Risk & Compliance
We bring visibility, accountability, and confidence to how your organization manages risk, at every stage of growth.
Internal Controls & Process Review
For organizations that need clear policies, controls that work with a lean team, and an independent check that those controls hold up for auditors, lenders, and funders.
Most leadership teams can name their biggest risks, but few have them written down, ranked, and assigned to someone who owns them. We interview leadership and process owners, build a risk register scored by likelihood and impact, and give the board a short list of what to act on first, so control and audit work goes where it matters most.
Fraud hides best on small teams, where the person who can move money is often the person who records it. We map where cash, payroll, vendors, and assets are exposed, look for the warning signs behind the most common schemes, and recommend the controls that close the biggest gaps without adding headcount.
Policies that sit in a binder don’t change how money moves, and most control frameworks assume a team large enough to separate every duty. We write policies with the people who follow them, document key processes in a risk and control matrix, and add compensating controls where staffing falls short, so controls still work when someone is out or leaves.
SOX, and scrutiny from lenders, investors, or a buyer, require controls that are documented and shown to work. We assess current controls against the standard, remediate the gaps, and leave documentation in place so testing starts from evidence rather than a scramble.
A process can pass a controls test andstill be slow, costly, or quietly broken. We review a function end to end, suchas procure-to-pay, grants management, or system access, against policy and bestpractice, then report what’s working, what isn’t, and what to fix, in an orderyour team can realistically take on.
Audit Readiness & Support
The tagline should cover the workdone between audits: “For organizations that want a smooth audit, findings resolved at the root cause, and compliance that holds between audits.
Audits run long when fieldwork stalls waiting on schedules. We prepare and review reconciliations, schedules, and documentation before fieldwork starts, for financial statement audits and Single Audits.
One point of contact for your auditors throughout fieldwork, managing requests, schedules, and follow-up, so your finance team keeps running the business and the audit finishes on time.
Afinding that gets a quick fix usually comes back. We trace each one to its rootcause, build a corrective action plan with a named owner, and follow it throughto resolution.
Controls drift when the only people checking a process are the ones running it. We work alongside management as your second line, running control self-assessments, compliance testing, key risk indicators, and a calendar of filing and audit deadlines. Because we work with management rather than auditing it, we help fix what we find, so issues are resolved between audits instead of during them.
Grant Management
For organizations that rely on grant funding and need strong applications, compliant management, and reporting that holds through every monitoring reviewand Single Audit.
Strong applications depend as much on a complete budget and clean supporting data as on the narrative. We gather the required documents and data, build the budget and budget narrative, and write or strengthen the narrative sections through submission.
Each award is set up with its own budget, account structure, and drawdown process, and restricted funds and activity are tracked by funding source. When a funder or auditor asks how a dollar was spent, the answer comes from the books, not a side spreadsheet.
Many grant findings trace back to the same few areas: unallowable costs, unsupported allocations, and procurement that skipped a step. We put written policies, procurement standards, and internal controls in place that meet 2 CFR 200, review costs for allowability, and set a defensible method for allocating shared and indirect costs.
When you pass funds to subrecipients, their compliance becomes your responsibility. We set up risk assessments, ongoing monitoring reviews, and documentation for each one, so problems surface during the award rather than in your Single Audit.
Funder reports prepared on time and tied to your financial statements, so what you report matches what gets audited. Monitoring reviews are prepared for in advance, and each award is carried through closeout without loose ends.
Finally, execution with full confidence.
Our experts uncover and solve problems that take leadership away from doing what they do best: leading. We illuminate your best path forward so you can keep the main thing, the main thing.
