More security through governance, risk & compliance
Regulatory requirements and risks are continuously increasing – and becoming ever more complex.
We support you in maintaining an overview and managing risks systematically and efficiently. With our many years of experience in governance, risk & compliance, we develop practical, cost-effective, and fully integrated management and control systems that reliably protect your organisation. Through the targeted use of modern IT tools, we enable effective monitoring of internal and external requirements. This allows you to identify necessary actions at an early stage and remain consistently compliant – simple, reliable, and future-proof.
Your advantages
| Governance & risk management | Internal control system (ICS) | Compliance management | Internal audit & investigation |
| Reduction of liability risks and increased efficiency | Reduction of error sources, strengthened compliance, and optimized efficiency | Establishment of a sustainable and legally compliant corporate culture | Early risk detection and improvement of internal processes |
Our team of experts supports you with expertise and foresight in establishing effective governance structures and ensuring that your business processes are designed in full legal compliance.
Contact us here.
Our services
We create practical and integrated management and control systems focused on risk minimisation and cost-effectiveness.
- Governance
- Potential analysis (governance status, opportunities, risks)
- Organisational advisory (structures, processes, etc)
- Advisory for governing bodies (responsibilities, liability, etc)
- Reporting obligations and reporting processes
- Review of the Austrian Corporate Governance Code (confirmation audit and Rule 83 audit)
- Risk management
- Development of strategic and operational risk management
- Risk management process design and implementation
- Integration into corporate governance
- Audits of risk management systems
- Internal control system
- Development, implementation, integration and evaluation of internal control systems
- Assessment of internal control systems (design, implementation, effectiveness)
- Special control systems (tax control systems, SOX, etc)
- IT-related internal control systems (C5, ISAE, NIS2, etc)
- Compliance management
- Conducting risk analyses and implementation of compliance systems according to ISO 37301
- Training, whistleblower protection, and data protection in accordance with GDPR and ISO 27002
- Management of business partners and supply chains in accordance with LkSG, CS3D and other regulations
- Optimisation of compliance and sustainability management systems based on international standards
- Internal audit
- Outsourcing of internal audit functions
- Co-sourcing with heads of internal audit
- Individual and special audits
- Quality assessment of internal audit
- Due diligence & internal investigations
- Compliance audits and business partner screenings
- ESG due diligence
- Forensic investigations
Contact our team of experts now!
Glossary
- C5
The Cloud Computing Compliance Criteria Catalogue (C5) is a BSI audit standard for the security of cloud services.
- CS3D
The Corporate Sustainability Due Diligence Directive (CS3D) obliges companies to respect human rights and environmental standards throughout their supply chains.
- Compliance
Compliance refers to adherence to legal requirements, regulatory obligations, and internal company policies.
- Due Diligence
Due diligence is the careful examination and analysis of a company or process, particularly in the context of transactions, investments, or risk management.
- EMAS
The Eco-Management and Audit Scheme (EMAS) is a voluntary EU environmental management and audit system aimed at the continuous improvement of an organisation’s environmental performance.
- ESG
ESG stands for Environmental, Social, and Governance and is used to assess sustainability aspects and corporate responsibility.
- Gap-Analyse
Gap analysis identifies discrepancies between the current actual state and a defined target state in order to highlight optimisation potential.
- Governance
Governance comprises the structures and processes of corporate management, particularly to ensure transparency, control, and accountability.
- Investigation
Investigation refers to the structured examination of potential compliance violations or suspicions within a company.
- ISAE
The International Standards on Assurance Engagements (ISAE) are international assurance standards for engagements outside of traditional financial reporting.
- LkSG
The German Supply Chain Due Diligence Act (LkSG) obliges companies to comply with human rights and environmental due diligence obligations in their supply chains.
- NIS2
The NIS2 Directive is an EU-wide regulation aimed at increasing cybersecurity and the resilience of critical infrastructure and digital services.
- SOX
The Sarbanes-Oxley Act (SOX) is a U.S. federal law that strengthens internal control systems and enhances transparency in the financial reporting of publicly listed companies.