Governance, Risk and Compliance

Our team develops standard operating procedures / manuals and delegation of authorities that are benchmarked to industry best practices

Our team assists clients in automatization of processes and establishing adequate system controls at the time of implementation of the ERP. This service also includes ensuring controls/ requirements identified at planning stage that have been incorporated in the ERP.

For UAE subsidiaries of US-listed parents: design and operating effectiveness testing, walkthrough documentation and deficiency remediation, run alongside group internal audit and the external auditor.

For in-house internal audit functions, we benchmark planning, execution, reporting and remediation tracking against IIA standards, and identify where the function can add more value to the Board and Audit Committee.

ERM framework design, risk register development, risk appetite statements and Board reporting protocols, built for how your business actually makes decisions rather than what a governance template suggests.

For businesses that have identified specific risks but not yet defined the controls to address them, we map controls to risks, assess adequacy and suggest working models that are proportionate to the size and nature of the business.

Discreet, evidence-led investigations using forensic data analytics, document review and witness interviews. Output is structured to support disciplinary action, insurance recovery or litigation, depending on what the situation requires.

Reviews covering the full range of third-party relationships: – Vendor and supplier reviews: procurement controls, contract compliance and spend validation. – Customer and dealer audits: distributor margin compliance, dealer performance and channel integrity. – Inventory verification: physical counts, reconciliation and stock audit at third-party locations. – Mystery shopping and outlet audits: service standards, pricing compliance and in-store execution for retail and hospitality businesses. – Contract compliance: validating that third parties are delivering against agreed terms and SLAs.