Manage Enterprise Risk and Controls

Broader Assurance Services

Manage Enterprise Risk & Controls

We transform your Governance, Risk, and Compliance (GRC) activities from a mundane, reactive process into a dynamic, value-driven function. By aligning these activities with key business performance drivers, we empower your organization to proactively identify, assess and mitigate risks. Our approach streamlines and optimizes business processes, reducing inefficiencies and enhancing productivity while optimizing existing internal controls to address the most critical business risks.

Our strategy also enhances your organization's decision-making capabilities. We integrate advanced technologies with your GRC activities, ensuring they align seamlessly with your overall business strategy.

Key services

Sarbanes-Oxley Act (SOX) and J-SOX readiness and compliance

Our approach to SOX compliance begins with a comprehensive evaluation of your program. We use a tailored framework to streamline processes, optimize controls and identify automation opportunities. This initial assessment allows us to develop a more efficient and effective SOX program tailored to your organization's needs.

Once we've refined your SOX program, we focus on maximizing efficiency and cost-effectiveness. Our clients typically experience significant cost savings, often ranging from 20% to 40%, through:

  • performing strategic risk assessments using our proprietary SOX Scoping Central tool;
  • optimizing the mix of manual and automated controls; and
  • leveraging cutting-edge technologies and data analytics to enhance automation in control execution and testing.

Business and process review and manualization

We focus on boosting efficiency and impact through integrating cutting-edge technology, including automation and innovative solutions. Our strategy also involves harmonizing governance, risk, and control frameworks with your risk landscape while fine-tuning your operating model for optimal performance.

Internal controls advisory

We help clients design and deliver a sustainable control environment through 'best practice' processes and controls, coupled with supporting technology and benchmarking. Our comprehensive approach includes conducting business processes and systems reviews, providing controls optimization advice and support, building security and controls into business systems while optimizing ERP investment, and offering controls assurance to support the financial statement audit. This holistic strategy ensures a robust and efficient control environment tailored to each client's unique needs.

Maturity assessments

Our transformation services help you align with shifts in business strategy or leadership, meet evolving stakeholder expectations, and adapt to cultural and organizational changes. By addressing these key areas, we ensure your internal audit function remains relevant, effective and aligned with your organization's goals in an ever-changing business landscape.

We conduct maturity assessments using our Connected Risk Engine—a cloud-based maturity assessment platform which offers a comprehensive view of key organizational risks. This tool evaluates risk management preparedness across various areas, including cybersecurity and IT compliance, while enabling peer benchmarking and issue prioritization. It provides a unified platform for viewing risks, fostering collaboration and offering quick access to insights through a consistent global approach and real-time data. This holistic view empowers organizations to predict, prepare for and adapt to pressing business challenges, supporting faster and more informed decision-making.

Maturity frameworks

  • Controls Environment Maturity Assessment (SOX aligned)
  • Controls Environment Maturity Assessment (Non-SOX aligned)
  • Operational Resilience Maturity Assessment Framework
  • Technology Maturity Assessment (TMA)
  • PMO Maturity Assessment
  • Treasury and Cash Management Maturity Assessment
  • Third-Party Risk Governance
  • AI Readiness Assessment Tool
  • Finance Function Maturity Assessment
  • Enterprise Risk Management Maturity Assessment
  • Enterprise Risk Management Maturity Assessment
  • IIA Standards
  • Total Impact of Internal Audit (TIIA)
  • Internal Audit Program Maturity Assessment
  • Internal Audit Stakeholder Assessment
  • ESG IA Maturity Assessment

Compliance assessments

Recent high-profile ethical and compliance breaches highlight the need for robust compliance strategies. Our comprehensive compliance services help organizations implement cost-effective compliance measures and respond swiftly to emerging risks and incidents.

We provide integrated control, compliance and certification solutions across all sectors, supporting organizations in aligning and digitizing their compliance activities for enhanced efficiency and effectiveness.

Contact us

Pocholo Domondon

Pocholo Domondon

Broader Assurance Leader, PwC Philippines

Tel: +63 (2) 8845 2728

Mike Jensen Cua

Mike Jensen Cua

Broader Assurance Director, PwC Philippines

Tel: +63 (2) 8845 2728

Redeem Tamayor

Redeem Tamayor

Broader Assurance Director, PwC Philippines

Tel: +63 (2) 8845 2728