Risk & Compliance
Governance reviews, internal controls, risk management and regulatory readiness.
Risk is part of doing business. The aim is to know which risks matter, to have sensible controls and to be able to show regulators, lenders and donors that you are in control.
We keep the approach proportionate. A ten-person company does not need the same framework as a bank, but it does need the basics, written down and followed.
What we do
Enterprise risk management
Identifying, rating and managing the risks that could stop you reaching your goals.
Internal controls review
Testing how money, stock and information are protected and recommending fixes.
Governance and board support
Board charters, committee terms of reference, policies and director induction.
Data protection readiness
Mapping personal data and preparing policies in line with the Data Protection and Privacy Act.
Policy and procedure development
Finance, procurement, HR and anti-fraud policies that staff can follow.
Compliance health checks
A review of your regulatory obligations and a plan to close gaps.
What you receive
- Risk register with ratings and owners
- Findings report with prioritised recommendations
- Draft policies and procedures tailored to your business
- Staff briefing or training session
- Follow-up review to check implementation
Who this is for
- Companies growing quickly with informal controls
- Organisations responding to donor or lender requirements
- Boards wanting independent assurance
- Businesses handling customer personal data
Questions we are often asked
Do you provide legal advice?
No. Where legal advice is required we work with your lawyers. Our role is the business and operational side of compliance.
Is this only for large organisations?
No. Most of our clients are small and medium organisations, and we scale the work to fit.
Can you investigate suspected fraud?
We can review controls and processes. For formal investigations we recommend appropriate specialists and can coordinate with them.