Internal Audit & Risk Advisory
Strengthen governance, detect weaknesses before they become losses, and build an organisation that regulators and stakeholders can trust — with Kenya's experienced internal audit professionals.
Your First Line of Defence Against Fraud, Waste & Non-Compliance
Internal controls are what stand between your organisation and financial loss. Our risk-based methodology identifies your highest-exposure areas first — then delivers practical, actionable recommendations your team can actually implement.
- Risk-based internal audit plans tailored to your organisation
- Internal control reviews across finance, procurement and operations
- Fraud risk assessment and prevention frameworks
- Outsourced internal audit function for SMEs, NGOs and SACCOs
- Board and Audit Committee reporting and support
- Findings mapped to IIA standards and Kenyan regulatory requirements
Our Internal Audit & Risk Services
A complete internal audit function — whether you need a single targeted review or an ongoing outsourced partnership.
Risk-Based Audit Planning
We identify your highest-risk areas through a structured risk assessment and build an annual audit plan that prioritises where it matters most — saving time and maximising impact.
Internal Control Reviews
Systematic evaluation of your financial, operational and IT controls — identifying gaps and design flaws before external auditors or fraudsters find them first.
Fraud Risk Assessment
Identification of fraud schemes relevant to your organisation, assessment of existing anti-fraud controls and design of prevention and detection mechanisms.
Forensic Investigations
Investigation of suspected fraud, misappropriation or financial irregularities — with documented findings suitable for disciplinary action or legal proceedings.
Operational Audits
Reviews of key processes — procurement, inventory, payroll, revenue collection — to identify inefficiencies, compliance gaps and cost-saving opportunities.
Procurement & Supply Chain Audit
End-to-end review of your procurement cycle from requisition to payment — checking for compliance, value-for-money and conflicts of interest.
Outsourced Internal Audit
A fully managed internal audit function for organisations that don't have an in-house team — delivering all the benefits at a fraction of the cost of a full-time hire.
Board & Audit Committee Support
Attendance at Audit Committee meetings, presentation of findings, governance advisory and support for board-level risk oversight responsibilities.
Risk Areas We Assess
We evaluate risk across all dimensions of your organisation — not just finances.
Financial Risk
Cash handling, bank reconciliation, financial reporting accuracy and misstatement risk across all accounts and ledgers.
Fraud & Corruption
Segregation of duties, collusion risk, ghost workers, inflated procurement and diversion of funds from intended use.
Compliance Risk
Tax obligations, labour laws, regulatory filings, donor conditions and sector-specific compliance requirements in Kenya.
Operational Risk
Process breakdowns, inadequate documentation, system failures and over-reliance on key individuals within the organisation.
IT & Data Risk
System access controls, data integrity, cybersecurity posture and accounting software configuration risks.
Reputational Risk
Governance failures, disclosure weaknesses and control breakdowns that could damage stakeholder and donor trust.
How We Conduct an Internal Audit
A structured, risk-based methodology that minimises disruption and maximises value delivered.
Risk Assessment & Planning
Understand your organisation, identify risk areas and agree audit scope.
Fieldwork & Testing
Document controls, test transactions and gather evidence on-site.
Draft Report
Findings shared with management for factual accuracy and response.
Final Report Issued
Comprehensive report with risk ratings, root causes and actions.
Follow-Up Review
We verify that agreed management actions have been implemented.
Why MMA for Internal Audit & Risk?
We bring the rigour of a large firm with the personal service of a boutique practice. Based in Thika, our team has conducted internal audits across manufacturing, agriculture, NGOs, SACCOs and public-sector entities throughout Murang'a, Kiambu and Nairobi counties.
About Our Firm- Truly Independent — No conflicts of interest; we report only to your Board and Audit Committee
- Practical Recommendations — Findings your team can act on, not theoretical checklists
- Fast Turnaround — Draft reports within 10 working days of fieldwork completion
- Strict Confidentiality — All findings handled with complete professional discretion
Frequently Asked Questions
Is Your Organisation Truly Protected?
Don't wait for a fraud incident or a failed audit to find out. Let our team assess your risk exposure today.