Your organization has grown, regulations have changed, or the board is asking whether controls really work. Risk and compliance problems tend to surface at the worst moment: during an audit, after a loss, or when a regulator calls. We help you find the gaps first and build controls that people actually follow.
Good internal control is not a binder of policies. It is a set of everyday practices: who approves what, how transactions are checked, who can access systems, and how exceptions are caught. We use recognized frameworks such as the COSO internal control framework as a guide, but the goal is always a set of controls that fits your size and operations.
We work with businesses, nonprofits and government contractors across Northern Virginia, the Washington DC area and Virginia. Some need a one-time risk assessment. Others want an ongoing outsourced internal audit function that reports to the board or audit committee.
Common warning signs include one person who can both set up a vendor and pay it, system access that was never removed when staff left, policies that no longer match how work is done, and compliance requirements that no one owns. None of these is unusual, and all of them can be fixed with clear ownership and simple checks.
We meet leadership to understand objectives, concerns and obligations.
We identify and rank risks and review the controls that address them.
You receive clear findings, ranked by priority, with recommendations.
We help design policies and controls that fit your operations.
Follow-up testing or internal audit to confirm the fixes work.
We focus on controls that work in practice, not just on paper. Findings are written for managers and boards, ranked by risk, and paired with recommendations that fit your resources. Evidence supports every conclusion, so you can rely on the results.
Risk work often connects to audit readiness and government contract compliance. We coordinate where it helps you.
A structured look at what could stop your organization from meeting its goals, how likely and serious each risk is, and how well current controls handle it. You get a ranked list of risks, the controls in place, the gaps and practical recommendations in priority order. It gives leadership and the board a clear picture of where to act first and where things are already working.
We perform internal audit work under a plan approved by your board or audit committee, without you hiring a full-time internal audit team. We test areas such as purchasing, payroll, system access or compliance, report findings to the committee and follow up on fixes. Management stays responsible for controls and decisions; we provide independent testing and advice.
Weak controls show up as errors, surprises and audit findings. Heavy controls show up as approvals nobody reads and steps people work around. The right balance depends on your size and risks. We look at where problems actually occur and where effort is wasted, then recommend changes that reduce risk without slowing the business down.
Yes. We draft or update policies with your team so they reflect how work is actually done, not how a template says it should be done. Policies that match reality get followed. Management reviews, approves and owns them, and we can come back later to test whether they are working.
No. Risk and compliance work is advisory and focuses on processes and controls. A financial statement audit gives an opinion on whether your financial statements are fairly presented. The two complement each other: strong controls usually make the financial statement audit faster and smoother.
In a 30-minute consultation we will discuss your concerns, your obligations and where a risk assessment or internal audit could help.
Walk into your next audit with reconciled accounts, documented judgments and statements that follow US GAAP. We untangle complex transactions, tighten your close and cut the back-and-forth that drives up audit fees.
Read moreCost-type work brings DCAA scrutiny. We get your accounting system ready, build indirect rates you can support, prepare incurred cost submissions and help you walk into a DCAA audit prepared instead of surprised.
Read moreWinning the award is only the start. We help you budget it, charge only allowable costs, draw funds on time, report accurately and keep subrecipients on track, so every dollar holds up when the auditors arrive.
Read more