Strategic Management Consulting with Deep Regulatory & Compliance Expertise

20+ years advising banks, credit unions, fintechs, and mortgage and insurance companies on program design, regulatory readiness, and governance. For institutions crossing $10 billion, integrating post-merger, or scaling toward $50 billion, the depth of regulatory scrutiny changes. We give leadership an independent view of whether the program meets it.

Schedule a Consultation View Services
20+
Years of Experience
Direct
Senior Access
<$50B
Asset Focus
Day 1
Engagement Ready
AI+
Enabled Delivery
What We Do

Advisory Services

Core service models tailored to your needs. Our engagements are customized based on scope and complexity at $375/hr, with minimums based on engagement type. We also support larger organizations on targeted risk and compliance engagements. Let's discuss your specific needs to determine the right investment.

Post-Merger Compliance Integration

A merged institution does not inherit one program. It inherits two, with no agreed baseline and no fast way to determine where to start. We assess both programs, identify gaps and redundancies, and deliver a prioritized integration roadmap so leadership can decide on structure, people, and process before the examiner asks which program you are operating from.

Risk and Compliance Program Design

Enterprise Risk Management ("ERM") frameworks and Compliance Management System ("CMS") builds, designed from the ground up or rebuilt to match your risk profile. Risk appetite statements, governance documents, risk assessments, risk-to-control mapping, and board reporting that reflects true exposure rather than activity counts.

Fractional Risk and Compliance Leadership

Embedded senior leadership without the full-time hire, at Head of Enterprise Risk, Chief Compliance Officer ("CCO"), Director, or Executive level. Ongoing strategic direction, program oversight, and team support for banks, credit unions, fintechs, mortgage and insurance companies, and private equity firms.

Executive and Board Advisory

Strategic counsel for boards, risk committees, and executive teams on program design, regulatory readiness, risk appetite, and governance structure. Independent perspective on the decisions that carry the most regulatory consequence. Ongoing retainer or project basis.

Board and Executive Training

Custom-built training on consumer compliance, regulatory change, enterprise risk, and governance, tailored for your board, C-suite, or management team. Half-day through multi-session engagements, delivered in person or virtually.

Interim Risk and Compliance Leadership

Temporary executive leadership for a coverage gap, with defined authority, a stabilization plan, a program assessment, and a structured handoff to your permanent hire. Thirty (30) to one hundred eighty (180) day engagements.

Also available: Independent Director and Board Committee service, Trial Expert and Litigation Support, and Regulatory Examination and Remediation Support. If you have a need not listed here, contact us to discuss it.
Who We Serve

Industries We Serve

The regulatory pressure looks different in each of these. So does the advice.

OCC · FDIC · Federal Reserve · CFPB

Community and Regional Banks

Four consecutive quarters above $10 billion in assets and the Consumer Financial Protection Bureau ("CFPB") assumes direct consumer compliance examination authority, under a different framework than the one your prudential regulator applies. We prepare programs for that shift and for the extended examination cycles that now leave institutions self-supervising between exams.

NCUA · NCUSIF · State Regulators

Credit Unions

The cooperative model changes the work. Members are owners, the board is elected and often volunteer, and field of membership shapes everything from product design to marketing. We understand National Credit Union Administration ("NCUA") supervisory posture, Office of National Examinations and Supervision ("ONES") examination readiness, mock examination preparation, and the consumer protection areas that draw attention at scale: overdraft programs, complaint handling, and Regulation E error resolution.

CFPB · Sponsor Bank · State Licensing

Fintechs

Your compliance obligations arrive through two doors at once: direct regulatory exposure and the expectations of your sponsor bank. We build programs that satisfy both, with third-party risk management and governance documentation that survives a partner's due diligence review.

CFPB · HUD · State Regulators

Mortgage Companies

Tatum began her career as a mortgage compliance attorney. Fair lending exposure under the Fair Housing Act was untouched by the 2026 Regulation B final rule, Home Mortgage Disclosure Act ("HMDA") data stays public, and origination, pricing, and servicing outcomes remain the areas examiners and plaintiffs' counsel look at first.

State Insurance Departments · NAIC

Insurance Companies

Market conduct, complaint handling, producer oversight, and enterprise risk governance, with the same program discipline applied in banking. We build frameworks that hold up across a multi-state regulatory footprint rather than one examiner's preference.

SEC · Portfolio Company Oversight

Private Equity Firms

Fractional compliance leadership, program documentation, and the same scrutiny applied to regulated institutions, brought to firm-level obligations and to compliance diligence on financial services portfolio companies before and after a deal closes.

A note on the regulators listed above. Each tile names the agencies most commonly associated with that industry. It is not a complete list. Your regulatory perimeter is set by the activities you conduct and the charters, licenses, and partnerships you hold, not by the label on your institution. CrestPoint maps your actual perimeter as part of every engagement rather than assuming it.
Insights

Thought Leadership

Published analysis on the regulatory questions sitting on Chief Risk Officer and Chief Compliance Officer desks right now.

Supervision · July 2026

Your Next Exam Could Be 78 Months Away. It Will Cover All 78.

Federal prudential regulators broadly extended examination cycles and pared back policy-based examination scope in 2026. Not one consumer protection requirement went with them. What the supervisory reset actually means for community banks and credit unions now self-supervising between exams.

Read on LinkedIn
Fair Lending · July 2026

Disparate Impact Just Left Regulation B. Don't Let Your Program Follow It Out the Door.

The Bureau's final rule took effect July 21, 2026. The Fair Housing Act, state law, and your own public data did not move. Every lender now chooses what happens to its fair lending analytics, and the rationale memo matters more than the choice.

Read on LinkedIn
Governance · July 2026

Section 1071: Preserve, Pause, or Dismantle?

The 2026 final rule pushed the compliance date to January 1, 2028 and raised the coverage threshold to 1,000 originations. Three defensible paths sit in front of every institution. This is a governance decision, not a data question.

Read on LinkedIn
Post-Merger · 2026

What CROs Need to Understand When Your Merger Just Pushed You Past the Threshold

A $7 billion institution acquiring a $5 billion institution is at $12 billion on day one of closing. The problem is not one underprepared program. It is two, with no agreed baseline. Where post-merger compliance integration actually breaks down, and what to do about it.

Read on LinkedIn
Follow on LinkedIn
Speaking and Training

Invite Tatum to Speak

Conference sessions, panels, webinars, and board rooms. Substance over slideware, built for an audience that already knows the basics.

  • Post-Merger Compliance IntegrationWhy two adequate programs do not combine into one defensible program, and what leadership needs to decide before the first examination.
  • The Supervisory Reset and Self-SupervisionExtended examination cycles are a deadline, not a reprieve. What changes when your own monitoring output becomes the examination record.
  • CMS Assessment and Program DesignWhat a Compliance Management System is actually measured against, and where sub-threshold programs consistently come up short.
  • ERM Framework Design for Institutions Under $50 BillionRisk appetite, risk-to-control mapping, and board reporting that reflects exposure rather than activity.
  • Fair Lending Governance Through Regulatory ChangeBuilding a program with a documented point of view that survives the swing of the pendulum.

Formats

  • Conference keynote
  • Panel participation and moderation
  • Webinar and virtual session
  • Board and executive training
  • Certification school and multi-session faculty

Background

  • 20+ years in financial services risk and compliance
  • Former Global Head of Compliance Program Management, TD Bank
  • Prior senior advisory roles at KPMG and Promontory Financial Group
  • Past panelist and subject matter expert at credit union industry conferences, including the America's Credit Unions (formerly CUNA) Risk and Compliance Conference
Invite Tatum to Speak
Our Approach

How We Differ

We bring executive-level thinking to every engagement, without the complexity, cost, or dependency of traditional consulting.

01

Direct Senior Access

No layering, no leverage model. You work directly with experienced compliance leadership from day one through project completion.

02

Strategy Over Execution

We focus on clarity, prioritization, and regulatory alignment. Our role is to accelerate your internal teams, not create dependency on outside resources.

03

AI-Informed Advisory

We integrate AI assessments and compliance technology audits into our advisory practice, helping you modernize without compromising data security or regulatory compliance.

04

High-Impact Engagements

Time-bound, clearly scoped work designed to deliver measurable results. Every engagement has defined boundaries and deliverables.

05

Flexible Models

From one-time assessments to ongoing fractional advisory, our engagement models flex to match your organization's needs and budget.

06

Minority & Women-Owned Business

CrestPoint Advisory Group is a minority and women-owned business, bringing diverse perspective and lived experience to every engagement.

Tatum Hennessy
About Tatum

Built on Experience. Designed for Impact.

With 20+ years of experience as a North Carolina-licensed attorney specializing in legal, risk, and compliance in financial services, Tatum brings strategic expertise across enterprise risk management, regulatory readiness, and compliance program design.

Her career began as a mortgage compliance attorney, evolved through senior advisory roles at KPMG and Promontory Financial Group, and most recently culminated in an executive leadership role as the Global Head of Compliance Program Management at TD Bank, where she led enterprise-wide compliance transformations across regulatory, governance, and operational domains. Her work has spanned complaint and issue management, risk assessments, governance frameworks, monitoring and testing, enterprise and operational risk, compliance training, and AI-driven compliance modernization.

CrestPoint was built on a simple premise: growing organizations deserve the same caliber of compliance leadership that large institutions rely on, without the overhead of a large consulting model or the delays of bureaucratic processes.

Tatum Hennessy Senior Advisor, CrestPoint Advisory Group
About CrestPoint

Why CrestPoint

I named CrestPoint after a moment of absolute clarity, and honestly, a moment of faith.

My husband is from Utah. Every time our plane flies over those mountains, I gasp. I'm from North Carolina, so I see mountains all the time. But those Utah peaks are different. They're massive, unapologetic, breathtaking. In those moments, I have no doubt that God is real. I needed that feeling embedded in my company's name and logo.

But there's more to it than that.

There's an old African adage that's resonated with me my entire life: lift as we climb. It's a reminder that success isn't just about reaching the top. It's about making sure others can get there too. The compass in my logo points north, sitting between two mountain peaks. It's a constant reminder to me that no matter how hard things get, I keep moving upward and onward. I keep climbing toward that crest.

And that's what CrestPoint is really about.

I left corporate America because I wanted a different way to do the work I love. I have a family, and I realized I couldn't be the best version of myself doing my day job if I wasn't being the best version of myself doing my dream job, being a wife and mom to two perfect little girls. So I built CrestPoint around that non-negotiable: family first, always. That's not a side note. That's the foundation.

I also built it because I watched organizations get priced out of access to senior-level compliance expertise. They were told they needed massive consulting firms with massive retainers. But they didn't. They needed someone who understood the work, could move fast, and actually cared about their success, not just billable hours. So CrestPoint exists for the sub-$50B institutions that the big firms overlook: the community banks, credit unions, fintechs, insurance companies, mortgage firms and other non-banks doing real work in real communities.

You work directly with me. You get senior leadership. At CrestPoint you get someone who believes that lifting as we climb means your success is my success, and that your people matter just as much as your balance sheet.

If that resonates, let's talk. If it doesn't, that's okay too. We're probably not the right fit.

Tatum
Contact

Let's Start a Conversation

Whether you are integrating after a merger, building out your risk or compliance function, preparing for an examination, or looking for a speaker, we are here to help you think it through. Tatum reviews every inquiry personally.

TatumHennessy@crestpointadvisorygroup.com
info@crestpointadvisorygroup.com
Charlotte, North Carolina

Prefer to skip the form?

Book time directly on Tatum's calendar for an introductory conversation. No preparation required. Bring the situation and we will talk it through.

Book Time Directly