Service 03

Risk Advisory

Strong controls protect value and enable growth. We help organisations understand their process risks, design proportionate controls and test whether those controls operate as intended.

Overview

As businesses scale, informal processes that once worked become sources of error, leakage and compliance risk. Boards and audit committees also expect evidence that internal controls are adequate and operating effectively.

Our risk advisory work is practical and process-led. We map how transactions actually flow, identify the risks that matter, and recommend controls that are proportionate to the size and nature of the business.

Scope of services

  1. Internal Audit

    Risk-based internal audit plans, process reviews, testing and reporting to management and audit committees, with tracking of agreed actions.

  2. Standard Operating Procedure (SOP) Preparation

    Documentation of processes, roles, approval matrices and controls across procure-to-pay, order-to-cash, inventory, payroll, treasury and financial close.

  3. ICOFR – Implementation and Testing

    Risk and control matrices, process narratives, design and operating-effectiveness testing, and deficiency evaluation for internal financial controls over financial reporting.

  4. Special Audits

    Focused reviews of specific areas, transactions or concerns – for example, vendor or expense reviews, stock audits or reviews requested by management, lenders or investors.

Business requirements we address

  • Audit committee and board oversight requirements
  • Reporting on internal financial controls
  • Undocumented or person-dependent processes
  • Revenue leakage, cost overruns or control lapses
  • Pre-investment or pre-IPO control readiness
  • Independent review of a specific area of concern