Risk Management Services

At Cherry Bekaert & Holland, L.L.P. (CB&H), we believe that an organization’s Enterprise Risk Management activities must include continuous knowledge sharing of information that describes the relationships among the following:

• the strategic and activity level objectives of the organization
• the inherent and residual nature of risks affecting the attainment of objectives
• the sources of opportunities that might facilitate the attainment of objectives
• the control mechanisms that management utilizes, or could utilize to mitigate identified risks

CB&H’s Enterprise Risk Management Services include programs designed to facilitate management’s ability to manage the organizational risks that affect their ability to accomplish objectives. In coordination with our RADAR℠ service, we utilize facilitated discussions, surveys, and interviews to help management understand the relationships between objectives, risks and control activities.

Through our facilitation process, management is able to understand the relative significance of organizational risks so that it can develop effective mitigation strategies. Additionally, management’s enhanced understanding of organizational risks provides the basis from which it can determine the nature of monitoring, self-assessment, and internal audit procedures for the purposes of verifying that mitigation strategies are operating effectively.

Additionally, we understand that effective enterprise risk management does not result from a “one-time” project, but only results from the continuous discussion of objectives, risks and controls among all employees. Therefore, we design our services to provide management with the knowledge, tools and methodologies to maintain their enterprise risk management activities with or without ongoing assistance from CB&H.

• RADAR℠ (Risk Assessment, Detection And Reduction)
• Fraud and Forensic Services
• Information Technology Audit Services
• Internal Audit - Financial and Operational Audit Services
• Internal Audit - Internal Control Services
• SSAE 16 Services (formerly SAS 70)
• IT Risk Assessment Services