Who This Is For:

• Businesses without documented control procedures
• Companies with recurring audit findings from internal or external audit
• Organisations implementing ERP and needing controls defined
• Growing businesses formalizing from ad-hoc operations

What We Deliver:

• COSO framework assessment (existing control environment)
• Control gap analysis across all key business processes
• Internal control design for high-risk areas
• Internal control testing (design adequacy and operating effectiveness)
• Standard Operating Procedures (SOP) development
• Policy and procedure documentation
• Delegation of Authority (DoA) matrix
• Control self-assessment tools for management
• Controls training for process owners

COSO Framework Components We Cover:

1. Control Environment (tone at top, governance, HR policies)
2. Risk Assessment (risk identification and analysis)
3. Control Activities (authorization, reconciliation, physical controls)
4. Information & Communication (reporting accuracy, communication channels)
5. Monitoring (ongoing monitoring, internal audit, management review)

Types of Controls We Design:

1. Preventive Controls (stop errors before they occur)
2. Detective Controls (identify errors after they occur)
3. Automated Controls (system-enforced rules)
4. Manual Controls (human review and approval)
5. Key Controls (highest risk, most important to test)