Internal Controls Advisory & Testing

Balancing control and efficiency for optimised results.

We apply our process, risk, and control expertise to help organisations design, implement, and operate controls programmes that are fit-for-purpose, right-sized, and support the needs of internal and external stakeholders, all while striking the right balance between efficiency and control. We speak the language of controls which our experts help organisations translate to meet their specific context and objectives.

We help you identify risk, design and implement controls, and provide control testing and validation services over core processes, systems, initiatives and transformation programmes - no matter your industry, business model, or location.

Strike the right balance between efficiency and control

Control Strategy & Programme Management

Design and implement customised control strategies that adapt to your business landscape and provide appropriate governance.

Control Automation & Optimisation

Modernise and transform your control environment leveraging AI and automated technologies to assess and report on control effectiveness.

Control Design & Implementation

We perform risk assessments, identify control gaps, provide recommendations, support remediation and validation efforts and support communications with regulators and external auditors.

Control Remediation

Mitigate risk by understanding root causes, performing lookbacks, execute a control remediation strategy, and provide testing to validate remediation.

Control Testing

We leverage the emerging technologies, including our proprietary control testing automation solution and testing-as-a-service capabilities, to efficiently test controls and focus resources in high value areas.

Optimise controls and improve performance

Our approach

We bring insights into how internal controls and processes can be established and optimised. We bring insight and foresight to projects in evaluating changes contemplated by an organisation and by being a proactive part of the overall risk management activity associated with execution of strategy, major projects, and core operations. This not only leads to an efficient audit approach but also provides assurance that the controls over these risks are effectively managed, considerate of internal and external drivers, and appropriately balanced with the need to get things done.

Optimise controls and improve performance

Innovating audit and assurance with emerging tech and empowered teams

True innovation in audit isn’t just about adopting technology, it’s about empowering people to drive change. See how Protiviti’s iNN program, tools like ProGPT and Copilot, and a culture of collaboration can transform assurance functions through smarter processes, automation, and data-driven insights.

Elevating project delivery with program assurance in financial services

In financial services, successful project delivery hinges on more than execution, it requires trust, visibility, and control. Explore how program assurance and confidence assessments help manage risk, build stakeholder trust, and drive accountability, ensuring complex projects deliver real value and results.

Key partners

Leadership

David McIntosh

David is a managing director focused on audit, risk management and implementing robust control frameworks at Protiviti Australia. He leads a portfolio of co-sourced and outsourced internal audit programmes, working with listed companies in the technology, manufacturing ...

Learn More

Shane Silva

Shane leads Protiviti Australia's Canberra office, overseeing national technology assurance, project confidence, and data governance. With 20 years' experience, he advises government departments on system transformation and manages federal accounts across social ...

Learn More

Rich Turley

Rich is a Sydney-based managing director at Protiviti Australia, where he helps organisations enhance business value through technology-enabled risk and assurance solutions. He leads internal audit and risk advisory services for ASX-listed companies and major Australian ...

Learn More

Lauren Brown

Lauren is the country lead for Protiviti Australia. With over 14 years' experience in governance, risk, and internal control, she specialises across multiple industries including health, higher education, government, consumer products, and energy. She is an active ...

Learn More

Garran Duncan

Garran Duncan, Managing Director, CAE Solutions, brings over 30 years of internal and risk management experience.As a founding director of Protiviti Australia at its formation in 2004, Garran has held various leadership roles in the firm prior to his current ...

Learn More

Featured insights

COSO’s guiding principles for board oversight: Why directors should care

NEWSLETTER

2 min read

From Assurance to Decision Intelligence: The Future of Internal Audit

WHITEPAPER

3 min read

Guide to AI Governance – Frequently Asked Questions

RESEARCH GUIDE

153 min read

The Next Phase: AI and Human Collaboration Powering Internal Audit Transformation

WHITEPAPER

6 min read

Navigating Australia’s cybersecurity frameworks obligations for government and critical infrastructure organisations: SOCI, PSPF, Essential 8 | Protiviti Australia

Navigating Australia's Cybersecurity Obligations: SOCI, PSPF and the Essential Eight – A Strategic Guide for Government and Critical Infrastructure Organisations

BLOGS

18 min read