Risk-based internal audit — controls testing, fraud-risk assessment, process effectiveness review, and a quarterly audit committee report. Reports to the board, not to management. Find what's broken before customers, regulators or auditors do.
One team, one fixed price, one set of clean deliverables. No vendor sprawl, no Excel chains, no last-minute scrambles.
Annual risk assessment workshop with leadership. Top-10 risks ranked by impact + likelihood. Audit plan tied to risk, not to last year's audit plan.
Walkthroughs and tests of design + operating effectiveness across financial, operational, IT and compliance controls. Documented gaps + recommendations.
Vendor fraud, expense fraud, payroll ghost-employees, revenue leakage. Specific testing programs designed per industry.
Quarterly report to the board / audit committee with risk dashboard, finding-status, management responses, and trend lines.
Half-day workshop with leadership to identify and rank business risks.
12-month audit plan tied to ranked risks + statutory triggers.
3-4 audit assignments per quarter — controls testing, walkthroughs, sampling.
Quarterly written report + board attendance.
Open findings tracked to closure with monthly status reports to management.
We report to the board / audit committee, not to management. Findings stay objective, even when uncomfortable. This is what the role is meant to be.
Internal audit pays for itself when it finds one major issue. Last year we surfaced AED 4.2M+ of fraud / leakage / overpayment across our client base.
Methodology lifted from PwC, EY internal audit practices — applied at SME pricing because we don't carry their overhead.
Tell us your group structure (entities, locations), revenue band, and whether you have an audit committee or board today. We'll propose a 12-month audit plan + fee.
