Risk Advisory

Know Your Risks in Order to Manage
Them Effectively

At Cherry Bekaert, we believe that organizations typically fail to meet goals, incur losses or make substantial misjudgments for three main reasons:

  • Unseen Risk – failure to foresee emerging risks; e.g. blindsided by the unanticipated;
  • Known Risk – not properly managing known risk; e.g. unintended consequences; or
  • Control Failure – reliance on inadequate controls which fail to mitigate the risk as expected.

We are not referring to “Black Swan” events, which include the most unlikely occurrences and which are arguably highly unpredictable. However, we do consider risks in the ordinary course of business that most organizations face.

Our team of full-time Risk Advisory professionals can help you navigate this ever changing landscape by assisting with the following:

  • Internal Audit (IA) Services
    • Finance, Operations, Compliance Process Audit
    • IT Audit
    • Process Controls Assessment and Optimization
    • IT Controls Assessment and Optimization
    • Sarbanes-Oxley (SOX)
    • Policy & Procedure Development/Review
  • Compliance Advisory Services 
    • Sarbanes-Oxley (SOX)
      • COSO 2013 Gap Analysis
      • Readiness
      • Ongoing Monitoring
    • FISMA/FedRAMP/NIST
    • HIPAA Assessments
    • FFIEC/BSA/GLBA
    • SOC 1 & 2 Services
  • Business System Ad-hoc Reporting Services
    • Spreadsheet server
  • Enterprise Risk Management Services (ERM)
    • Enterprise Risk Management Frameworks
    • Enterprise Risk Assessments
    • Project Risk Review
    • Risk Training
  • Risk Assessments
  • Procurement-To-Payment (P2P) Consulting