Green Quadrant: Enterprise Risk Management Consulting Services (2025)

Published 7 March 2025 by Renee Murphy & Katelyn Johnson &

Access this research

Access all Risk Management content with a strategic subscription or buy this single report

Buy Subscription

Need help or have a question about this report? Contact us for assistance

Executive Summary

This report provides a detailed, fact-based benchmark of 15 of the most prominent enterprise risk management (ERM) services providers in the market. Based on the proprietary Verdantix Green Quadrant methodology, our analysis entailed two-hour vendor briefings and responses to a detailed 50-point questionnaire covering both capabilities and momentum criteria. Verdantix analysis finds that the established ERM market is growing to meet customer needs around new technologies and emerging risks. While risk consulting stalwarts EY and PwC stand out in the Leaders' Quadrant, our analysis highlights the unique features of each vendor and identifies their best-fit end-users. Customers of all maturities, seeking clarity in uncertain times, can use this report to find an ERM services provider capable of addressing their particular needs and challenges. 

Table of contents

Summary for decision-makers
The state of the enterprise risk management (ERM) consulting services market

Technological innovation and new regulatory requirements are fuelling demand for ERM services
ERM firms come in many shapes and sizes, to address the varying needs of businesses across geographies and industries
Despite recent advisory lay-offs, the ERM consulting services market is expected to grow in the long term
Green Quadrant for ERM consulting services 2025
Green Quadrant methodology
Evaluated firms: selection criteria
Evaluation criteria for ERM consulting services providers
Baringa overview
Analyst insight: Baringa integrates cybersecurity advisory with broader risk and resilience solutions
BDO overview
Analyst insight: BDO’s tailored ERM solutions empower strategic growth and compliance
Boston Consulting Group (BCG) overview
Analyst insight: BCG offers comprehensive ERM advisory services for large and multinational firms
Deloitte overview
Analyst insight: Deloitte is renowned globally for its technology-driven risk advisory and strategic insights
dss+ overview
Analyst insight: dss+ offers customized risk strategies for utilities and extractive industries
EY overview
Analyst insight: EY provides advanced, scalable risk solutions for complex business challenges
FTI Consulting overview
Analyst insight: FTI boasts enterprise risk management enhanced by forensic and industry expertise
Grant Thornton overview
Analyst insight: Grant Thornton offers breadth and depth for the mid-market and mid-sized enterprises
J.S. Held overview
Analyst insight: J.S. Held delivers ERM solutions with cyber and financial expertise
KPMG overview
Analyst insight: KPMG proposes comprehensive risk management solutions for multinational challenges
Kroll overview
Analyst insight: Kroll expands from investigations to comprehensive global risk management
McKinsey & Company overview
Analyst insight: McKinsey & Company integrates risk management with strategy, for growth and resilience
Protiviti overview
Analyst insight: Protiviti provides tailored, technology-driven ERM solutions for small to mid-sized enterprises
PwC overview
Analyst insight: PwC delivers comprehensive risk advisory and assurance services to firms of all sizes
RSM overview
Analyst insight: RSM balances the abstract and concrete in its advisory offering

Table of figures

Figure 1. Overview of ERM service lines evaluated in this report
Figure 2. Capabilities criteria for ERM consulting services
Figure 3. Momentum criteria for ERM consulting services
Figure 4. Consulting services provider scores: capabilities
Figure 5. Consulting services provider scores: momentum
Figure 6. Green Quadrant for ERM consulting services 2025

About the authors

Renee Murphy

Principal Analyst
Renee Murphy is a Principal Analyst in the Risk Management practice at Verdantix. Her current research targets GRC, with a particular focus on the integration of ESG into GRC. Prior to joining Verdantix, Renee was Chief Evangelist at Diligent Software; she also worked at Forrester for a decade, where she was Principal Analyst, covering risk management, audit and sustainability management.

Katelyn Johnson

Senior Manager, Risk Management
Katelyn is the Senior Manager in the Verdantix Risk Management practice. Her current research agenda focuses on climate risk and its integration into risk management frameworks. Prior to joining Verdantix, Katelyn was a climate scientist at GNS Science in New Zealand. She has previously held roles in the energy industry, where she helped projects manage risk due to weather and ocean phenomena. Katelyn holds a PhD in Geology from Victoria University of Wellington and an MS in Earth Sciences from Ohio State University – both focusing on climate science – as well as a BS in Meteorology from Texas A&M University.

Related Reports

Not a Verdantix client yet?

Register with Verdantix for authoritative data, analysis and advice to allow your business to succeed.