HBM
  • Home
  • Internal Audit
    • Overview
    • Outsourced Internal Audit
    • Co-sourced Internal Audit
    • Audit Committee Support
    • Our Approach
  • Advisory Services
    • Governance
    • Enterprise Risk Mgmt
    • Compliance
    • Business Continuity & CM
    • Climate Change Risk
    • Change Management
    • Work Health & Safety
  • About
    • Who We Are
    • Dan Crogan
    • Vission Perey
  • Contact
  • More
    • Home
    • Internal Audit
      • Overview
      • Outsourced Internal Audit
      • Co-sourced Internal Audit
      • Audit Committee Support
      • Our Approach
    • Advisory Services
      • Governance
      • Enterprise Risk Mgmt
      • Compliance
      • Business Continuity & CM
      • Climate Change Risk
      • Change Management
      • Work Health & Safety
    • About
      • Who We Are
      • Dan Crogan
      • Vission Perey
    • Contact
HBM
  • Home
  • Internal Audit
    • Overview
    • Outsourced Internal Audit
    • Co-sourced Internal Audit
    • Audit Committee Support
    • Our Approach
  • Advisory Services
    • Governance
    • Enterprise Risk Mgmt
    • Compliance
    • Business Continuity & CM
    • Climate Change Risk
    • Change Management
    • Work Health & Safety
  • About
    • Who We Are
    • Dan Crogan
    • Vission Perey
  • Contact

Our Approach to Internal Audit

Delivering independent, risk-based assurance that strengthens governance and supports confident decision-making.

At HBM, our Internal Audit approach is founded on independence, integrity, and professionalism. Every engagement is tailored to your organisation's objectives, risk profile, and governance requirements, ensuring our work delivers meaningful assurance and practical recommendations.


By combining industry experience with a structured, risk-based methodology, we help organisations strengthen governance, enhance internal controls, and improve organisational performance.

Book a consultant

A Structured Approach That Delivers Value

Internal Audit should provide more than assurance. It should deliver insights that help organisations make informed decisions, improve processes, and strengthen accountability.


HBM follows a consistent approach for every engagement, ensuring our work is independent, evidence-based, and aligned with recognised professional standards. While every organisation is unique, our methodology remains focused on understanding your business, assessing risk, evaluating controls, and delivering practical recommendations that create measurable value.

The HBM Internal Audit Approach

01 | Understand Your Organisation

Every engagement begins with understanding your organisation.

We take the time to learn about your strategic objectives, governance arrangements, operating environment, organisational structure, and key business processes. This enables us to tailor our audit approach and focus on the areas that matter most.


Key activities include:

  • Understanding organisational objectives 
  • Reviewing governance structures 
  • Meeting with key stakeholders 
  • Understanding business operations 
  • Reviewing policies and procedures 
  • Identifying strategic priorities

02 | Assess Risks

A thorough understanding of organisational risk is fundamental to effective Internal Audit.

We identify and evaluate strategic, operational, financial, compliance, and emerging risks to ensure our audit activities focus on areas of greatest significance.

Our risk-based approach enables Boards and Executive Leadership to gain assurance where it matters most.


Key activities include:

  • Enterprise risk assessment 
  • Review of organisational risk registers 
  • Stakeholder interviews 
  • Identification of emerging risks 
  • Assessment of control environments 
  • Risk prioritisation

03 | Plan the Audit

Effective planning establishes the foundation for every successful audit engagement.

We develop a tailored audit plan that defines the objectives, scope, methodology, resources, and reporting requirements for each engagement.

Our planning process ensures audits are efficient, proportionate, and aligned with organisational priorities.


Key activities include:

  • Defining audit objectives 
  • Determining audit scope 
  • Developing audit programs 
  • Scheduling fieldwork 
  • Resource planning 
  • Stakeholder communication

04 | Execute the Audit

Our experienced auditors evaluate governance processes, risk management practices, and internal controls through a systematic and evidence-based approach.

We gather sufficient and appropriate audit evidence using interviews, document reviews, process walkthroughs, observations, data analysis, and control testing.


Key activities include:

  • Interviews with management 
  • Process walkthroughs 
  • Internal control testing 
  • Data analysis 
  • Evidence collection 
  • Root cause analysis

05 | Report Findings

Clear communication is essential to effective governance.

Our reports provide concise, objective, and practical information that supports informed decision-making by Management, the Executive Team, the Audit Committee, and the Board.


Rather than simply identifying issues, we provide recommendations that are practical, achievable, and aligned with organisational objectives.


Each report typically includes:

  • Executive Summary 
  • Audit Scope and Objectives 
  • Key Findings 
  • Risk Ratings 
  • Root Cause Analysis 
  • Practical Recommendations 
  • Management Responses 
  • Action Plans

06 | Follow-Up & Continuous Improvement

Our commitment continues after the audit report has been delivered.

We monitor agreed management actions, validate implementation, and report progress to support accountability and continuous improvement.

This ensures audit recommendations are effectively implemented and continue to strengthen governance and organisational performance.


Key activities include:

  • Follow-up reviews 
  • Validation of corrective actions 
  • Progress reporting 
  • Audit Committee updates 
  • Continuous improvement monitoring

Principles That Guide Our Work

Every Internal Audit engagement delivered by HBM is guided by the following principles: 

Independence

Professional Excellence

Risk-Based Focus

We maintain objectivity and independence throughout every engagement, providing unbiased assurance that supports effective governance.

Risk-Based Focus

Professional Excellence

Risk-Based Focus

Our work is prioritised according to organisational risk, ensuring resources are directed to the areas of greatest importance. 

Professional Excellence

Professional Excellence

Professional Excellence

Our engagements are conducted using recognised professional standards, structured methodologies, and evidence-based practices. 

Practical Outcomes

Continuous Improvement

Professional Excellence

We focus on delivering realistic recommendations that strengthen governance, improve controls, and support organisational performance.

Collaboration

Continuous Improvement

Continuous Improvement

We work constructively with management while maintaining the independence necessary to provide objective assurance.

Continuous Improvement

Continuous Improvement

Continuous Improvement

Internal Audit should drive positive organisational change. Our approach supports continuous improvement and long-term organisational resilience.

What You Can Expect From HBM

When you engage HBM, you can expect:

  • Independent and objective assurance 
  • A structured and transparent audit process 
  • Clear communication throughout every engagement 
  • Practical, evidence-based recommendations 
  • Reporting designed for Boards and Executive Leadership 
  • A collaborative approach that respects your organisational culture 
  • A trusted partner committed to continuous improvement

Supporting Better Governance

Our approach is designed to help organisations:

  • Strengthen governance frameworks 
  • Improve internal controls 
  • Enhance enterprise risk management 
  • Increase operational effectiveness 
  • Support regulatory compliance 
  • Build confidence for Boards and Audit Committees 
  • Drive sustainable organisational improvement

Why Organisations Choose HBM

Organisations choose HBM because we combine independent assurance with practical insight.


We understand that effective Internal Audit is not about identifying faults. It is about helping organisations strengthen governance, improve performance, and make better-informed decisions.


Through our structured approach, experienced professionals, and commitment to delivering value, we build trusted relationships that support long-term organisational success.

Ready to Strengthen Your Governance?

Whether you are establishing an Internal Audit function, seeking independent assurance, or enhancing your existing audit capability, HBM provides the experience, professionalism, and practical insight to help your organisation succeed.


Partner with HBM to strengthen governance, improve risk management, and build confidence through independent Internal Audit.

Book a Consultation

Copyright © 2026 HBM - All Rights Reserved.

Powered by

This website uses cookies.

We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.

Accept