Celebrating 25 Years of Excellence

GET IN TOUCH
Risk Advisory

Managing the unavoidable risk.

Every organisation harbours inherent risks within its core business functions: finance, accounting, IT, operations, and beyond. Similarly, compliance with internal policies or regulations is a universal imperative. However, not every organisation possesses the requisite people, processes, and technologies to optimise core risk management and compliance functions. Our Risk Advisory and IT experts can provide key services to help your organisation’s Finance and IT departments, SOX team, Internal Audit, and other risk managers more effectively comply with regulations and identify, assess, and mitigate business-wide risks.

Key Capabilities

Six integrated risk advisory capabilities.

Internal Controls (SOX / Provision 29) Services

Whether you are contemplating a future listing, are a newly public company on the NYSE, NASDAQ, or LSE, or are a mature listed organisation, maintaining SOX compliance and delivering shareholder value can be challenging and time-consuming. Our SOX experts are here to help you achieve peace of mind, offering services from readiness assessments and first-year implementations to recurring test programmes supporting your SOX 404(a) or 404(b) conclusions. We also have extensive experience in assisting hundreds of companies through deficient control remediation activities.

Enterprise Risk Management Services

While Risk Management might traditionally be thought of in silos, focusing on specific hazard risks, CFGI’s Enterprise Risk Management (ERM) solutions bring an approach of enterprise-wide collaboration and a focus on business and strategic risks. We take a more holistic view, helping your business achieve its goals, and not just avoiding certain outcomes.

Artificial Intelligence Governance, Risks, and Controls

As AI integration moves from a strategic option to a financial necessity, the Office of the CFO faces challenges in maintaining data integrity, regulatory compliance, and fiscal oversight. We address these vulnerabilities by implementing rigorous governance frameworks and internal controls that mitigate risk while ensuring your AI investments are executed with the discipline, security, and transparency required for sustainable growth.

IT Risk Services

In a fast-changing world, you need a broad-skilled and flexible partner. CFGI offers a wide range of IT Risk services, from designing and assessing IT General Controls and end-to-end IT risk management frameworks to evaluating segregation of duties (SOD), consulting on identity and access management (IAM), delivering cybersecurity risk and controls assessments, assisting in achieving data privacy compliance, and supporting IT operational risk from disaster recovery planning to system implementations and incident response strategies.

Internal Audit Services

CFGI will help you influence positive change through practical and cost-effective governance, risk, and compliance solutions. Internal Audit departments struggle to find the right talent or cover their full audit universe. Simultaneously, the audit function is fast-evolving to become the key strategic risk partner in the business. CFGI offers full outsource and co-source options to support your Internal Audit needs.

Third Party Risk Services

In today’s interconnected world, companies interact with and rely on one another significantly. Whether your company provides Software as a Service (SaaS), relies on such a company, or has significant vendor relationships, these relationships expose you and your third parties to risk. Our professionals can support you with reviewing your vendors’ SOC 1 reports for SOX purposes, preparing you for SOC 1 and SOC 2 audits, and conducting vendor due diligence and third-party risk assessments.

Why CFGI

Experience that translates.

Our Risk Advisory and IT consultants work together with our colleagues across the firm in our various specialty practices to design, implement, and assess controls, policies, procedures, processes, and operations that can help you identify, assess, and manage risk more efficiently. Given our Big-4 background, we are well-equipped to provide a framework and documentation that will help you improve your compliance function and enhance your operations.

Risk Advisory leadership

Connect with the right specialist.

SOX Services

Angela Barcelos

Partner

abarcelos@cfgi.com
Pajmon Bigdeliazari

Partner

pbigdeliazari@cfgi.com
Michael Morse

Partner

mmorse@cfgi.com
Angela DePoy

Partner

adepoy@cfgi.com
Elaina Coletta

Partner

ecoletta@cfgi.com
Matt Washford

Partner

mwashford@cfgi.com

Enterprise Risk Management (ERM)

Mai Jaroudi

Managing Director

mjaroudi@cfgi.com
Brandon Potts

Managing Director

bpotts@cfgi.com
Sophie Rhodes

Managing Director

srhodes@cfgi.com

Artificial Intelligence Governance, Risks, and Controls

Daniel Shafrir

Managing Partner

dshafrir@cfgi.com
Pajmon Bigdeliazari

Partner

pbigdeliazari@cfgi.com
Alejandro Anievas

Managing Director

aanievas@cfgi.com
Brandon Potts

Managing Director

bpotts@cfgi.com
Mai Jaroudi

Managing Director

mjaroudi@cfgi.com
Baldwin Delgado

Managing Director

bdelgado@cfgi.com

IT Risk

Pajmon Bigdeliazari

Partner

pbigdeliazari@cfgi.com
Mai Jaroudi

Managing Director

mjaroudi@cfgi.com
Xavier Sanchez

Managing Director

xsanchez@cfgi.com
Baldwin Delgado

Managing Director

bdelgado@cfgi.com

Internal Audit Services

Brandon Potts

Managing Director

bpotts@cfgi.com
Mai Jaroudi

Managing Director

mjaroudi@cfgi.com
Alejandro Anievas

Managing Director

aanievas@cfgi.com
Sophie Rhodes

Managing Director

srhodes@cfgi.com

Third Party Risk Services

Pajmon Bigdeliazari

Partner

pbigdeliazari@cfgi.com
Mai Jaroudi

Managing Director

mjaroudi@cfgi.com
Xavier Sanchez

Managing Director

xsanchez@cfgi.com
Baldwin Delgado

Managing Director

bdelgado@cfgi.com

Ready to strengthen your risk posture?

Connect with our Risk Advisory team to discuss SOX, IT Risk, ERM, AI Governance, Internal Audit, or Third Party Risk services.

Start a conversation →