Internal Audit Support
We support clients' internal audit functions, from audit planning and execution to reporting, from a specialist perspective.
Coverage Areas (Examples)
The scope of internal audit varies by industry, size, and risk profile. Below are the primary areas we cover.
Risk Assessment & Planning
We build the foundations of internal audit — risk-based planning, audit manuals — designed to focus limited resources on the risks that matter.
Examples： Risk-based audit plan development / Audit universe scoping & prioritization / Annual audit schedule design / Audit manual & procedure documentation
Operational & Financial Audit
We perform operational and financial audits — grounded in CPA expertise and aimed at substance, not formality.
Examples： Financial reporting process verification / Internal control (J-SOX) compliance / Procurement / expense / inventory audit / Fraud risk assessment & follow-up
IT & AI Audit
We audit technology areas from IT general controls to AI usage risk, examining substance rather than form on the basis of how the systems actually work.
Examples： IT general controls (access/change/operations) / SaaS & cloud environment controls / AI usage & generative AI risk audit / Data quality & information security audit
Our Strengths
Big Four-Level Audit Quality
CPAs with Big Four experience lead each engagement, applying external audit standards to raise internal audit quality to a level that withstands scrutiny by external auditors.
Specialist IT & AI Audit
We cover IT general controls, AI usage audits, and cloud security reviews — the range of risk that comes with the IT environment, including generative AI governance.
Audit Scoped to Your Size and Stage
The resource available for internal audit varies enormously between companies. What a listed company with a dedicated function can run is not what a company whose auditor also holds another role can run. We plan around concentrating limited effort on the risks that matter, and design a cycle that can actually be sustained.
FAQ
Q. Can companies without an internal audit department use your services?
Yes — we offer outsourced internal audit services for SMEs and startups that do not have an internal audit function. We can accommodate arrangements ranging from one to two audit engagements per year through to ongoing support. We also support the development of internal audit frameworks in preparation for an IPO.
Q. Are your internal audit reports in a format suitable for presentation to the board or statutory auditors?
Yes — internal audit reports are prepared in a format appropriate for presentation to the board of directors, statutory auditors, and audit committee. Findings, risk assessments, and improvement recommendations are clearly documented in a format that management can use for decision-making. English versions are also available.
Q. Do you cover IT General Controls (ITGC) audits?
Yes — we audit the IT general controls critical to J-SOX compliance: access management, change management, operations management, and physical security. We also evaluate controls in cloud and SaaS environments, including IT risk assessments of third-party service providers.
Q. Can you support J-SOX internal control reporting requirements?
Yes — we support the development and evaluation of internal control over financial reporting (J-SOX) required of listed companies. This includes process documentation (risk control matrices and flowcharts), design and operating effectiveness evaluation, and deficiency identification and remediation planning. We also provide integrated support where coordination with the audit firm is needed.
Q. What is the difference between external audit (audit firm) and internal audit, and can the two be coordinated?
External audit provides an independent third-party opinion on the fairness of financial statements, while internal audit continuously evaluates the effectiveness of risk management and controls within the organization. As part of our internal audit support, we also assist in preparing materials and responding to questions from the audit firm.
Get in Touch
We will listen to your concerns and propose the most suitable service. Initial contact creates no contractual obligation.
Contact Us