Internal Audit Preparation Services

We assist management of non internal audit clients to review policies and procedures of key processes, and conduct tests of key controls to check that they are adequate and complied with before the internal auditors’ visits.   

Technology Risk Management ("TRM")

  • Assist with the implementation of relevant TRM policies and procedures that are consistent with client’s risk framework that is designed to comply with the TRM Guidelines issued by Monetary Authority of Singapore.
  • Assist to design and conduct internal tests to check compliance with key controls stipulated in relevant policies and procedures.
  • Recommend and assist with remediation of control gaps before visit by internal auditors.

Business Continuity Management ("BCM")

  • Assist with the implementation of relevant BCM policies and procedures that are consistent with client’s risk framework that is designed to comply with the BCM Guidelines issued by Monetary Authority of Singapore.
  • Assist to design and conduct internal tests to check compliance with key controls stipulated in relevant policies and procedures.
  • Recommend and assist with remediation of control gaps before visit by internal auditors.

SOX 404 Compliance

Assist to implement some or all stages of SOX 404 requirements:

  • Identify key local entity level controls;

  • Identify key business processes and key process controls with process owners;

  • Review and document control framework of key processes identified;

  • Conduct risk assessment of control framework within each key process;

  • Recommend implementation of specific controls to enhance the control framework;

  • Design test procedures and perform tests to confirm the effectiveness of key controls identified;

  • Recommend remedial action and assist with subsequent tests; and

  • Assist with regular updates of documentation and tests to confirm continued SOX compliance.

J-SOX Compliance

  • Assist to comply with J-SOX requirements including internal control assessments and reporting