Consulting · Processes, policies and risk

Processes, policies and risk, written down and up to date.

We document how your company operates: its processes, its accounting policies, its risks and the controls that cover them. We work with the people who run each process, so what is written helps them do the work, understand it and control it day to day.

When it's needed

There is almost always a change behind it.

The parent company asks for it

The group sets its policies and controls, and the subsidiary has to show how it applies them in Colombia.

The system changed

With a new ERP, the written procedures stop describing what actually happens in the operation.

The company grew

What a few people used to handle from memory is now done by a team, and it needs to be written down.

A review is coming

An audit, a group review or an investor will ask how each thing is done, and who does it.

What the service includes.

Accounting policies

  • Review and update of the accounting policy manual
  • Drafting the policies that do not exist yet
  • Treatment of differences between the local framework and the parent company's reporting framework

Processes and procedures

  • Mapping each process with the people who run it
  • Flowcharts showing the decisions and who is responsible for each step
  • Written procedures in the format the company agrees on

Risks and controls

  • Identification and assessment of operational risks
  • Matrices that match each risk with the control that covers it and its owner

SAGRILAFT, PTEE and restricted lists

  • Design or update of SAGRILAFT, Colombia's self-control system for money-laundering and terrorist-financing risk
  • Business Transparency and Ethics Program (PTEE)
  • Screening of clients, suppliers and other counterparties against restricted lists
How we work

We write it with the people who do it.

Each document is built with the people who run the process and validated with them before delivery. That way what is written matches what is done.

Phase 01

Diagnosis

We review what already exists — manuals, policies, procedures and job descriptions — and start from there.

Phase 02

Mapping

We walk through each process with the people who run it, as it is done today.

Phase 03

Documentation

We write policies, procedures and matrices in the agreed format, with flowcharts where they make them easier to read.

Phase 04

Validation and delivery

Each owner reviews their part, on a validation schedule agreed from the start, before the final delivery.

If you report to a parent company

When local books are kept under one framework and group reporting under another, the policy manual makes it clear: what applies in Colombia, what is reported to the parent company and how the differences between the two are treated.

Take the summary with you.

The scope, the deliverables and how we work, in one document you can pass on to whoever decides with you.

Want to know who would be behind your project?

Meet the team →

Tell us what you need to put in writing.

We'll give you everything you need to make the best decision.

Start a conversation