How an audit engagement runs
A clear sequence from first scoping call to findings workshop — designed for fintech platforms that cannot pause product delivery for months of fieldwork.
Scoping call
We confirm product lines in scope, regulatory context, systems of record, and who can grant read access. You leave with a draft boundary memo — not a sales deck.
Written proposal
Fees, timeline, deliverables, and data handling expectations are confirmed in writing. Informational website ranges become a fixed engagement fee only after this step.
Evidence & walkthroughs
We review policies, sample transactions, access lists, reconciliation packs, and exception logs. Walkthroughs with ops and engineering owners validate what the documents claim.
Findings register
Each gap is rated, evidenced, and tied to a control objective. Draft findings are shared for factual accuracy before the workshop — no surprise slides.
Remediation workshop
We prioritise fixes your team can own: quick containment, medium process changes, and longer system work. Optional follow-up reviews can be booked separately.