Risk Advisory & Internal Audit

Risk advisory and internal audit

Internal audit, controls testing and process reviews for the clients who need assurance beyond the annual financial statement.

What we work with

Overview

Controls work is where a small finding becomes a large one

Most control failures are visible long before they cost anything, provided somebody is looking. We run internal audit and controls testing as a documented programme, so findings arrive with evidence attached and a recommendation your client can act on.

Most control failures are visible long before they cost anything, provided somebody is looking. Internal audit and controls testing run properly is a documented programme with an agreed scope, not an annual scramble, and it produces findings with evidence attached rather than opinions.

We run internal audit programmes against an agreed plan, test internal financial controls for design and operating effectiveness, and document processes so a client’s team can actually follow them. Findings come with the evidence, the exposure and a recommendation your client can act on.

  • Firms whose clients need assurance beyond the annual financial statement audit
  • Firms supporting clients preparing for external scrutiny or a funding round
  • Firms whose clients have grown past the controls they built at the start
  • Firms who want a documented internal audit programme rather than ad-hoc reviews

Scope

What is included

01

Internal audit programmes

Scoped, executed and reported against an agreed annual plan.

02

Internal financial controls review

Design and operating effectiveness testing, documented for reliance.

03

Process and control improvement

Walkthroughs, gap analysis and practical redesign of weak controls.

04

Standard operating procedures

Written procedures your client’s team can actually follow.

05

Concurrent audit

Ongoing transaction-level review for higher-risk processes.

06

Risk assessment

Identifying where the exposure sits before it becomes a finding.

What changes

Results you should expect

Findings with evidence

Every observation is supported by testing documentation, so it can be defended in a meeting.

Controls that are actually followed

Procedures written for the people who have to run them, not for a binder.

Exposure identified early

Risk assessment runs ahead of the testing, so scope goes where the exposure actually is.

How we work

Every file is checked three times before it reaches you

1
Prepared

A dedicated accountant

One qualified person assigned to your firm, working in your software and following your checklists.

2
Reviewed

A CPA manager

A second qualified review against your own review points, before the file comes back to you.

3
Approved

A partner

A partner signs off every deliverable, so you always know who is responsible for the work.

Questions

Common questions about this service

What does an internal audit programme cover?

Scope is agreed with you at the start, usually against a risk assessment. Execution, testing and reporting then run to that plan across the year.

Yes, both design and operating effectiveness, documented to a standard that supports reliance.

Yes. Written for the client’s own team, in their language, so the procedure is usable rather than decorative.

Audit support prepares files underneath an external audit opinion. Risk advisory is internal work for the client’s own management, covering controls, process and exposure.

Industries

The client files we work in

The same service reads differently depending on whose books it is. These are the sectors we work across.

CPA & Accounting Firms
Pharmaceuticals
Technology & SaaS
Alcohol & Beverage
Telecom & Broadband
E-commerce & Retail
Manufacturing
Banking & Financial Services
Real Estate & Construction
Healthcare
Law Firms & Professional Services
Education & Non-Profit

Next step

Talk to us about risk advisory & internal audit

Thirty minutes, free, with one of our partners. Bring your volumes and we will tell you plainly whether we are the right fit.

No obligation. A partner replies, not a sales team.