Advisory Services

Services through which internal auditors provide advice to an organization’s stakeholders without providing assurance or taking on management responsibilities. The nature and scope of advisory services are subject to agreement with relevant stakeholders and are often initiated by management seeking advice. Examples include advising on the design and implementation of new policies, processes, systems, projects, and initiatives. We also participate on committees including

  • Working Group on Information Security
  • Freedom of Information and Privacy Advisory Committee
  • Safe Campus Community Committee
  • Bank Card Committee
  • Payment Card Industry Committee
  • Continuity of Operations Committee
  • Technology Risk Assessment Committee (TRAC)

Value: In-house experts on governance, risk, and controls that can share best practices and insights to enhance the maturity and capabilities of operations and highlight risks that may not have been considered before implementation.