Governance · Risk · Compliance

No frills, just results.

We identify risks and inefficiencies early, before small gaps turn into costly issues and silently erode performance. Straight to the root cause, without layers of bureaucracy or inflated cost.

Driftwood on the shore
Like driftwood on the shore: shaped over time, resilient against changing tides, and built to endure.

Two decades

of hands-on GRC work

30+ countries

on all continents

BSc. · EMBA · CIA

Certified Internal Auditor

No juniors

No overseas subcontractors. Always onsite.

How and when we can help

Capturing your pain points, when you need it most.

We stand ready with a pathway to resolution when you need it most. Unbureaucratic and hands-on.


Feeling lost about risk exposure?

GRC requirements need swift and disciplined attention, from small accounting matters to full-scope organisation, process and IT restructuring.

GRC Diagnostics in a box →

Worried about losing control and visibility?

Risk and control frameworks need regular revision to keep up with your business, detect errors, prevent fraud and safeguard assets.

Our services →

Unsure about robustness, scalability and cost?

Compliance is a must, and so is getting there. With hands-on professionalism, cost consciousness, and always aligned with where your business is heading.

360° readiness assessment →

Services

Strong GRC fuels long-term growth.

Tailored GRC solutions, no force-fitting. Your business first. LakeHill GRC solutions empower, not constrain, your operations.

ICS · SOX · ISAE 3402

Internal Control Frameworks

  • Scoping: financial, non-financial and IT
  • Control design: entity level, process and ITGC
  • Implementation, audit readiness testing, remediation

Read more →

IIA Standards

(Group) Internal Audit

  • Restructuring the Internal Audit function
  • Risk-based annual planning and engagements
  • QA, Board/AC and Executive Management reporting

Read more →

ERM · CSRD · AI

Risk Management

  • Risk management established from scratch
  • Financial, non-financial and compliance risk
  • Re-purpose instead of re-perform for ESG, CSRD, AI governance

Read more →

Non-regulated

Compliance & Training

  • Company-specific compliance frameworks and policies
  • Whistleblower systems and issue tracking
  • Hands-on training for process and control owners

Read more →

Who we serve

For every stage and every industry.

From the first need for structured controls during early growth, through scaling pain points and pre-IPO readiness, to critical change such as IT, organisational shifts or control failures.

SMEs

Practical controls that fit your size. No corporate buzzwords.

SME checklist →

Private Equity

Portfolio companies ready for due diligence, exits and investor scrutiny.

PE brochure (PDF) →

High-growth scale-ups

GRC foundations that grow with you instead of slowing you down.

Scale-up brochure (PDF) →

Banks’ corporate clients

Clear governance that lenders and financing partners can rely on.

Brochure (PDF) →

Driftwood on the lake shore

«Strong governance is only as resilient as the organisational, process and IT foundations it rests upon.»

Reto H. Wenger · Founder & Managing Director

No frills, just results

Tangible outcomes and true resilience. Not inflated bureaucratic processes.

Integrated thinking

No stand-alone silos of tick-boxes. Governance connected to Finance, IT, Procurement and Sales.

Real-world expertise

Two decades of hands-on experience. We do not pursue textbook ideals.

A trusted network

For regulated environments, we draw on a global network of seasoned professionals.

Fixed-scope assessments

Know where you stand.

Know where you stand before it becomes expensive and painful (and others start asking).

Diagnostic

GRC Diagnostics in a box

A quick, structured look at your GRC set-up with clear priorities.

Learn more →

Readiness

360° GRC readiness assessment

Readiness for financing rounds, Private Equity participation, due diligence and ISAE-level scrutiny.

Learn more →

Self-check

SME checklist

Seven questions show you where things might be shaky. No corporate buzzwords, no fluff.

Take the checklist →