DKMH and Company Chartered Accountants

Risk advisory services

Know your risk tolerance and achieve your targets.

The issues that an organization may face during its set up, initial/current phase or in the future in terms of financial, operational, reputational, security & fraud exposure are known as the risks of business. To predict, resolve and eliminate such risks, it is important to create a practical business strategy that is effective in building the bridge between reality and vision, caution and opportunity. A business risk advisory focuses on building and implementing strategies that stands up to the toil of daily business, increased competitiveness, cyber-attacks and sabotage.

1. Business Process Redesign

We help businesses design their key business processes considering “best practices” and “benchmarks”, help operations become more efficient, speed up work flows and improve Management Information Systems.
Prepare Standard Operating Procedures (SOP), Accounts Manual , Systems Manual Chart of Accounts development and standardization

2. Information Technology Advisory services

Internal Audit of IT Systems
Business Continuity & Disaster Recovery Plan
Regulation and Compliance Reviews
General IT Control Testing
Cyber Risk Services
ERP Implementation Review
Application and Technical audit
IT Strategy and Planning review
Digital Transformation

3. SOX Compliance

SOX provides the framework for organizations for financial recording and reporting, which in turn improves many aspects of the organization. SOX compliance help companies report that the financial reports are more predictable, which makes stockholders contended. Companies also report that it makes access to capital markets much easier due to their improved financial reporting. Our experience and expertise, with team of Certified Public Accountants as associates of firm, enable us to provide solid guidance from the start of the SOX compliance engagement by creating long term compliance objectives for our clients. We aim at providing our clients with customized, industry approved approaches that paves the way for our client’s compliance initiatives.

4. SOC/SSAE Assessments

System And Organization Controls (SOC) are assurance reporting frameworks designed to assist service organizations in building confidence and trust between the stakeholders, entities and the service providers. The controls are standards designed to assist service organizations imparting services to their clients and customers, and helping them meet the internal and external stakeholders demand for trust, transparency and contractual obligations and marketplace concerns. The SOC reports aid in providing reasonable assurance to companies that their service providers have demonstrated capability of controls on security, availability, confidentiality, processing integrity, security and privacy ensuring that the organizations are operating in an ethical and compliant manner. SOC Assessment and Audit Reports Are Classified Depending On Their Usage and Service Controls As defined below.

SOC 1:

Pertaining to ICFR, this reporting covers the controls of service organization over its end user’s financial reporting. This is classified under two categories Type 1 reporting & Type 2 reporting.

SOC 2:

Concerned for Service Organization’s Trust Services Criteria (TSC). It defines controls necessary at a service organization that are relevant to Security, Availability, Processing Integrity, Confidentiality and Privacy. This is classified under two categories Type 1 reporting & Type 2 reporting./li>

SOC 3:

Done in line with SOC 2 reporting, SOC 3 reporting is meant for general use or for customers who need assurances regarding the necessary controls maintained and managed by the organization.

SOC Cyber security:

AICPA has issued a Cyber security Risk Management Reporting Framework, through which a CPA reports on an organization's enterprise-wide cyber security risk management program. At DKMH, the team of Certified Public Accountants, as your SOC compliance partner, we will understand your objectives, identifying gaps and threats, supporting you to remediate the gaps and risks to achieve a SOC Compliance.