Skip to main content
Image coming soon

The Commerce Platform Risk Strategy Playbook

$199.00
Adding to cart… The item has been added

A focused course, tailored for you

The Commerce Platform Risk Strategy Playbook

How a Risk Strategy lead at a large commerce or payments platform turns merchant loss curves, network rule changes, and licensing exposure into one decision book the COO actually signs.

Your COO does not want another dashboard. They want one page that says where the merchant loss curve is bending, which card network thresholds are about to trip, and which licensing entity has to carry the next regulator question. Right now that page is rebuilt every quarter from three teams who disagree on the cohort cut.

$199 one-time
Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

Risk Strategy at a commerce or payments platform sits at the intersection of merchant underwriting, fraud ops, the card network rules desk, the AML and consumer-protection programmes, and the licensing entities that actually hold the money transmitter, e-money, or payment institution permissions. The merchant base is enormous, heterogeneous, and constantly resegmenting. The card networks change Visa Acquirer Monitoring Program and Mastercard Excessive Chargeback Program thresholds without much warning. The consumer-protection regulators have moved aggressively on hidden fees, refund timing, and merchant-of-record disclosure. The CFPB, FCA, ASIC, and equivalent regulators in your active corridors all want different evidence formats for the same underlying control. Meanwhile the finance team wants the loss curve to bend, the product team wants frictionless onboarding for high-margin merchant segments, and the General Counsel wants a defensible record of every appetite decision. The hard part is not collecting the data. It is publishing one decision book that all four functions agree with, that updates on a known cadence, and that the COO can show to the board without a week of pre-meetings.

What you walk away with

  • Publish a one-page risk appetite statement covering merchant onboarding, portfolio loss, network programme thresholds, and consumer-protection exposure that your COO and General Counsel both sign without rewriting.
  • Build a merchant cohort loss curve that survives a card network rule change without a quarter of rework, with the cohort definition documented and version-controlled.
  • Track Visa Acquirer Monitoring Program, Mastercard Excessive Chargeback Program, and the Dispute Monitoring Program thresholds at portfolio and sub-portfolio level with a known lead time before a trip.
  • Hand the General Counsel a regulator-ready narrative for each active corridor (CFPB, FCA, ASIC, MAS, equivalent) in a form that does not need to be rewritten for filings.
  • Replace the quarterly scramble to assemble the board risk read with a known monthly publication cadence backed by templates the underwriting, fraud, and treasury teams already use.

The 12 modules

Module 1. Writing the risk appetite statement the COO actually signs
Start from a blank page and write a one-page risk appetite statement that covers merchant onboarding criteria, portfolio loss tolerance, network programme thresholds, and consumer-protection exposure. The module walks through the four sentences each section has to contain, the metric definitions that have to be locked before drafting, and the sign-off path through Finance, Legal, and the COO so the statement does not get rewritten on the way to the board.
Module 2. Defining the merchant cohort cut that holds for a year
The single biggest source of risk-strategy rework is disagreement on the cohort cut. The module shows how to build a cohort definition that captures industry vertical, ticket size, geography, payment method mix, and tenure, version-controls the definition, and survives a card network rule change. Includes the cohort definition template and the change-control process so any update is reviewed by underwriting, fraud, and finance before publication.
Module 3. Building the portfolio loss curve and the bending diagnostic
The COO does not want the loss number. They want to know whether the curve is bending and why. The module walks through building the rolling loss curve at portfolio and sub-portfolio level, the diagnostic that distinguishes cohort drift from underwriting policy drift from fraud pattern drift, and the chart that goes to the board so the curve direction is unambiguous.
Module 4. Tracking Visa AMP, Mastercard ECP, and the dispute programmes at portfolio level
Network programme thresholds are written for individual merchants but blow up at the portfolio when sub-portfolios trip in waves. The module shows how to project sub-portfolio chargeback ratios against Visa Acquirer Monitoring Program, Mastercard Excessive Chargeback Program, and the Dispute Monitoring Program thresholds with a known lead time, and how to escalate the projection to the network rules desk before a sub-portfolio trips.
Module 5. Underwriting policy as a risk strategy lever, not a checklist
Underwriting is usually treated as gatekeeping. The module repositions it as the primary lever for bending the loss curve, walks through how to write policy changes that target specific merchant cohorts the loss curve is flagging, and shows how to land the policy change in product, sales, and customer success without breaking the high-margin onboarding pipeline.
Module 6. Fraud loss attribution that the fraud ops team agrees with
Risk Strategy and fraud ops fight over attribution because each team has a different model. The module shows how to write a shared attribution model that splits gross loss into first-party, third-party, friendly fraud, merchant collusion, and policy-rejected-then-released, with a publication template that fraud ops will sign as accurate. Without this, every loss curve presentation becomes a method argument.
Module 7. Consumer-protection regulator narratives by corridor
The CFPB cares about hidden fees and refund timing. The FCA cares about consumer duty and complaints handling. ASIC cares about anti-hawking and design and distribution obligations. MAS cares about disclosure for cross-border merchant-of-record flows. The module walks through writing a corridor-specific regulator narrative that the General Counsel can lift into filings, with the evidence-pack template for each.
Module 8. Money transmitter, e-money, and PI licensing entity exposure mapping
Most large commerce platforms hold a portfolio of licences across jurisdictions and the question of which entity carries which exposure is rarely written down clearly. The module shows how to map merchant flows to licensing entities, build the entity-level risk view the General Counsel needs for regulator conversations, and surface the cases where flow routing is creating exposure no entity is set up to absorb.
Module 9. AML programme calibration for marketplace and merchant-of-record models
AML programme design for platforms is different from traditional acquirer AML because the platform sits between buyer, seller, and acquirer. The module walks through calibrating transaction monitoring thresholds for marketplace and merchant-of-record flows, writing the SAR narrative templates the BSA officer needs, and presenting AML programme health to the audit committee without surprising them.
Module 10. Publishing the monthly risk decision book
Replace the quarterly scramble with a monthly decision book that publishes on a known cadence. The module provides the full template, the data-source map, the review cadence with underwriting, fraud, treasury, and Legal, and the COO walkthrough that turns the book from a Risk Strategy artefact into the operating document the platform actually runs on.
Module 11. Handling the next card network rule change without a quarter of rework
When a card network publishes a rule change, the wrong response is to rebuild every cohort and every threshold projection from scratch. The module shows how to write a rule-change response playbook that scopes the impact in days, lands underwriting and fraud policy updates in a fortnight, and updates the portfolio decision book on the next publication cycle without breaking version control.
Module 12. Board risk read in one page, every quarter
The board does not want twenty slides. They want one page that says where the loss curve is, where the network programme thresholds are, where the consumer-protection regulator exposure sits, and where the licensing entity exposure sits. The module provides the one-page template, the back-up appendix template, and the rehearsal walkthrough so the board read is signed off by Finance, Legal, and the COO before the meeting.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

Modules 1, 3, 10, and 12 build the executive surface — the risk appetite statement, the loss curve, the monthly decision book, and the board read. Use these when the immediate problem is that the COO and the board cannot get a clear single read of where the portfolio sits.
Modules 2, 5, 6, and 11 are the underwriting and fraud machinery — the cohort cut, underwriting as a strategic lever, the shared fraud attribution model, and the card network rule-change response playbook. Use these when the loss curve is the right shape but the operational teams keep disagreeing on definition or response.
Modules 4, 7, 8, and 9 are the regulator and licensing surface — network programme threshold tracking, corridor-specific consumer-protection narratives, licensing entity exposure mapping, and AML programme calibration. Use these when the General Counsel is asking for evidence packs and the licensing entity exposure picture is unclear.
All twelve modules together replace the quarterly scramble with a known publication cadence and a documented decision trail. Pick the four modules closest to your current pain first, then close the loop with the rest as the monthly cycle stabilises.

What you get with this course

  • Twelve written modules with worked examples drawn from large commerce platform, payments platform, and marketplace risk programmes.
  • Downloadable templates for the risk appetite statement, the merchant cohort definition and change control, the portfolio loss curve and bending diagnostic, the network programme threshold tracker, the shared fraud attribution model, the corridor regulator narrative packs, the licensing entity exposure map, the AML programme health template, the monthly decision book, the card network rule-change response playbook, and the board one-pager.
  • A hand-built implementation playbook scoped to your platform's actual merchant mix, licensing footprint, and active regulator corridors, delivered alongside course access.
  • Self-paced access in the Art of Service learning environment with the templates and worked examples available for download as you work through each module.

What you will have in hand by Day 1, Week 1, Month 1

Within 24 hours of purchase, your account in the learning environment is provisioned and all twelve modules with their templates are available.

Alongside course access, the hand-built implementation playbook scoped to your platform's merchant mix, licensing footprint, and active regulator corridors is delivered in the same learning environment.

Suggested cadence for the reader is one module per week with the template adapted to your platform as you go, taking the loss curve and board read templates into production by the end of the third month.

Before and after

Before

Risk Strategy publishes a quarterly board read assembled from underwriting, fraud, treasury, and Legal under deadline pressure. The cohort cut is re-argued every cycle. The network programme threshold projections are built ad hoc. The General Counsel rewrites the regulator narrative every time. The COO asks the same loss-curve question every meeting and gets a slightly different answer.

After

Risk Strategy publishes a monthly decision book on a known cadence, drawn from a locked cohort cut, a shared fraud attribution model, and a documented threshold tracker. The General Counsel takes the corridor narrative packs into regulator conversations without rewriting them. The COO asks the loss-curve question and points to the same one-page diagnostic the team published last week. The board read is one page, signed off before the meeting, and the conversation moves to the underlying merchant strategy decisions instead of the methodology.

What happens if you do not address this

Without a locked cohort cut and a shared fraud attribution model, every loss curve presentation becomes a methodology argument and the COO stops trusting the read. Without portfolio-level network programme threshold tracking, a sub-portfolio trips Visa Acquirer Monitoring Program or Mastercard Excessive Chargeback Program in production and the response is reactive. Without corridor-specific regulator narratives ready, the General Counsel goes into consumer-protection conversations without the evidence packs and the platform absorbs avoidable enforcement risk. Each cycle the gap widens because the operational teams stop investing in shared definitions when there is no published artefact they all sign.

Who it is for

Risk Strategy leaders inside large commerce platforms, payment service providers, acquirers, marketplaces, or merchant-of-record platforms. The reader owns or significantly influences how merchant risk appetite is written, how the portfolio loss curve is reported, how card network programme thresholds are tracked at portfolio level, and how the General Counsel hears about regulator exposure in the active corridors. Reader is comfortable with chargeback ratios, fraud loss attribution, and the difference between a merchant cohort cut by industry vertical and one cut by ticket size.

Who this is NOT for. Not for fraud analysts who only work individual case decisioning. Not for compliance officers whose mandate is BSA or AML transaction monitoring in isolation. Not for product managers who want to learn risk concepts at an introductory level. The reader is already running risk strategy at platform scale and needs the practitioner playbook for the next twelve months of merchant portfolio decisions.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Around three to four hours per module for the reader who adapts the templates as they go. Twelve modules total. The reader who runs one module per week finishes the structured pass in a quarter while the templates are already in production.

Why $199 is the right number

The alternatives are a Big4 risk advisory engagement (six figures, three months to first deliverable, leaves you with slides rather than templates the operating teams will sign), a payments-industry conference circuit (useful for benchmarking but no artefacts), or building it in-house from scratch (the path most teams take and the reason every quarterly board read becomes a scramble). This course is the practitioner shortcut: the templates, the cadence, and the playbook scoped to your platform, delivered in a form your underwriting, fraud, treasury, and Legal teams can adopt immediately.

FAQ

Will this work if our platform sits across multiple licensing entities in different jurisdictions?
Yes. Module 8 is specifically about mapping merchant flows to licensing entities and the implementation playbook delivered with course access is scoped to your platform's actual licensing footprint, so the entity-level exposure view is built for your structure, not a generic one.
Is the content tied to a specific card network or regulator?
No. The portfolio loss curve, cohort cut, fraud attribution model, and decision book templates are network-agnostic. The threshold tracking module covers Visa Acquirer Monitoring Program, Mastercard Excessive Chargeback Program, and the Dispute Monitoring Program. The regulator narrative module covers CFPB, FCA, ASIC, and MAS specifically and the implementation playbook is scoped to your active corridors.
We already have a risk appetite statement. Why module 1?
Most risk appetite statements are written for the audit committee, not for the COO. Module 1 walks through writing one the COO actually uses as an operating document, which is a different artefact. The reader keeps the existing statement and decides during the module which sections to lift into the COO version.
How is the implementation playbook tailored?
The playbook is hand-built after purchase. It takes your platform's merchant mix, licensing footprint, and active regulator corridors as inputs and lands as a specific decision document that names the cohorts, thresholds, and corridors that matter for your portfolio. It is delivered in your learning environment alongside course access.
What does the reader need to know before starting?
Practitioner-level fluency with chargeback ratios, fraud loss attribution categories, and the difference between portfolio-level and merchant-level network programme thresholds. The course is written for someone already running Risk Strategy at platform scale, not for someone learning the concepts.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.