For Non-Executive Directors · Board Risk & Audit Committees

The governance pack the Risk Committee Chair will want before engagement.

Independent financial-risk advisors who are engaged on regulatory-capital and supervisory matters are, at Tier-1 banks, engaged by the Board. Every Non-Executive Director we have worked with has, before signature, asked a version of the same five questions. This page answers them in the order they are asked: independence, conflicts, partner bios, professional indemnity cover, and the reference process. Everything here is on the record, in writing, and the responsibility of the Managing Partner.

Ezelman is structurally independent. No audit, no software, no placement fee.

Independence in financial-risk advisory is a small-boutique question dressed up as a Big-4 question. At scale, it is nearly impossible to hold; at boutique scale, it is the only thing we sell. The answers below are the architecture. If any one of them changes, the Board will be notified in writing before the next mandate signature.

Structural independence

Four lines we do not cross, by design.

01 · No audit
Ezelman does not hold, has never held, and will not seek a statutory audit registration. We do not issue opinions under ISA, PCAOB or any equivalent regime. We do not perform work that could, by rotation or prior–audit rules, constrain any future audit appointment at the client.
02 · No software
Ezelman has no proprietary software product, no SaaS subscription, no platform licence. We do not earn implementation, training or maintenance fees from any third-party vendor. We are never incented to recommend a tool because it carries a margin.
03 · No placement, no commission
Ezelman does not earn placement fees, finder’s fees or success-based commissions from banks, asset managers, insurers, model vendors, rating agencies or any counterparty the client may deal with. Every euro of revenue is a time-and-materials or fixed-fee invoice to the client signing the engagement letter.
04 · No capped-roster leak
Ezelman operates a deliberately capped mandate roster. When two peer institutions are competing on the same supervisory question, we will decline the second mandate. The Board will be informed before the decline is taken.

What this unlocks. Because Ezelman does not hold an audit practice, does not sell software, and does not take placement economics, the senior advisory opinion presented to the Risk Committee is free of the commercial incentives that systematically distort the advice Boards receive from larger firms. This is not a marketing point. It is the operating constraint of the firm.

Independence is reviewed at each mandate inception and re-confirmed annually in writing by the Managing Partner to every active client’s Risk Committee Chair. An independence letter is a standing deliverable at the first steering committee of every mandate.

The conflict check runs before the proposal, not after.

At large firms, the conflict check is a compliance step at the end of a sales cycle. At Ezelman it is the first conversation, on the first call. The rules below are the ones the Managing Partner applies before a proposal is written — not after it is signed.

Mandate-level conflicts

The three tests every new engagement passes.

  • Peer-institution test. Ezelman will not hold two live mandates on the same supervisory question (e.g. the same ECB thematic review, the same SAMA programme, the same IRB recalibration cohort) at two peer institutions in the same market at the same time. If a second peer asks, we decline. No exceptions.
  • Same-supervisor test. Where two clients have overlapping supervisory dialogues with the same Joint Supervisory Team, Ezelman will partition delivery teams, partition documentation, and disclose the structural arrangement to each client’s Risk Committee Chair in writing before the second mandate begins. The client retains a right to veto.
  • Prior-role test. Where a partner or senior advisor has, within the previous 24 months, held an executive or advisory role at the counterparty of a proposed mandate — a vendor being evaluated, an auditor being challenged, a regulator whose guidance is being interpreted — that partner is removed from the engagement and a note is placed in the file. A standing 24-month cooling-off applies to any supervisory role.
Individual-level conflicts

Every Ezelman partner signs a personal conflicts declaration at mandate signature.

The declaration lists: prior employment with the client (none undisclosed), prior employment with the client’s supervisor, prior employment with peer institutions in the same market, ownership interests in any counterparty, immediate-family interests at the client, and any ongoing personal consulting relationship outside the Ezelman roster. The declaration is renewed annually, on each new mandate, and on any change in personal circumstances.

Where a declaration would otherwise be blank for formality’s sake, we note explicitly that it is blank. An empty conflicts page is the answer. A conflicts page that says “none known” without a declaration underneath it is not.

What we will not do

Three engagement patterns Ezelman refuses, for conflict reasons.

  • No ‘secondary advisor’ mandates to validate a first advisor’s work. Where a Board asks us to review another advisor’s output, we will only accept the mandate if the first advisor is copied on terms of reference and the review scope is disclosed to them in writing. Ezelman does not run covert second-opinion work.
  • No parallel regulator engagement. Ezelman does not hold simultaneous paid work from a bank and from that bank’s primary supervisor. Where we provide thought-leadership input to a supervisor on a topic, we disclose this on every client proposal in that topic area.
  • No success fees tied to supervisory outcomes. Ezelman will not price a mandate on “if Pillar 2G is lower than X bps you pay us Y.” Supervisory outcomes are a product of a thousand factors the advisor does not control, and the moment success fees enter the room the advice bends. We bill for time and effort.
The conflicts register is maintained by the Managing Partner. It is produced, unredacted, to any Risk Committee Chair on request. The partner-level declarations are produced to the Board Secretary.

The senior leadership the Risk Committee will speak to.

Ezelman operates a partner-led model. Every mandate has a named partner signing the engagement letter, chairing the steering committee, and presenting to the Board where required. No mandate is delegated to a junior team supervised at distance. The bios below are the senior leadership the Risk Committee will encounter.

HM
Hannan Mohammad
Founder & Managing Partner

Hannan Mohammad is the founder and Managing Partner of Ezelman. Before founding the firm in 2020, he spent eighteen years inside European Global Systemically Important Banks, leading CRR3 implementation programmes, ECB on-site inspection responses, supervisory stress-testing exercises and regulatory-transformation mandates across credit-risk, counterparty-risk and Pillar 2 domains.

He chairs every Ezelman engagement in Europe directly, signs every engagement letter, and is the named partner on every credit-risk OSI, Pillar 2G defence and CRR3 implementation mandate the firm holds. He is the Board’s point of contact.

BaseParis, France
PracticeCRR3 · OSI · Pillar 2 · stress testing
LanguagesEnglish · Français · Arabic
Full profile/hannan/ →
Senior roster · non-partner seniors

Beyond the Managing Partner, every Ezelman mandate is staffed from a capped roster of senior advisors.

The Ezelman senior roster is a closed population of directors, senior managers and former supervisors with a minimum of fifteen years of in-bank regulatory experience. We do not staff mandates with junior consultants supervised at distance. The minimum hiring seniority at Ezelman is Director — this is a standing firm policy and is stated explicitly on the Careers page.

Named senior roster for any given mandate is disclosed to the Risk Committee before signature. CVs, supervisory references and personal conflicts declarations for every named senior are provided on request. Where the mandate involves specialist disciplines (model validation for IRB, ICAAP documentation, ORSA, IFRS 9) the senior leading that stream is named in the engagement letter and attends every steering committee in person.

Full partner track is disclosed under the Firm Economics section. Ezelman’s current named-partner target is two additional partners by end-2027, in Paris and Dubai.

Professional indemnity insurance, underwritten at G-SIB mandate scale.

Ezelman carries professional indemnity and civil liability insurance calibrated to the typical mandate size and the plausible downside of a senior regulatory-advisory engagement at a G-SIB. The policy is not decorative. A certificate of insurance is produced, unredacted, to the General Counsel of every client at contract signature and is renewable annually.

Current cover · policy summary

The policy line-items the General Counsel will check.

Insured
Ezelman SAS · French limited company, SIRET on request
Cover type
Professional indemnity · civil liability (RC Professionnelle et RC Exploitation)
Aggregate limit
€5,000,000 per claim · €10,000,000 annual aggregate · single-mandate cover extendable on request
Geographic scope
Europe · UK · GCC · US · worldwide ex. sanctioned jurisdictions
Retroactive cover
Retroactive to firm inception (2020) · no exclusion for work performed since founding
Policy duration
Continuous since 2020 · annual renewal · no gap since inception
Claims history
No claims made, no claims notified · confirmed by insurer in writing on request
Mandate-specific top-up
Available on request · typically arranged within 10 business days · upper limits underwritten at AAA-rated European carrier level
Contractual posture

Caps of liability, carve-outs and the walk-away clause.

Ezelman’s standard engagement letter caps contractual liability at three times the mandate fee, with the uncapped carve-outs that are customary in senior regulatory advisory: fraud, wilful misconduct, breach of confidentiality and breach of data protection law. We do not request uncapped liability in our own favour; we do not accept uncapped liability running the other direction either.

Every Ezelman engagement letter contains a walk-away clause: where the client instructs the firm to advance a position the Managing Partner judges incompatible with the applicable supervisory framework or professional standards, Ezelman reserves the right to resign the mandate on written notice with no further fee, rather than document a position we do not hold. This clause is not negotiable in either direction.

The firm’s standard engagement-letter language, walk-away clause, PI certificate and conflicts declaration are all available as a single diligence pack on Board request. Turnaround: under three business days.

Five steps from first Board conversation to mandate signature.

Every new Board engagement at Ezelman runs through the same five-step reference process. The process is designed to put the Risk Committee Chair in direct contact with two peer Chairs Ezelman has worked for, before any engagement letter is signed. The process is not reversible — we will not compress it, and we will not skip step three.

01
Board briefing call
30 minutes, Managing Partner. Framing of the regulatory problem, preliminary view of scope, timeline and fee envelope. No advice is given; no engagement letter is drafted.
02
Diligence pack
The pack: independence letter, conflicts declaration, PI certificate, engagement-letter template, senior roster CVs, capabilities one-pager. Delivered to the Board Secretary within three business days.
03
Two peer-chair references
Ezelman introduces the Risk Committee Chair to two peer Chairs at banks where we have run comparable mandates. Each peer call is unmoderated and off the clock. We are not in the room.
04
Scoping workshop
Half-day, Managing Partner plus the proposed mandate senior. Joint drafting of scope, deliverable list, steering cadence, Board touchpoints. The output is the engagement-letter annex.
05
Engagement-letter signature
Engagement letter signed by the Managing Partner personally. First steering committee runs within 10 business days of signature. The independence letter is re-issued on day one.

On peer-chair references specifically. The two peer Chairs Ezelman will introduce are always currently or recently serving Non-Executive Directors at peer institutions in a comparable jurisdiction. Where the Risk Committee would prefer a reference from a more specific angle — a former Head of Risk, a former JST coordinator, a serving CRO — that is accommodated on request. The reference introductions are never paid for, scripted or moderated.

Start with the 30-minute Board briefing call. Direct line to the Managing Partner. No sales call attached, no procurement flow. If the conversation suggests an engagement, step 02 begins the next business day. If it does not, we refer you to a peer advisor free of charge.
Book the Board call →

Everything above, in a single governance pack.

The five disclosures on this page are consolidated in a single governance pack: independence letter, conflicts register, partner bios, PI certificate, standard engagement letter with walk-away clause, and the reference-process SLA. The pack is produced to the Board Secretary on request and is renewable annually. No NDA required to receive it.

Request the governance pack. Replied to by the Managing Partner, same business day in EU hours. Next business day in GCC hours. The pack is a single PDF, produced on Ezelman letterhead, countersigned by the Managing Partner.
Email the Managing Partner →
Follow Ezelman on LinkedIn — Regulatory insights read by 2,000+ risk professionals across Europe & the GCC Follow →