Global site

Risk advisory

Protect yourself against business threats.

We specialise in managing risk. To enhance the value that you deliver to your stakeholders, we can assist you in protecting your business and its success.

We understand the threats that your business may face. From the global banking crisis to the rise of cybercrime, recent history demonstrates the importance of identifying threats, and the appropriate response, at an early stage.

As a result, we are active, not reactive, and provide support and guidance as your systems and processes develop. Our expertise and knowledge ensure we remain at the forefront of implementing new approaches to managing risk.

 

RSM's Global Capabilities

From new trade rules to talent migration, from big data to cyber threats, the world is changing at an unprecedented pace. But upheaval also means opportunity, if you’re prepared.

RSM posts record revenues as consulting services power growth

RSM has reported record global revenues of $5.37 billion for 2018

Bringing risk-conscious tidings – Creating an enterprise-wide awareness of risk

We have all seen the brazen headlines depicting the latest fraud scandal and organisations crumbling as a result. We are saturated with recommendations, codes, standards and acts concerning Corporate Governance and Risk Management. Honing the risk-conscious culture in today’s uncertain, tech-boom world is ever more crucial to avoid the next headline pointing at you.

Re-imagining business models for GDPR and a data-driven age

A blog by Jean Stephens, CEO. 2018 has been an eye-opener when it comes to protecting customer data. From middle market businesses to large corporations, cybersecurity and simple human error pose an increasing risk. With the EU’s General Data Protection Regulations (GDPR) having come into effect last month, how can middle market businesses and fast-growing companies use this change to benefit them?

Understanding cybersecurity and the operational risks of cryptocurrency

The regulatory environment and the operational and security risks are vitally important when investing in cryptocurrencies. While the price fluctuation for bitcoin, a type of cryptocrrency, garnered significant public interest in 2017, many fundamental questions remain on this subject. Questions such as: What are cryptocurrencies? Why are they so popular? And what are the key risks and challenges of investing in them right now?

RSM breaks through US$5bn global revenue

RSM has delivered growth in every business line, reflecting RSM’s commitment to help middle market businesses fulfil their global ambitions. 2017 saw revenues rise by 5.6% to US$5.1bn.

92% of European businesses are unprepared for GDPR

Businesses across Europe are unprepared for the EU’s General Data Protection Regulation (GDPR), which comes into law in May 2018, according to new research conducted for RSM.  The survey, completed by 400 of Europe’s successful business leaders, asked about their preparedness for GDPR and how the new regulation will impact their operations.

GDPR: The game-changer businesses don’t know about

The new EU General Data Protection Regulation (GDPR) is set to be the biggest shake-up to data privacy legislation in a generation. The regulation comes into force in May 2018 and will affect businesses across the globe. Steven Snaith, Partner, RSM UK and Nicola Colleran, Technology Consulting Director, RSM Ireland comment.

Is your business GDPR ready?

The General Data Protection Regulation (GDPR) came into force on 25 May 2018 after four years of negotiations and unprecedented levels of lobbying by businesses.  These new rules will cause significant disruption to how organisations store, manage and process personal data, with significant penalties for those who don’t comply.

When it comes to cyber, 'underinsured' means 'underprepared'

A blog by Michael Shatter, Director of Risk Assurance Services, RSM Australia. Throughout the evolution of cyber insurance one thing has become clear; defence barriers can never be fully impenetrable and therefore, you are never fully protected. This is what makes insurance the back bone of cyber protection. Organisations of all sizes need to invest in security procedures and tools to make the business as resilient as possible. 'Underinsured' means 'underprepared'. 

5 key considerations for effective business interruption coverage

Most key business processes are now automated and built on technology. Consequently, disruptions from a cyberattack can lead to significant lost sales and productivity, recovery costs and reputational harm. Accounting for business interruption costs is almost as important as mitigating the breach itself, especially as exposure is only expected to increase in the future.

Changing cyber security regulation: How does it impact middle market businesses?

Cyber risk is an ever evolving threat for 21st century business and as such, is a top of mind issue for today’s business leaders. A cyber security breach can have huge legal and financial ramifications for any business. High profile cyber-attacks are on the rise and governments are increasingly cracking down on cyber criminals. 

A meaty internal audit client utilises RSM talent

RSM, through an integrated and coordinated approach with its member firms, developed detailed audit programmes for meat manufacturer  in accordance with industry “leading practices” that are designed to assess internal control effectiveness in a harmonised fashion for the US domestic and international locations selected for internal audits.

Quick thinking saves technology company after external audit

An external audit firm noted that as a result of the failure they would be required to expand their scope of their work to perform a full SOD assessment for all areas addressed in the financial controls at all locations that are significant. The additional cost to RSM's client would have been estimated to be $400,000 if not resolved.

RSM optimise internal audit function

RSM was engaged by a transport and logistics company to develop Internal Audit function, to evaluate the existing Internal Control System (ICS) and the Risk Management System (RMS) in order to optimise and integrate existing systems for establishing a comprehensive Compliance Management System (CMS).

A systematic approach to internal audit

RSM was engaged by a Healthcare trust in order to support the Director of Finance & Information (DFI) in re-establishing financial control and subsequently rebuilding the finance function of the Trust. Our role was primarily focused on three key objectives: support the creation of a financial strategy, review and redesign of the Finance Team structure, and interaction with operations and interim support.

RSM helps NGO re-establish financial control

RSM was engaged by a Department for International Development to provide forensic audit and system security audit services support to the corresponding national audit office (NAO) following the discovery that over 500 lines of accounting entries had been deleted from the financial system. 

RSM improves bank’s internal audit function

RSM was hired by the client to work alongside the internal audit manager of a bank, assisting with risk assessment, audit planning and a co-sourced execution of the annual internal audit plan under the oversight of the Bank’s audit committee.  

Cyber risks: How middle market businesses can protect themselves and their customers

Middle market businesses are often at risk of the same scams and cyber attacks that affect individuals, and should take steps to protect themselves. The cost of a security breach can be huge, not to mention the reputational damage a high-profile breach can cause.

Manufacturers pay a steep price for data vulnerability

When it comes to information technology security, no company or industry is immune to unauthorised access to its data. Yet when it comes to their own companies, many manufacturers feel it unlikely that their data will be a target of any breach attempts. 

Cyber crime: protect, detect, respond

Instances of Internet fraud and other data related crimes have been increasing dramatically and becoming progressively sophisticated. Cyber-attacks on organisations via security loopholes and un-patched servers have increased over 80 percent in the last two years as intruders look for industry or identity data theft.

Defining cyber risk. A view from an Australian director’s chair

Every organisation and every business is now reliant on technology. Therefore cyber security cannot be considered a risk in isolation or something IT ‘will deal with’, it must be considered a business risk and the board must be aware of, and actively pursuing, cyber risks. It also must be understood that cyber threats aren’t a discrete problem to be solved, rather, they’re a complex risk that need to be managed.

Cyber security and the private club industry

No technology topic is hotter in the private club industry than cyber security. Articles, conference and chapter meeting education sessions, vendor presentations–all are addressing the topic from a variety of angles. The purpose of this article is to lay out the four elements of cyber security that should concern your club. 

Top 5 IT budget considerations for financial institutions

The current atmosphere is challenging for financial institutions, as increasing regulatory demands and the rising costs of doing business are making profitability more difficult. As your institution begins the budgeting process, your IT framework will likely come under scrutiny, as properly leveraging technology can help you become more efficient while providing necessary security measures.

Cyber risk in the leisure and hospitality sector

Cyber crimes are growing on a global scale and the leisure and hospitality sector is not immune to this. There are particular, and very real threats to consider. Large customer databases and high transaction volumes present across the sector make data particularly attractive to criminals.

Securing the family office: Implementing a data security plan

Data breaches and information security are critical concerns for organisations and individuals as attack methods become more diverse and widespread. While media reports typically only illustrate the dangers at large companies, small breaches are more frequent and cause the most damage. In fact, family offices are at an acute risk; with information from high-net-worth individuals extremely valuable to criminals, security measures may require a closer look.

How banks can increase cybersecurity risk management

The rise in advance persistent threats puts a spotlight on the vulnerability of the IT systems at many financial institutions—and intensifies the need to implement more robust security procedures to protect institutional assets.

The Transpacific Partnership

In June 2015 the U.S. Congress granted fast track authority to President Barack Obama, clearing the way for final negotiations of the Transpacific Partnership (TPP). The completion of the 12-member TPP would create a mega-regional zone representing 40 percent of global GDP and 26 percent of world trade.

Value added by Internal Control

Results of a European survey

The Smartphone and its Risks

Having a few key safeguards in place can reduce the risk of smartphones becoming a matter of national security.

Creating Enterprise: Wide Risk Awareness Are Your Clients Building Prudent ‘Risk Cultures’?

The collapse of Enron and other corporate scandals in the early 2000s demonstrated how imprudent company cultures can lead to unethical practices and outright fraud. The more recent implosion of Lehman Brothers showed how a culture of risk-taking pervaded financial institutions and precipitated the global financial meltdown.