Services · Internal Audit, Risk & Governance

Protect what you have built — and scale it safely.

As your business grows, you can no longer see everything yourself. That is exactly when fraud, leakage and process breakdowns creep in. We give you the controls, risk management and governance to delegate with confidence.

The problem we solve

Growth creates blind spots. Blind spots cost money.

In an owner-managed business, the owner is the control system. But past a certain size, no one can watch every payment, supplier and process — and that is precisely when procurement leakage, payroll fraud and process failures take root. SMEs are the least able to absorb these losses, and most only discover them long after the money is gone.

At the same time, the outside world is raising the bar: funders, enterprise customers and regulators increasingly ask for evidence of governance and risk management before they will do business with you. "Trust me" is no longer an acceptable answer in due diligence.

Warning signs we see most often

One person controls a payment process end-to-end
Suppliers no one remembers appointing
Stock or cash variances that are "always small"
Policies that exist on paper but not in practice
No risk register — or one no one has opened in a year

What we do

A full internal audit and risk function, on demand.

Outsourced internal audit

Risk-based audit plans aligned to your objectives
Fieldwork, testing and reporting to IIA Standards
Follow-up so findings actually get fixed
Audit committee and board reporting support

Controls & processes

Internal control reviews across finance, procurement and operations
Process re-engineering that removes leakage and bottlenecks
Segregation-of-duties design sized for small teams
Data-analytics-driven testing (ACL, IDEA, TeamMate)

Risk & fraud

Enterprise risk management: registers, policies, mitigation plans
Fraud prevention reviews and special investigations
Supplier, employee and procurement investigations
Health, safety, environmental and community compliance audits

Governance

King IV governance advisory, proportionate to your size
Board and committee structures that fit an SME
Delegation of authority frameworks
Governance evidence packs for funders and due diligence

Why it matters

How this grows your business.

Delegate safely

Strong controls are the infrastructure that lets an owner step back from daily firefighting and work on the business. You cannot scale what only you can supervise.

Stop the leaks

Preventing a single procurement fraud can pay for years of internal audit. Every weakness found and fixed is a loss your business never has to suffer.

Win trust faster

Demonstrable governance turns due diligence — by banks, investors and large customers — from an obstacle into a selling point that sets you apart from competitors.

Who leads this work

Two decades of audit rooms, not textbooks.

This practice is led by Tavison Mugorogodi (CIA), a Certified Internal Auditor with 20 years across mining, state-owned enterprises, medical schemes, universities, municipalities and donor-funded organisations, supported by Khulani Ndlovu (IAP), an internal audit practitioner with strong fraud investigation and data-analytics credentials. We work to IIA Standards and frameworks including COSO, ISO 31000 and King IV.

Meet the team →

Common questions

Are we too small for internal audit?
If you have grown past the point where you personally see every transaction, you are exactly the right size. We scale the scope to your risk — a focused review of payments and procurement is often the starting point.

We suspect fraud. What should we do first?
Preserve records, limit who knows, and get an independent investigator in early. We conduct discreet investigations and secure the evidence trail so your options — recovery, discipline, prosecution — stay open.

Is King IV not just for listed companies?
No — King IV is designed to apply to all organisations, proportionately. We implement the handful of practices that genuinely matter at your size, without corporate bureaucracy.