Nine specialist services.
One senior-led team.
Specialist assurance and advisory across nine practice areas, from core internal audit through to AI governance, data risk and third-party assurance. All work is senior-led. There are no tiers of staffing between the person you speak to and the person doing the work.
Whether you need support for a specific assignment or a longer-term co-sourcing arrangement, we provide experienced internal audit practitioners who can operate across your business from day one.
For firms navigating live regulatory pressure or building longer-term risk management capability. We have direct experience of Consent Orders, s166 skilled person reviews, and major regulatory remediation programmes.
Loss of key audit or compliance staff is disruptive. We provide senior interim professionals who can step into critical roles and maintain the quality of your coverage without a protracted recruitment process.
The failure to prevent fraud duty under ECCTA Part 4 came into force on 1 September 2025. We help firms understand their obligations, assess their current procedures, and build the evidence their boards need.
Moving from "we have a plan" to "we can evidence good outcomes." We provide independent Consumer Duty gap analysis, readiness assessment, outcome testing and ongoing audit assurance, structured in three phases to match where your firm is in the journey.
Deliverables include:
Independent assurance over anti-money laundering, CTF, KYC, sanctions, transaction monitoring and suspicious activity reporting. We test whether controls actually work, not just whether they exist.
Regulators expect boards to demonstrate credible oversight of AI and automated decision-making. We provide independent audit and assurance over AI governance frameworks, model risk controls, and algorithmic fairness, aligned to FCA expectations and PRA SS1/23.
Regulated firms are responsible for what their suppliers do on their behalf. We provide independent assurance over third-party risk frameworks, critical outsourcer oversight, concentration risk and exit planning, aligned to FCA SYSC 8, PRA supervisory statements and DORA.
Poor data governance sits underneath almost every other risk. We provide independent assurance over data quality controls, governance frameworks, model risk management and regulatory reporting data, aligned to BCBS 239, PRA SS1/23 and FCA expectations.
A short conversation is usually enough
Most of our engagements begin with a brief call, usually 30 minutes, to understand what you are dealing with and whether we are the right fit. There is no commitment involved.
Speak to us →Relevant reading
What the failure to prevent fraud duty means for your 2026 audit plan
How to manage an FCA supervisory review without losing audit independence
Building an IIA-aligned methodology from scratch: a practical framework
Under pressure from a regulator or facing an audit gap?
We can usually begin work within two to three weeks. If you have an immediate need, the quickest thing to do is get in touch directly.