Skip to content
Weltz Group

AI-Driven Risk Intelligence

Intelligence that moves risk forward.

Weltz Group is a team of banking, technology and risk professionals building AI-driven risk intelligence for financial institutions — helping them connect information, strengthen oversight, and make more informed decisions.

PorchLightFlagship productOperational Risk Intelligence. Connected.

Built for the complexity of modern financial institutions.

Weltz Group

Banking, technology and risk expertise — brought together with AI.

Weltz Group is a team of banking, technology and risk professionals focused on one problem: helping financial institutions see their operational risk clearly.

We combine hands-on experience in financial services with modern technology and artificial intelligence to bring greater structure, connectivity and clarity to risk management environments.

Our flagship product: PorchLight
  • 01

    Banking & Risk Expertise

    A team with backgrounds across banking, operational risk and governance, grounded in how financial institutions actually work.

  • 02

    Technology & AI

    Modern data architecture and artificial intelligence applied to connect fragmented risk information and surface what matters.

  • 03

    Practical Risk Intelligence

    Turning complex risk information into structured insights that support better management decisions.

01Fragmented

Risk information lives in silos.

Spreadsheets, email trails, shared drives and point solutions — each holds part of the picture, and none of them hold it together.

The operational risk challenge

Risk management should be connected. Not fragmented.

Financial institutions often manage operational risk programs through disconnected tools, spreadsheets, workflows, and reporting structures. The result is a picture of risk that is harder to assemble — and harder to trust.
  1. Fragmented Information

    Risk assessments, control testing, indicators, events, and issues often sit in separate environments.

  2. Limited Visibility

    Disconnected information makes it harder to understand relationships and emerging patterns across the organization.

  3. Manual Processes

    Spreadsheet-heavy processes can create administrative effort, inconsistent data, and reporting challenges.

  4. PorchLight brings these activities together in one integrated risk management environment.

Risk exposure landscapeIllustrative
  • Monitored
  • Elevated exposure
  • Higher exposure
Conceptual visualization. Not real risk data.

02Connected

PorchLight brings it into one light.

Assessments, controls, indicators, events, issues and risk appetite, organized in one connected environment.

PorchLight — Assess · Analyze · Address

Our flagship product

One platform. A connected view of operational risk.

PorchLight— Operational Risk Intelligence.Connected.

Assess•Analyze•Address

PorchLight is an integrated operational risk management platform designed to help financial institutions manage their core risk programs within one connected environment.

It brings risk assessments, controls, indicators, events, issues, and risk appetite into a unified platform — one integrated platform to assess risk, evaluate controls, monitor exposure, manage events, and drive remediation.

PorchLight platform architecture

Six capabilities. One connected risk ecosystem.

Each module does its own job — and informs the others. Select a module to see where its information connects.

01 · RCSA

Identify, assess, and understand risk across the organization.

Connects with Control Testing, Risk Indicators, Operational Risk Events, Issue Management

Modules & capabilities

The six programs of operational risk, in one platform.

Each module covers a core operational risk management program. Together they share one taxonomy and one connected view.
  • MODULE 01

    RCSA

    Risk & Control Self-Assessment

    Identify, assess, and understand risk across the organization.

    Structure risk assessments around business processes, risk taxonomies, and control frameworks. Evaluate inherent and residual risk, assess control effectiveness, and track mitigation actions.

    • Risk identification and assessment
    • Inherent and residual risk
    • Control assessments
    • Risk heatmaps and action plans
  • MODULE 02

    Control Testing

    Establish confidence in the effectiveness of controls.

    Plan and execute control assessments, document testing evidence, evaluate design and operating effectiveness, and identify control deficiencies requiring remediation.

    • Test planning and execution
    • Evidence management
    • Control effectiveness ratings
    • Deficiency tracking
  • MODULE 03

    Risk Indicators

    Key Risk Indicators (KRIs)

    Detect emerging exposures before they become larger problems.

    Define risk indicators, establish thresholds, monitor performance over time, and identify adverse trends and threshold breaches to support proactive risk oversight.

    • KRI management
    • Threshold configuration
    • Trend analysis
    • Breach monitoring and escalation
  • MODULE 04

    Risk Appetite

    Translate risk tolerance into measurable oversight.

    Define risk appetite measures, establish tolerance thresholds, monitor exposure against approved limits, and provide visibility into areas approaching or exceeding appetite.

    • Appetite statements
    • Metrics and thresholds
    • Exposure monitoring
    • Limit breaches and oversight
  • MODULE 05

    Operational Risk Events

    Turn operational incidents into actionable risk intelligence.

    Capture and classify operational risk events, document financial and non-financial impacts, analyze root causes, and identify recurring patterns across the organization.

    • Event capture and classification
    • Loss data management
    • Root cause analysis
    • Event trend analysis
  • MODULE 06

    Issue Management

    Drive accountability from identification through resolution.

    Centralize issue tracking, assign ownership, manage remediation plans, monitor overdue actions, and maintain visibility into issue progress and closure.

    • Issue registers
    • Ownership and accountability
    • Remediation workflows
    • Due-date and closure tracking

Early warning · Risk Indicators

See exposure building before it breaks a threshold.

Define risk indicators, establish thresholds, monitor performance over time, and identify adverse trends and threshold breaches to support proactive risk oversight.

Within threshold
Approaching
Breach — escalate

Conceptual visualization of indicator monitoring. Not live data.

03Monitored

Then it keeps watch.

Indicators and appetite measures are monitored against their thresholds, so changing exposure is visible before it becomes a larger problem.

Why PorchLight

Designed around the way financial institutions manage risk.

Not a list of features — a connected environment, so that what is learned in one program is visible in the others.
Scenario · risk propagationConceptual
  1. An operational event occurs
  2. Connected processes are affected
  3. Potential exposure reaches related risks
  4. Relevant controls are highlighted
  5. A remediation pathway is identified

An illustration of connected risk, not a prediction: real events do not all follow the same path.

  1. Connected Risk Intelligence

    Connect information across core operational risk management programs.

  2. Unified Risk Taxonomy

    Provide a consistent foundation for organizing risk information.

  3. Integrated Analytics

    Support interpretation of information across individual programs and the wider risk environment.

  4. Executive Visibility

    Provide relevant information for management oversight and program-level decision-making.

  5. Configurable Architecture

    Adapt workflows and configurations to institutional needs.

04Clarity

Assess. Analyze. Address.

One clear view of operational risk — from identification through resolution.

Contact

Let’s bring greater clarity to risk.

Discover how Weltz Group and PorchLight can support your institution’s approach to operational risk management.

Tell us a little about your institution and what you would like to discuss.

All fields are required.