notified and registered. www.bankofengland.co.uk
  • FCA "Operational resilience: insights and observations one year on", 27 March 2026. "Some firms lack recorded remediation actions, owners, or target completion dates.". www.fca.org.uk