Industries
Built for regulated institutions
Our clients answer to regulators, boards and customers who ask hard questions about their controls.
Banks & credit unions
IT audits, risk assessments and regulatory gap work for deposit-taking institutions.
- OSFI B-10 and B-13 assessments
- ITGC and cybersecurity audits
- Vendor SOC report reviews
Insurers & asset managers
SOC 1 and SOX work for controls that affect financial reporting.
- Control objective design
- SOX ITGC testing
- Type I to Type II transition
SaaS, fintech & AI
A first SOC 2 report or ISO certificate to unblock enterprise sales.
- Cloud and DevOps controls
- AI governance for products using AI
- Security questionnaire support
Energy & utilities
Controls testing and implementation reviews across complex operations.
- ERP implementation reviews
- Operational technology risk
- SOX controls testing
Manufacturing
IT controls and system rollouts that support accurate financial reporting.
- SAP and Oracle controls review
- Segregation of duties
- Data migration controls
Defence suppliers
Readiness for Canada's new cyber certification for defence contracts.
- Contract and data scoping
- Gap assessment
- System security plan
Universities
IT internal audit for decentralized systems and research data.
- Student system access reviews
- Research data security
- Departmental IT risk
Healthcare
Risk and privacy assessments covering patient data and clinical systems.
- Privacy impact assessments
- Third-party risk
- Incident response readiness
Public sector
Co-sourced IT audit and secondment for lean internal audit teams.
- IT audit planning
- System implementation reviews
- Staff cover through secondment