We identify obligations related to the activity and review compliance policies, responsibilities and records. The scope depends on the sector, operations and risks requiring attention.
Scope
Scope of our advice
We connect legal and regulatory risk assessments with internal controls, third-party due diligence and incident response.
01Legal and regulatory risk assessment
02Policies, risk matrices and internal controls
03Third-party due diligence
04Incident investigation and response
When we add value
Compliance adds value when it improves how the business operates.
01
When mapping actual risks
We prioritise obligations according to business activities, third parties and exposure, avoiding generic policies that no one can apply.
02
When assigning responsibilities
We define controls, supporting records and escalation procedures so that compliance no longer depends on a single person.
03
When an incident occurs
We preserve information, define the scope of the response and document decisions promptly and proportionately.
