Services Global Taxation Deal Advisory (M&A) Risk & Governance GAAP / IFRS & Accounting Advisory Bookkeeping & CAS Outsourced Controller FP&A & Fractional CFO Markets United States United Kingdom Canada Australia New Zealand United Arab Emirates Saudi Arabia Qatar Kuwait Pakistan More Pakistan Taxation Calculators Insights Pay an invoice About Contact Book a call →
Home/Markets/New Zealand/Risk & Governance

Risk & Governance in New Zealand

Right-sized controls and governance for growing NZ companies and their offshore parents.

Discuss New Zealand risk →All New Zealand services →
Why it's different here

Risk & Governance, tuned to New Zealand.

Right-sized controls and governance for growing NZ companies and their offshore parents.

Reporting framework: IFRS (NZ IFRS). Primary regulator: the IRD. Company registry: the Companies Office. Everything runs remotely, on New Zealand's calendar, in NZD.

Full scope

What's included.

The complete risk & governance scope — all of it available to New Zealand clients.

SOX 404 & internal controls over financial reporting

Designing, documenting and testing the controls US-listed (and pre-IPO) companies must certify — scoped so the effort matches the risk.

Internal audit (outsourced / co-sourced)

A full internal audit function — plan, fieldwork, reporting — for companies that need the assurance without a department.

Audit-readiness assessments

A dry run before your external auditors arrive: reconciliations, support files and positions checked so the audit doesn't become an archaeology project.

Enterprise risk management

A practical risk register and response plan — the version a board actually uses, not a shelf document.

Policy & process design

Finance policies (delegation of authority, procurement, expense, close) and SOPs written for how your company actually works.

Fraud risk reviews

Segregation, access and payment-flow reviews that find the gaps before someone else does — plus support when something has already gone wrong.

Regulatory compliance mapping

The finance-relevant obligations in each market you operate in, mapped to owners and calendars so nothing is discovered late.

IT general controls coordination

The ITGC layer (access, change, backup) documented and tested in step with your financial controls.

Corporate governance reviews

Board structures, charters and reporting lines benchmarked and tightened — especially ahead of investment or listing.

Board & audit-committee reporting

Clear, decision-ready reporting packs for boards and audit committees, on a fixed cadence.

How we deliver

Process & quality control.

01

Scoping & risk assessment

We agree which processes and controls matter — materiality first, checklists second.

02

Documentation

Narratives, flowcharts and control matrices in a format your auditors accept.

03

Testing

Design and operating-effectiveness testing with clearly stated samples and results.

04

Remediation & reporting

Gaps ranked by risk, with owners, deadlines and retest dates.

TurnaroundPrograms are scheduled around your audit and reporting calendar.
Quality controlEvery conclusion traceable to tested evidence; nothing signed off that wasn't sampled.
More services in New Zealand
GAAP / IFRS & Accounting AdvisoryDeal Advisory (M&A)Bookkeeping & CASOutsourced ControllerFP&A & Fractional CFOTaxation
Questions

Risk & Governance in New Zealand — FAQs

How does Risk & Governance work for a New Zealand company specifically? +
Right-sized controls and governance for growing NZ companies and their offshore parents. We deliver it fully remotely, reporting under IFRS (NZ IFRS) and coordinating with the IRD and the Companies Office where the work touches them.
We're not listed — is SOX relevant to us? +
The full SOX regime only binds US-listed companies, but the underlying discipline — documented, tested controls — is exactly what acquirers, lenders and auditors look for at any size.
Will our external auditors accept your work? +
The documentation follows the standards external auditors use themselves, and we coordinate with them directly so reliance is agreed up front.
How disruptive is the testing? +
Most evidence is pulled from systems and shared folders; management time is concentrated in short, scheduled walkthrough sessions.
Can you fix the gaps you find? +
Yes — remediation design is part of the service, though we keep designer and tester roles separate so independence holds.

Risk & Governance for your New Zealand business.

Book a discovery call — or send this exact page to whoever needs it.

Book a discovery call →See your savings →