Operational
We assess whether processes run correctly and consistently by examining workflows, segregation of duties, approvals, inventory and resource use.
SARUS AREAS OF EXPERTISE
Internal Audit and Control
We make risks visible, controls effective and outcomes traceable.
Together, we assess your organisation's risks and control needs, then build a practical, sustainable internal audit and control system with clear responsibilities.
We make control part of your organisational culture.
Our aim is to build a structure that identifies risks early, directs resources to priority areas and supports management decisions with reliable information. We design controls around your organisation's size, operations and risk profile, and embed them in everyday processes.
From needs to a working system
Where can we support you?
We take a comprehensive view of your control framework through five workstreams, from the roadmap to regular monitoring.
Internal Audit and Control Roadmap
We assess the current structure and clarify priority risks, control objectives and improvement actions, with defined owners and timelines.
Risk and Control Matrix
We map process risks to controls and define control owners, frequency and evidence, making missing or inadequate controls visible.
Internal Audit Programme
We plan the audit scope, priorities and methods around your risk profile, then assess the design and operating effectiveness of existing controls.
Internal Control Checklists
We prepare easy-to-use checklists that support regular, consistent and verifiable control activities in critical processes.
Continuous Control Indicators
Using ERP, Excel and other data sources, we create indicators, alerts and monitoring reports that help identify deviations and exceptions early.
Areas we assess together
A comprehensive view of control across six areas.
From operations to information systems, we examine how processes affect one another and how consistently their records align.
Financial
We examine accuracy, completeness and traceability in accounting records, reconciliations, collections, payments and financial reporting.
Compliance
We assess whether activities comply with applicable regulations, organisational policies, procedures and contractual obligations.
Performance
We track targets and actual results alongside efficiency, cost, quality and timing indicators to examine the causes of deviations.
Systems
We examine user permissions, access restrictions, transaction logs and data security controls.
Integration
We compare customer, product, quantity and amount information across sales, dispatch and accounting to identify missing, duplicate or inconsistent records.
How we work
Our Four-Step Approach
We do more than deliver a report. We build a system that works.
We listen
Together, we define the processes, risks, existing controls and management's assurance needs.
We design
We establish the roadmap, risk and control matrix, audit programme and responsibilities.
We implement
We put checklists, audit activities and data-based monitoring tools into practice.
We improve
We turn findings into actions and monitor progress and the effectiveness of improvements.
Follow-up is part of completion.
Each finding has a defined owner, target date and verification step. Management and process owners are responsible for owning and implementing controls; internal audit assesses their effectiveness.
Let's clarify together
Frequently asked questions
What information should I share to get started?
For an initial assessment, it is enough to share your company's business activities, organisational structure, systems and priority risk and control needs.
Can the work be adapted to our existing ERP and Excel setup?
Yes. We assess your existing data sources, reports and control methods. We retain what is usable and develop practical solutions for missing control points and monitoring needs.
How are findings followed up after the audit?
Findings are turned into actions with defined owners, target dates and priorities. Progress is monitored, and the effectiveness of actions reported as complete is verified.
Let's get started together
Let's strengthen your organisation's control framework together.
Share your needs, and together we will define the priorities, scope and first step.