Internal Audit.Risk-based internal audit aligned to IIA standards.

Why this matters

Internal audit is the line of defence that catches what management did not see and what external audit does not test. We run it as an outsourced function, a co-sourced model alongside your in-house team, or a one-off review focused on a specific business unit or risk area. The methodology follows the IIA's International Professional Practices Framework.

What's inside

6 engagements under Internal Audit, each with a dedicated page. Click any for the full brief.

Risk-Based Audit Plan

An annual plan built from a current risk assessment: financial reporting, operations, IT, regulatory compliance, and fraud.

Full brief→

Process Walkthroughs and Controls Testing

Walk the process from end to end, document the design, then test operating effectiveness on a sample sized for the population.

Full brief→

IT General Controls Review

Access management, change management, computer operations, and IT-dependent manual controls.

Full brief→

Compliance Reviews

AML and CFT (Federal Decree-Law 20 of 2018 and Cabinet Decision 10 of 2019), Economic Substance, Ultimate Beneficial Owner reporting, and sector-specific licensing conditions.

Full brief→

Audit Committee Reporting

Quarterly reporting that the Audit Committee can actually use: traffic-light status on open findings, time-on-issue tracking, and an executive view of where the residual risk now…

Full brief→

Whistleblower Hotline Investigations

Allegations referred through your whistleblower channel are scoped, investigated, and reported with the confidentiality the source needs and the documentation HR or counsel will r…

Full brief→

First time?

Read our step-by-step guides before you engage. Or speak to a partner.

Read guides Book consultation