Service 03 · Govern & Assure

Internal Audit & Assurance

We give boards and management independent, risk-based assurance that strengthens controls, improves processes and supports confident decisions.

Challenges we address

Situations where organisations typically ask us for help.

  • No in-house internal audit function

    You need a full internal audit function delivered to your audit committee's plan and standards.

  • The team lacks specialist capacity

    Your in-house auditors need extra capacity or technical expertise for specialist or peak-load reviews.

  • Findings are not getting closed

    Audit issues lack clear root causes and owners, and the committee cannot see whether actions are completed.

  • Controls after a system change

    New processes or ERP-enabled systems need independent assurance that controls are designed well and working.

What we do

  • Outsourced Internal Audit

    A full internal audit function delivered to your audit committee's plan and standards.

  • Co-Sourcing

    Specialist auditors who augment your in-house team for technical or peak-load reviews.

  • Operational Reviews

    Independent review of processes, efficiency and control design across business functions.

  • Compliance Reviews

    Testing adherence to regulations, policies and standards with evidence-based findings.

  • Process Assurance

    Assurance over process discipline and control design, including IT and ERP-enabled processes.

  • Audit Committee Support

    Reporting packs, agenda input and action tracking that keep the committee informed.

Our approach

  1. 1. Risk-based planning

    Align to strategic priorities.

  2. 2. Fieldwork & testing

    Evaluate controls and evidence.

  3. 3. Reporting & insight

    Findings, causes, recommendations.

  4. 4. Follow-up

    Track closure, sustain improvement.

Key deliverables

  • Risk-based audit plan
  • Findings & root causes
  • Action-closure tracker
  • Committee pack

Standards & approach

  • Risk-based planning
  • COSO
  • COBIT 2019
  • ISO 31000
  • Three Lines Model

Why KAN

  • Independence and objectivity in every engagement
  • Findings with root causes and practical fixes
  • Follow-up discipline that turns insight into progress

How we can help

  • Run your internal audit function end to end
  • Add specialist capacity through co-sourcing
  • Give the audit committee confident assurance
Talk to us about this service

Related case studies

Frequently asked questions

What is the difference between outsourced and co-sourced internal audit?

With outsourcing, we deliver a full internal audit function to your audit committee's plan and standards. With co-sourcing, our specialist auditors work alongside your in-house team for technical or peak-load reviews.

How do you decide what to audit?

Planning is risk-based and aligned to your strategic priorities. The result is a risk-based audit plan that guides fieldwork and testing.

Can you review IT and ERP-enabled processes?

Yes. Our process assurance covers process discipline and control design, including IT and ERP-enabled processes.

What does the audit committee receive?

Reporting packs, agenda input and action tracking that keep the committee informed, together with findings that set out root causes and practical fixes.

How do you make sure findings are acted on?

Follow-up is a formal step of our approach. We track closure through an action-closure tracker and report progress until improvements are sustained.

Other services in Technology & Transformation · Govern & Assure

Let's build trust, resilience and growth together.

Talk to us about the right combination of services for your organisation.