1. Enterprise Risk Management (ERM):
- Overview: Helping organizations establish and mature their ERM frameworks to proactively identify, assess, and manage risks across all levels and functions of the business (strategic, operational, financial, compliance, reputational, etc.).
- Services:
- Developing risk management frameworks, policies, and processes.
- Conducting comprehensive risk assessments and developing risk registers.
- Defining risk appetite and tolerance levels.
- Designing and implementing risk monitoring and reporting systems. o Integrating risk management with strategic planning and decision-making.
2. Internal Audit Services:
- Overview: Providing independent and objective assurance on the effectiveness of an organization's internal controls, governance processes, and risk management.
- Services:
- Full-scope or limited-scope internal audits.
- Risk-based internal audit planning and execution.
- Reviewing and evaluating the design and operating effectiveness of internal controls.
- Assessing compliance with policies, procedures, and regulations.
- Co-sourced and outsourced internal audit services.
- Internal Financial Controls (IFC) compliance and testing (as per Companies Act 2013).
- SOX compliance.
3. Cyber Security & IT Risk Advisory:
- Overview: Addressing the growing threats in the digital landscape, helping businesses protect their information assets and manage technology-related risks.
- Services:
- Cybersecurity strategy and governance.
- IT risk assessments and audits (including ITGC - IT General Controls).
- Vulnerability assessment and penetration testing (VAPT).
- Data privacy solutions and compliance (e.g., Digital Personal Data Protection Act, GDPR).
- Incident response and digital forensics.
- Cloud security advisory.
- Software Asset Management.
- IT Disaster Recovery and Business Continuity Planning.
4. Forensic & Investigation Services:
- Overview: Assisting organizations in detecting, investigating, and preventing fraud, misconduct, and financial irregularities.
- Services:
- Fraud investigations (financial, digital, physical).
- Anti-fraud framework development and implementation.
- Corporate intelligence.
- Know Your Client (KYC) and Anti-Money Laundering (AML) advisory.
- Whistleblower helpline services.
- Dispute resolution support.
5. Regulatory & Compliance Risk:
- Overview: Helping organizations navigate the complex regulatory landscape and ensure adherence to relevant laws, regulations, and industry standards.
- Services:
- Regulatory compliance reviews and assessments.
- Development of compliance frameworks and policies.
- Monitoring changes in regulations and advising on their impact.
- Specific compliance advisory (e.g., RBI circulars for financial services, intellectual property).
6. Operational Risk Management:
- Overview: Focusing on risks arising from day-to-day business operations, internal processes, people, and systems.
- Services:
- Process and operational audits.
- Standard Operating Procedures (SOP) development and implementation.
- Process re-engineering for efficiency and control.
- Supply chain risk management.
- Third-Party Risk Management (TPRM) – identifying, assessing, and monitoring risks associated with vendors and service providers.
- Business Continuity Management (BCM) and Crisis Preparedness.
7. Financial Risk Management:
- Overview: Addressing risks related to financial markets, credit, liquidity, and treasury operations.
- Services:
- Credit risk management (identification, measurement, and reporting).
- Market risk and liquidity risk management.
- Treasury management.
- Financial modeling and analytics for risk assessment.
- Cost optimization.
8. ESG (Environmental, Social, and Governance) & Sustainability Risk:
- Overview: Advising on risks and opportunities related to environmental impact, social responsibility, and corporate governance. This is an increasingly important area in India.
- Services:
- ESG strategy and reporting.
- Climate change risk assessment and mitigation.
- Ethical sourcing and supply chain reviews.
- Sustainability advisory.
9. Strategic Risk Advisory:
- Overview: Helping organizations assess and manage risks that could impact their strategic objectives and long-term growth.
- Services:
- Evaluating risks related to business concentration, product diversification, market entry, and new technologies.
- Reputational and brand risk management.
- Scenario planning and stress testing.
