Advisory services

Risk Advisory and Internal Control Review Services

Risk advisory is the work of identifying the risks that could stop a business from meeting its objectives and designing internal controls that reduce those risks to an acceptable level. WDS reviews controls over financial reporting (ICFR), writes standard operating procedures and builds fraud risk programmes for growing companies.

Engagement partner

Waqas Aslam, ACA, Audit and Assurance partner at WDS Chartered Accountants

Waqas Aslam, ACA

Founding Partner · Audit and Assurance

Why do internal controls matter to growing companies?

As a business grows beyond the founder's direct oversight, informal checks stop working. Payments get approved without support, inventory goes missing, and month-end numbers take weeks to agree. Strong controls make financial information reliable and protect assets.

Listed companies must also comply with the Listed Companies (Code of Corporate Governance) Regulations, which place responsibility for internal control on the board. Banks and investors increasingly ask private companies the same questions.

What does an internal control review cover?

We map key processes end to end, identify where errors or fraud could occur, and test whether existing controls actually operate. Findings are rated by risk so management can fix the most important gaps first.

  • Procure to pay and vendor management
  • Order to cash and credit control
  • Inventory and warehouse controls
  • Payroll and HR
  • Treasury and bank reconciliations
  • IT general controls and user access

How do we help prevent and detect fraud?

Fraud risk management combines prevention, detection and response. We run fraud risk assessments, set up whistleblowing channels, design data analytics that flag unusual transactions, and conduct investigations when concerns arise.

How does the risk advisory and internal controls engagement process work at WDS?

Every engagement follows a defined sequence agreed in the engagement letter, so you always know what happens next and who is responsible.

  1. 1

    Scoping

    Agree processes, locations and risk appetite with management.

  2. 2

    Walkthroughs

    Document how each process really works today.

  3. 3

    Testing

    Sample-based testing of key controls.

  4. 4

    Remediation

    Practical fixes, SOPs and follow-up review.

Risk Advisory and Internal Controls: frequently asked questions

Is an internal control review the same as an internal audit?

They overlap. A control review is usually a one-off project to assess and improve design, while internal audit is an ongoing function that tests controls on a cycle. We provide both.

Can you write SOPs that our staff will actually follow?

Yes. We draft procedures with the people who perform the work, keep them short and practical, and include checklists and approval matrices.

Your first consultation is free.

A partner will review your requirements and outline a clear path forward. No sales pitch, no obligation.