The Home of Global Business Solutions info@ecmgroupza.co.za
Governance, Risk & Assurance

Business Advisory & Assurance

Internal audit, risk and governance reviews to identify control gaps and priorities.

Discuss this service
Service Profile

Know Where Your Controls Hold. See Where They Need Work.

Management needs to know whether the controls on paper are working in practice. ECM provides internal audit, risk and governance support that examines the evidence, identifies gaps and helps teams decide what to address first. We work with SMMEs, public-sector organisations and large corporates, including teams that need extra assurance capacity.

A review starts with the questions management needs answered. We examine decisions, working practices and supporting records, then discuss the control gaps and which actions need attention first.

Assurance Coverage

  • Co-sourced or outsourced internal audit and combined assurance support
  • Enterprise risk management, governance and compliance reviews
  • Internal controls, performance information and value-for-money reviews
  • Asset management strategies, register verification and improvement planning

The final scope, approach and deliverables are agreed with you before work begins.

Business Advisory: From Risk to Accountable Action

On smaller screens, scroll across the diagram to read each step.

An open assurance folio connects risk and objectives to control design, testing and evidence, evaluation of findings, management action and follow-up. The duplicate-payment control checks invoice references, supplier, value and date. Findings are assessed against criteria; actions have an owner, due date and completion evidence. Follow-up checks implementation and remaining exposure. These are review activities rather than reported client findings.
An open assurance folio connects risk and objectives to control design, testing and evidence, evaluation of findings, management action and follow-up. The duplicate-payment control checks invoice references, supplier, value and date. Findings are assessed against criteria; actions have an owner, due date and completion evidence. Follow-up checks implementation and remaining exposure. These are review activities rather than reported client findings.
What We Do

A Closer Look at the Risks Behind Performance.

Internal Audit Capacity

Bring specialist support into your internal audit function, or agree an outsourced programme. Reviews can focus on a business process, a project or an area where your team needs additional technical depth.

Risk and Governance

Connect objectives to the risks that could prevent delivery. Review risk ownership, control responsibilities and the quality of information reaching management and oversight structures.

Performance and Value

Examine whether reported results can be supported and whether resources are being used as intended. Look beyond completed checklists to the decisions and operating practices behind them.

Assets and Operational Controls

Follow assets from records to physical verification, and examine the controls around acquisition, use and maintenance. Reconciliations and practical procedures help clarify what is held and who is responsible.

The Work Explained

From Risk Priorities to Management Action

Evidence-Led Assurance

  1. Prioritise Risk

    Agree objectives, exposure and the questions the review must answer.

  2. Test Controls

    Walk through the process and examine relevant records and evidence.

  3. Report Findings

    Explain the cause, consequence and priority of each control gap.

  4. Track Action

    Assign owners and revisit agreed actions with management.

Findings feed back into the next review, so assurance follows the changing business rather than a static checklist.
Potential Outputs

Findings That Support a Decision.

  • An agreed review scope and evidence requirements
  • A prioritised findings report with practical recommendations
  • An action register with owners and follow-up points

Outputs are selected to suit the engagement and confirmed in the agreed scope.

Your Next Step

Which Area Needs a Clearer View?

Tell us about the process, risk concern or assurance capacity you need to address.

Contact ECM Group