Navigating GRC challenges with certainty
High impact across all three Lines of Defense. We cover all critical areas with deep expertise and strategic precision. And beyond. Restructuring and repositioning projects to ensure solid, sustainable GRC foundations are a core part of what we do.
ICS · SOX · ISAE 3402
Internal Control Frameworks
- Scoping and scope revisions: financial, non-financial and IT
- Internal control design (ICS, SOX): entity level, business process and IT general controls
- End-to-end ISAE 3402 readiness, from control design to audit-ready state
- Implementation, audit readiness testing, sustainability concepts, remediation
IIA Standards
(Group) Internal Audit
- Internal Audit engagements and function restructuring
- Internal Audit risk assessment and annual risk-based planning
- QA & PPD, assurance reporting, BoD/AC and Executive Management reporting
- Positioning Internal Audit as internal talent development catalyst
ERM · CSRD · AI
Risk Management
- Risk management establishment from scratch
- Financial, non-financial and compliance risk, with effective controls mitigating the risks
- Re-purpose instead of re-perform: readiness for additional requirements (e.g. CSRD, ESG)
- AI governance and risk frameworks (policies, controls)
Non-regulated
Compliance & Training
- Company-specific compliance frameworks, policies and procedures
- Compliance tools and processes, e.g. whistleblower systems
- Governance manuals for staff and supervisor levels
- Hands-on trainings and GRC awareness sessions for management
Fixed-scope assessments
Know where you stand.
360° GRC Readiness Assessment
Readiness for financing rounds, Private Equity participation, due diligence and ISAE-level scrutiny.
GRC Diagnostics in a box
Know where you stand before it becomes expensive and painful (and others start asking).
SME checklist
Seven questions show you where things might be shaky. No corporate buzzwords, no fluff. Straightforward. Honest. Practical.
«Strong governance is only as resilient as the organisational, process and IT foundations it rests upon – without a solid structure, even the best frameworks risk collapse.»
Reto H. Wenger
Ready to get in control of control?
Schedule your free consultation and find out how LakeHill GRC can help.
