Internal Audit Capacity
Bring specialist support into your internal audit function, or agree an outsourced programme. Reviews can focus on a business process, a project or an area where your team needs additional technical depth.
Internal audit, risk and governance reviews to identify control gaps and priorities.
Discuss this serviceManagement needs to know whether the controls on paper are working in practice. ECM provides internal audit, risk and governance support that examines the evidence, identifies gaps and helps teams decide what to address first. We work with SMMEs, public-sector organisations and large corporates, including teams that need extra assurance capacity.
A review starts with the questions management needs answered. We examine decisions, working practices and supporting records, then discuss the control gaps and which actions need attention first.
The final scope, approach and deliverables are agreed with you before work begins.
On smaller screens, scroll across the diagram to read each step.
Bring specialist support into your internal audit function, or agree an outsourced programme. Reviews can focus on a business process, a project or an area where your team needs additional technical depth.
Connect objectives to the risks that could prevent delivery. Review risk ownership, control responsibilities and the quality of information reaching management and oversight structures.
Examine whether reported results can be supported and whether resources are being used as intended. Look beyond completed checklists to the decisions and operating practices behind them.
Follow assets from records to physical verification, and examine the controls around acquisition, use and maintenance. Reconciliations and practical procedures help clarify what is held and who is responsible.
Evidence-Led Assurance
Agree objectives, exposure and the questions the review must answer.
Walk through the process and examine relevant records and evidence.
Explain the cause, consequence and priority of each control gap.
Assign owners and revisit agreed actions with management.
Outputs are selected to suit the engagement and confirmed in the agreed scope.
Tell us about the process, risk concern or assurance capacity you need to address.