Services

Full-spectrum governance, risk and compliance

From a single controls audit to a multi-year assurance program, our specialists plug into your teams and lift maturity without stalling the business.

Governance Advisory

  • Board and committee effectiveness reviews
  • Governance operating model design
  • Delegations of authority and accountability mapping
  • Policy framework rationalisation

Risk Management

  • Enterprise risk management framework uplift
  • Risk appetite statements and tolerance metrics
  • Operational and third-party risk assessments
  • Business continuity and resilience testing

Compliance Programs

  • Regulatory obligations registers
  • Compliance monitoring and control testing plans
  • Regulatory change management
  • Privacy, AML/CTF and data protection uplift
  • Japan ISMAP compliance gap and obligation mapping

Internal Audit

  • Outsourced and co-sourced internal audit
  • Risk-based three-year audit planning
  • Process and financial control audits
  • Issue closure and remediation validation
  • Japan ISMAP formal audit and evidence review

IT & Cyber Audit

  • ISO 27001 and SOC 2 readiness
  • Essential Eight and NIST CSF maturity assessments
  • Access management and change control audits
  • Cloud configuration and vendor assurance reviews
  • Japan ISMAP readiness assessments and cloud security reviews

Consulting & Enablement

  • GRC platform selection and implementation
  • Control library and taxonomy design
  • Executive and board risk training
  • Interim risk and compliance leadership
  • Japan ISMAP remediation support and evidence pack preparation

How we work

A four-stage assurance cycle

01

Diagnose

Rapid maturity baseline against your obligations and frameworks.

02

Design

A right-sized control and assurance model with clear ownership.

03

Test

Independent evidence-based testing with severity-rated findings.

04

Sustain

Remediation tracking, reporting packs and ongoing assurance.

Scope an engagement