Risk Advisory

Providing True Business Value

Our extensive range of bespoke advisory services are designed according to client specific needs. We aim to provide value to our clients through gaining an understanding of their business and designing solutions that are suitable for the nature of our clients’ businesses. We have a wealth of industry experience and domain experience, and, when needed, can draw on the knowledge of our global network. Our Senior Team have operated in the Saudi Market for many years and have an intimate understanding of business practices and challenges. Unlike many competitors, our Senior Team are closely involved in service delivery.

Whatever business challenge you face, we are confident that we can provide an appropriate solution. Examples pf services provided are as follows:

Risk Advisory:

• Internal Audit
  • Providing specific assignments to client internal audit department where the department lacks the needed skills.
  • Providing such services uses our staff and working with client staff to facilitate knowledge transfer.
  • Complete outsourcing of internal audit departments.
  • Internal Audit Risk Assessments.
  • Setting up internal audit departments including drafting relevant charters, internal audit manuals, designing the organizational structure and job descriptions, performing the initial risk assessment preparing the internal audit plan as well as assisting in staff selection and training.
  • Internal Audit Quality Assurance Reviews as required by the Institute of Internal Auditors.
  • Internal Audit Effectiveness Reviews.
  • Audit Committee Evaluation and Advisory Services
  • Selection of internal audit documentation packages.
• Business Controls
  • Internal Control Reviews
  • Review of the Controls within specific business processes.
  • Design of Delegation of Authority Matrices at all levels.
  • Review and update of Policies and Procedures.
  • Preparation of Policies and Procedures.
• Technology Risk
  • Performing IT Audits including General Controls or specific aspects of General Controls
  • Designing Controls and Security in ERP systems.
  • Performing Cyber Security Reviews.
  • Performing Penetration Testing.
  • Performing Network Vulnerability Testing
  • Performing Reviews of Specific Applications
  • Preparation of IT Strategies.
  • Preparing IT Policies and Procedures.
  • Reviewing and preparing IT Disaster Recovery Plans.
• Business Continuity Planning
  • Review of current Business Continuity Plans.
  • Assisting in the testing of such plans.
  • Preparing Business Continuity Plans.
• Corporate Governance
  • Review of Overall Governance Structure and Implementation.
  • Review of or preparation of Board Charters and Committee Charters.
  • Preparation of Corporate Governance Manuals.
  • Preparation of other key documents such as Codes of Conduct.
  • IPO readiness reviews from a Corporate Governance perspective
• Enterprise Risk Management
  • Preparation of ERM Risk Registers.
  • Review and update of such registers.
  • Integrating ERM and Internal Audit Risk Registers and Follow-up mechanisms to avoid duplication.
• Fraud Investigations.
• Verification of Fixed Assets.