Outsourced & co-sourced internal audit
Internal audit your audit committee can rely on.
A risk-based internal audit function for Malaysian companies — run for you, or alongside your team — led by a certified risk professional.
- Risk-based annual audit plan mapped to your top risks
- Operational, financial and compliance audits, executed end to end
- Control design and effectiveness testing to IIA standards and COSO
- Board-ready reports with owners, dates and follow-up
Senior, certified GRC team · Think Risk International Sdn Bhd, Kuala Lumpur · part of the Think Risk group
Thank you — your enquiry is in.
Our team will reply to you personally. A confirmation is on its way to your inbox.
- ISO 9001
- ISO 14001
- ISO 45001
- ISO/IEC 27001
- ISO 31000
- ISO 37001
- ISO 22301
- COSO
- IIA IPPF
- Section 17A MACC Act
- ISPS Code
What you get
Internal Audit & Assurance
- IIA Professional Practices Framework
- COSO
- Risk-based internal audit plans and annual programmes
- Operational, financial and compliance audit execution
- Outsourced and co-sourced internal audit function
- Control design and effectiveness testing
- Audit committee and board-ready reporting
How it runs
Five steps, every time.
- 1
Scope & plan
Objective, scope, criteria and reporting line agreed; workplan mapped to your risks.
- 2
Evidence
Document review, data interrogation, walkthroughs and interviews where the work is done.
- 3
Analyse
Findings rated on a defensible risk basis, root cause separated from symptom.
- 4
Report
Decision-ready findings, business impact and a corrective action plan with owners and dates.
- 5
Embed
Capability transfer so your team sustains it; actions and KPIs handed over in StrategyX.
FAQ
Before you ask.
What does an engagement cost?
It depends on the model. Projects such as a gap assessment or a single internal audit are quoted at a fixed fee for a fixed scope. Retained and co-sourced internal audit is billed as a retainer or per audit cycle, and investigations at a day rate. Tell us what you need and we will send a written proposal.
Can you act as our internal audit function?
Yes. We can run your internal audit function entirely (outsourced) or work alongside your team (co-sourced) under an annual risk-based plan, reporting to your audit committee and board.
Who will actually do the work?
Our senior team in Kuala Lumpur, supported by the group's audit and compliance specialists in Australia and the Philippines where the work calls for it. You will know who is on your engagement before it starts.
Ready when you are.
One short form. A personal reply from our team — no obligation.
Book a consultation