Services
Audit, risk, and advisory work scoped to what matters.
Each engagement begins with the same question: where is the real exposure, and what evidence would tell us whether it is controlled? What follows is disciplined fieldwork and recommendations management can implement.
IA · 01
Internal Audit
Establish, enhance, or supplement an internal audit function built around the risks that actually matter.
Whether your organization is standing up internal audit for the first time, strengthening an existing function, or adding capacity for a specific engagement, BLAAAS delivers disciplined, risk focused audit work. The objective is not a longer list of findings. It is a clear answer to whether your controls and processes are working as intended, and what to do where they are not.
What this includes
- 01Risk focused audit planning
- 02Process walkthroughs
- 03Risk assessments
- 04Internal control evaluation
- 05Design and operating effectiveness testing
- 06Audit documentation and workpapers
- 07Issue identification
- 08Root cause analysis
- 09Management action plans
- 10Remediation monitoring
- 11Governance assessments
SOX · 02
SOX Compliance & Readiness
Practical ICFR support that holds up to scrutiny, explained in language executives and process owners both understand.
SOX programs fail when documentation drifts from how work is actually performed. BLAAAS builds and tests control environments that reflect reality: clear process documentation, defensible risk and control matrices, and testing that gives leadership an honest read on control health ahead of external audit.
What this includes
- 01SOX readiness assessments
- 02Internal Controls over Financial Reporting (ICFR)
- 03Process documentation and narratives
- 04Risk and control matrices
- 05Walkthroughs
- 06Control design assessment
- 07Tests of operating effectiveness
- 08Control gap identification
- 09Remediation support
- 10Ongoing compliance support
RIC · 03
Risk & Internal Controls
Identify the risks that threaten objectives, then design controls proportionate to them.
Effective control environments are deliberate, not accidental. BLAAAS helps organizations articulate their risks at both the enterprise and process level, assess whether existing controls address them, and close the gaps with corrective actions that are validated rather than assumed.
What this includes
- 01Enterprise and process risk identification
- 02Risk and Control Self Assessment (RCSA) support
- 03Control design
- 04Control effectiveness evaluation
- 05Governance assessment
- 06Operational risk
- 07Regulatory risk
- 08Control gap assessments
- 09Corrective action development
- 10Remediation validation
CA · 04
Compliance Audits
Independent evaluation of compliance with regulations, internal policy, contracts, and established procedure.
BLAAAS assesses whether your organization is doing what its regulators, policies, and contracts require, and whether it can demonstrate it. Engagements emphasize reduced regulatory exposure, defensible documentation, clear accountability, and compliance that is sustainable after the engagement ends.
What this includes
- 01Regulatory requirement mapping
- 02Policy and procedure adherence testing
- 03Contractual obligation review
- 04Evidence and documentation assessment
- 05Accountability and ownership review
- 06Sustainable compliance recommendations
OPS · 05
Operational Audits & Process Improvement
Become more controlled and more efficient at the same time.
BLAAAS examines how work actually gets done, not how a procedure document says it should. The result is a candid view of where effort, cost, and risk accumulate, paired with recommendations that operations leaders can realistically implement.
What this includes
- 01Inefficient processes
- 02Duplicate activities
- 03Control weaknesses
- 04Process bottlenecks
- 05Unnecessary risk exposure
- 06Documentation gaps
- 07Opportunities for standardization
- 08Stronger governance and accountability
EXT · 06
External Audit & Assurance Support
Preparation and support that makes external audit cycles shorter, calmer, and better documented.
BLAAAS supports management in preparing for external audit and assurance activities: organizing supporting documentation, assessing the controls auditors will rely on, addressing financial reporting and GAAP considerations, and readying stakeholders for requests. BLAAAS provides advisory and preparation support and does not perform services requiring licenses or authorizations the firm does not hold.
What this includes
- 01Audit preparation and PBC readiness
- 02Supporting documentation organization
- 03Financial reporting considerations
- 04Controls relied upon by external auditors
- 05GAAP considerations
- 06Stakeholder and process owner readiness
- 07Post audit follow up support
EBP · 07
Employee Benefit Plan Audit Support
Documentation, control, and readiness support for retirement and employee benefit plans.
Benefit plan oversight carries real fiduciary exposure. BLAAAS assists plan sponsors and management with the documentation, control evaluation, and readiness work that supports plan governance and DOL and ERISA considerations. This is advisory and preparation support, not a regulated attest service.
What this includes
- 01Plan documentation review
- 02Control evaluation over plan processes
- 03Contribution and eligibility process review
- 04Compliance readiness
- 05Fiduciary risk considerations
- 06DOL and ERISA considerations
- 07Coordination support with plan auditors
INV · 08
Inventory Count Audits
On site observation and testing that validates what your records claim.
BLAAAS performs independent inventory observation and testing, documenting what was counted, how it was counted, and where records and reality diverge, along with the control observations that explain why.
What this includes
- 01Physical inventory observation and counting
- 02Floor to sheet testing
- 03Sheet to floor testing
- 04Inventory record validation
- 05Discrepancy identification
- 06Count documentation
- 07Control observations
- 08Results reporting
ADV · 09
Advisory & Remediation
BLAAAS does not disappear after identifying an issue.
Findings only create value when they are resolved. BLAAAS works alongside management to determine why an issue occurred, design a corrective action that addresses the cause rather than the symptom, support implementation, and validate that the fix holds.
What this includes
- 01Root cause analysis
- 02Corrective action planning
- 03Process redesign
- 04Control enhancement
- 05Remediation monitoring
- 06Remediation validation
- 07Implementation risk
- 08Operational readiness
- 09Governance improvements
Begin the Conversation
Discuss Your Audit Needs
Tell us what is driving the request: a regulator, a lender, a board, a growth event, or a control failure. We will tell you candidly how BLAAAS would approach it.