IS THIS FOR YOU?
A clear starting point
You need objective internal evaluation and leadership review.
- Working arrangement
- Defined project scope; follow-up support agreed separately.
- What you bring
- Audit criteria, evidence owners, and leadership participants.
Choosing between services?
Choose gap assessment to establish a baseline before implementation. Gap Assessments & Remediation →
01 / THE BUSINESS CASE
Why this service matters
Routine activity does not always demonstrate that requirements are met. Audit and management review help leaders examine evidence, challenge assumptions, and decide what needs to improve.
02 / THE SERVICE
What is Internal Audit & Management Review?
Internal audit evaluates agreed criteria against objective evidence. Management review brings performance, risks, findings, and improvement needs to leadership for decisions and follow-up.
WORKING TOGETHER
Our Approach
F&C leads the activities below with your process and system owners. Your team provides the agreed information, approves decisions, and owns ongoing operation unless separately scoped. Activities and outputs are confirmed in the proposal.
- 01
Agree criteria and audit independence.
Your team helps confirm the boundaries, priorities, and available information.
- 02
Sample evidence and interview owners.
We work with the relevant owners to review requirements and agree practical decisions.
- 03
Report findings.
Your team provides the agreed access, approvals, or operating evidence needed for delivery.
- 04
Prepare management-review inputs and action ownership.
We review the findings or agreed outputs together and clarify action ownership and follow-up.
What you will receive
The agreed outputs below give your team a record of the work and a basis for decisions and follow-up.
See scope and deliverables ↓DELIVERY AT A GLANCE
- 01
Agree criteria and audit independence.
- 02
Sample evidence and interview owners.
- 03
Report findings.
- 04
Prepare management-review inputs and action ownership.
YOUR SERVICE, IN FOCUS
Internal Audit & Management Review
Plan audit scope, criteria, and sampling
Evaluate evidence and interview relevant personnel
Develop findings and corrective-action priorities
03 / PRACTICAL SUPPORT
Key capabilities
- Plan audit scope, criteria, and sampling
- Evaluate evidence and interview relevant personnel
- Develop findings and corrective-action priorities
- Prepare management review inputs and decisions
04 / YOUR DELIVERY PARTNER
Why F&C?
We connect assessment findings with accountable improvement. You work with a team that understands the relationship between cybersecurity, business priorities, and sustainable implementation.
Business-led priorities
Your objectives, existing practices, and available capacity shape the scope.
Clear ownership
We agree responsibilities and evidence expectations with your team.
Premium expertise. Competitive pricing.
Our Philippines-based delivery model offers high-quality support with transparent, proportionate engagement scopes.
05 / WHAT YOU CAN EXPECT
Service scope & deliverables
We agree the boundaries, activities, and outputs before delivery. Depending on the engagement, the scope may include:
- Audit plan and evidence request list
- Audit report and findings register
- Management review agenda and input pack
- Action tracking guidance
Systems, locations, participants, tools, timelines, and any ongoing support are confirmed in the proposal. External certification, licensing, and third-party costs are included only when explicitly agreed.
07 / YOUR QUESTIONS
FAQs
Objectivity and conflicts are assessed before scoping. Appropriate separation or independent arrangements should be agreed where needed.
It is a decision process supported by relevant inputs, recorded conclusions, and accountable follow-up.
The number of systems, locations, participants or suppliers, the quality of existing records, integrations, and any ongoing coverage shape the effort. We review these with you before proposing a timeline and price. You receive an agreed scope before work begins.