Internal Financial Controls that hold up under real audit scrutiny.
IFC design and implementation that goes beyond a policy document — controls that actually operate, are tested, and generate the evidence an auditor or listing process requires.
On this page +
A control that exists on paper but isn't tested isn't a control
Internal Financial Controls (IFC) are a statutory requirement for many companies, and a hard requirement for a listing — but a control policy that's documented and never actually tested doesn't hold up. Auditors and, eventually, listing due diligence expect to see controls operating consistently, with evidence.
We design and implement Internal Financial Controls mapped to your actual financial processes — revenue recognition, procurement, payroll, inventory — build the testing and evidence trail that demonstrates they're operating, and remediate gaps before they show up as an audit finding.
Designing a control on paper is the easy part. The harder, more valuable part is making sure it actually operates consistently and generates evidence — that's what an auditor is really testing.
What's included
A standard IFC engagement includes:
Process mapping
Key financial processes — revenue, procurement, payroll, inventory — mapped end to end.
Risk & control identification
Financial reporting risks identified, with controls designed against each one.
Control documentation
Formal control matrices and process narratives, in the format auditors expect.
Testing framework
A testing methodology to demonstrate controls are operating, not just designed.
Gap remediation
Control gaps identified during testing are remediated with a clear action plan.
Audit support
Direct coordination with your statutory auditor on IFC evaluation.
Statutory audit flagged an IFC gap?
Let's remediate it properly, not just patch the specific finding.
How we build your IFC framework
1. Process & risk mapping
We map your key financial processes and the risks that could affect financial reporting accuracy.
2. Control design
Controls are designed against each identified risk, documented to the standard auditors require.
3. Testing & remediation
Controls are tested for operating effectiveness, with gaps remediated and re-tested.
Initial design and documentation typically takes 6–10 weeks; ongoing testing then runs on a periodic cycle aligned to your audit calendar.
Get a clear, itemised quote.
Tell us about your business and we'll size up exactly what this service costs for you — no obligation.
Pricing
Pricing depends on process complexity and the number of key financial processes in scope. See our pricing page for indicative ranges, or get an exact, itemised quote in one call.
Frequently asked questions
Is IFC mandatory for my company?+
What's the difference between IFC and a general audit?+
How do you test whether a control is actually operating?+
What happens if we find significant gaps?+
More under IPO Services
Other IPO Services services
Governance FrameworkBoard structure, committees and governance policies designed…→ Restructuring & Holdco AdvisoryHolding company structuring and group restructuring advisory…→ Audit ReadinessA structured readiness programme covering documentation, con…→IPO Services overview
All IPO Services servicesThe complete engagement, in one view→ All servicesRegistration through to IPO→ PricingTransparent, itemised pricing→Build controls that actually hold up.
Designed, tested and evidenced — not just documented.