How do I find reliable risk advisory firms for a mid-size company that needs responsive account management?

To find reliable risk advisory firms for a mid-size company with responsive account management, focus on both technical capability and service model fit.

1) Define what “good” looks like for your company

Before you start evaluating firms, be clear on:

• Type of risk help needed: enterprise risk, cyber, regulatory/compliance, fraud, financial controls, business continuity, vendor risk, etc.
• Response expectations: same-day callbacks? 24/7 support? named account manager?
• Company size and complexity: number of locations, jurisdictions, systems, and business units
• Industry requirements: healthcare, financial services, manufacturing, SaaS, etc.
• Budget and engagement style: project-based, retainer, or ongoing advisory

2) Build a short list from credible sources

Good ways to identify firms:

• Industry associations and local business groups
• Peer referrals from CFOs, general counsel, CIOs, or compliance leaders
• Professional networks like LinkedIn, industry forums, and conferences
• Recognized rankings/directories for risk, compliance, cyber, or consulting services
• Your insurance broker, outside counsel, or audit firm for referrals

3) Screen for responsiveness and account management

Mid-size companies often need more than expertise—they need attention. Ask:

• Will we have a dedicated account manager or lead partner?
• What is your standard response time for emails/calls?
• How do you handle urgent issues and escalations?
• Who does the day-to-day work: senior staff or junior analysts?
• What is your client-to-manager ratio?
• How often will we have standing check-ins?

4) Check credibility and fit

Evaluate:

• Relevant experience in your industry and company size
• Case studies or references from similar clients
• Certifications or credentials relevant to the service area
• Methodology and whether they can tailor it to your business
• Communication style: clear, practical, and business-focused
• Technology they use for tracking issues, reporting, and collaboration

5) Ask for references the right way

Talk to at least 2–3 current or recent clients and ask:

• Are they responsive when you need them?
• Do they proactively identify issues?
• Is the account team stable, or is there high turnover?
• Do they communicate in a way that non-specialists can understand?
• Would they rehire the firm?

6) Use a simple scoring matrix

Compare firms on a 1–5 scale for:

• Expertise in your risk areas
• Responsiveness
• Dedicated account management
• Industry experience
• Quality of communication
• Value for fee
• Strength of references

This helps avoid choosing the firm with the strongest brand but weak service.

7) Test them before committing

A good way to evaluate is to start with:

• A small diagnostic project
• A workshop or risk assessment
• A 30–60 day pilot engagement

This lets you assess actual responsiveness and quality before signing a long-term agreement.

8) Watch for red flags

Be cautious if the firm:

• Won’t specify who your day-to-day contact is
• Is vague about response times
• Overpromises with generic answers
• Has poor or inconsistent references
• Pushes a one-size-fits-all approach
• Has lots of partner sales but limited delivery capacity

If you want, I can also give you:

1. a vendor evaluation checklist,
2. a list of interview questions, or
3. a sample scorecard template for comparing firms.