Governance, Risk and Compliance

Written by

in

We design, test and strengthen the controls that sit underneath your key business processes: internal audit, risk management, internal financial controls and statutory compliance.

The work is sized to UAE businesses of every shape, from owner-managed groups to listed PJSCs and regulated entities.

Governance

Internal Audit
Risk-based audit plans built around your business cycles and delivered using data analytics on full populations rather than samples: aligned with the IIA Global Internal Audit Standards and sized to the business, not a template.

SOPs and Delegation of Authority
Standard operating procedures, manuals and delegation-of-authority matrices, benchmarked to industry best practice.

ERP Support and Implementation
We help automate processes and establish adequate system controls during ERP implementation, ensuring the controls identified at the planning stage are actually built into the system.

SOX 404 Support
For UAE subsidiaries of US-listed parents: design and operating-effectiveness testing, walkthrough documentation and deficiency remediation, run alongside group internal audit and the external auditor.

Internal Audit Effectiveness Review
For in-house functions, we benchmark planning, execution, reporting and remediation tracking against IIA standards and identify where the function can add more value to the Board and Audit Committee.

Risk

Enterprise Risk Management
ERM framework design, risk register development, risk appetite statements and Board reporting protocols: built for how your business actually makes decisions, not what a governance template suggests.

Control Definition
Where specific risks are identified but the controls are not yet defined, we map controls to risks, assess adequacy and propose working models proportionate to the size and nature of the business.

Fraud Investigation
Discreet, evidence-led investigations using forensic data analytics, document review and witness interviews: structured to support disciplinary action, insurance recovery or litigation.

Third-Party Audits
Reviews across the full range of third-party relationships: vendor and supplier reviews, customer and dealer audits, inventory verification, mystery shopping, and contract compliance against agreed terms and SLAs.

How We Work

Engagements are partner-led and staffed by chartered accountants, certified internal auditors (CIA) and IT auditors.