Risk and Compliance Services to Safeguard your Business
Citadel Point provides the advice and assurance needed to thrive within an evolving risk and regulatory landscape.
- Collaborate with a seasoned risk advisor to strengthen your defences
- Identify improvements and benchmark against industry peers
- Mature your governance practices for greater resilience
Boards and Management face the increasingly complex task of managing risks while navigating ever-evolving regulatory demands. Citadel Point offers industry-specific expertise and tailored risk advisory solutions to help organizations navigate these landscapes and meet stringent regulatory requirements – whether you’re bound by public accountability, operate in a high-risk sector, or adhere to strict data security standards.
Risk Advisory Services
Internal Audit
Strengthen your internal audit function with flexible co-sourcing and full outsourcing support.
Internal Controls Advisory
Gain confidence in your internal control framework across financial, operational, and ESG reporting.
SOC Reporting
Simplify your SOC journey with comprehensive readiness and reporting guidance.
Internal Audit
Internal Audit that Goes Beyond Compliance
Elevate your internal audit team with the right policies, procedures, and best practices.
Gain targeted support when and where it's needed while setting your team up for ongoing success.
Benefit from objective assurance and proactive advisory that enhances processes and supports objectives.
Overview
Transform your internal audit function into a value-driver that empowers your Board and Management to make informed decisions. Our internal audit services go beyond compliance to help you streamline processes, identify opportunities, and proactively address emerging risks. We provide the insights and tools to build stakeholder confidence and your achieve long-term goals with purpose.
Capabilities
Internal Audit Outsourcing
Our fully outsourced solution provides strategic leadership and seamless execution for your internal audit program. We can act as your Chief Audit Executive (CAE), develop and refine your program, and deliver a full spectrum of internal audit services – from risk assessment to actionable insights.
Internal Audit Co-Sourcing
Enhance your internal audit team with targeted support in areas where you need additional expertise or capacity. We can take on specialized projects or provide temporary staffing during peak periods, sharing our knowledge and experience with your team along the way.
Internal Audit Program Design
Create a tailored internal audit program that aligns with international standards and your specific business objectives. We’ll develop policies and procedures, establish a robust foundation, provide guidance on hiring internal audit staff, and offer ongoing support as needed.
Internal Controls Advisory
Robust Internal Controls for a Resilient Organization
Identify and strengthen control weaknesses before they lead to disruption or loss.
Optimize your control environment to address emerging ESG, operational, and financial reporting risks.
Ensure new systems have robust controls in place for a smooth deployment and ongoing efficiency.
Overview
Strengthen your organization’s resilience and safeguard assets with internal control frameworks that align with industry best practices (COSO). We assess your controls, identify gaps, and design and implement new controls that comply with SOX/ICFR, ESG, and other regulations. By doing so, we streamline processes and provide clear documentation for certification and audit readiness.
Capabilities
SOX and ICFR
Ensure your financial reporting processes and controls confidently address SOX, NI 52-109, and other Internal Controls over Financial Reporting (ICFR) requirements. We help you to proactively identify and address control weaknesses, enhance financial disclosures, and safeguard data integrity.
ESG Disclosure Controls
Ensure accurate and transparent Environmental, Social, and Governance (ESG) reporting with targeted control assessments. We assess your current processes, align disclosures with regulatory standards and stakeholder expectations, and implement control enhancements.
Operational Risk Assessments
Our assessments identify and mitigate operational risks within your business processes, evaluate and optimize your current practices, and build a stronger foundation for resilience.
Pre and Post-Implementation System Reviews
Our system reviews ensure new technology solutions align with internal control requirements and function as intended. We’ll help you understand how new technology integrations meet those standards, adapt processes to enhance control effectiveness, and maximize the value of your technology investments.
SOC Reporting
SOC Reporting with No Surprises, Just Results
Whether you're preparing for your first SOC report or seeking ongoing assurance, we make the process seamless.
We handle the complexities of SOC reporting, allowing your team to dedicate their time to innovation and growth.
Differentiate your business and win more high-value accounts by showcasing your commitment to securing customer data.
Overview
A Service and Organization Controls (SOC) report is essential for service organizations that store, process, or transmit sensitive data. This includes technology, healthcare, financial services, and other industries where data security is paramount. By validating the effectiveness of your controls and demonstrating your commitment to security, a SOC report enhances client trust and can even be a competitive differentiator.
We simplify the SOC reporting process by working with you to ensure your controls adequately secure client data and comply with industry standards. Whether you’re just starting your SOC journey or looking to renew your report, we support you at every stage.
Capabilities
SOC Readiness Assessments
Our comprehensive SOC readiness assessment helps you achieve a smooth and successful audit. We evaluate your controls, identify gaps, and provide actionable recommendations for improvement. Our services include a thorough review of existing controls, guidance on control design and refinement, and assistance with system descriptions and documentation.
SOC 2 Audit
Achieve a successful SOC 2 audit with our proven process. We thoroughly assess your controls against your chosen Trust Service Principles and provide ongoing feedback on design and effectiveness. You’ll receive detailed findings and actionable recommendations for improvement. Our clear and concise reports keep you informed throughout the process, ensuring a smooth and successful audit.
What Sets Citadel Point Apart?
Partner with Citadel Point and experience the difference a trusted risk advisor can make.
Certified excellence
Shane Troyer holds industry-recognized CIA, CISSP, CFE, and CPA certifications. You can trust him to identify, assess, and mitigate risks that impact your organization.
Expert-led
Your project is never fully delegated to junior staff. You'll work directly with Shane Troyer at every stage to receive the attention and expertise you deserve.
Industry-specific solutions
From public sector organizations to publicly listed companies, we've helped clients across diverse industries to proactively manage risk and achieve objectives.
Maximum value
Get the support you need without the cost of large firms or overhead of in-house hires. We provide flexible, scalable solutions that deliver results while fitting your budget.

Partner with Us for Proactive Risk Management
FAQs
Do you have a question that we haven’t answered? Please get in touch and we’ll happily provide the information you’re looking for.
We're preparing for our first SOC audit. How can you help?
We offer comprehensive support, including readiness assessments, control optimization, and ongoing guidance. We ensure a streamlined SOC audit process to help you achieve compliance and maximize value for your organization.
Do you work with clients in specific locations?
We serve clients across Canada and globally, with a strong focus on organizations based in Western Canada (BC, AB, SK, MB). We offer both on-site and remote-based services to support businesses throughout the country and around the world.
How do I make a case for investing in risk advisory?
We help Boards and Executives understand the evolving risk landscape and potential impacts on the organization’s financial performance, reputation, and compliance. Our risk assessments and strategic recommendations provide the data-driven insights needed for informed decision-making and long-term success.
What are the benefits of working with an external risk advisory firm?
We bring a fresh perspective, specialized expertise, and objective insights to help your organization address complex risks and achieve objectives. Our collaborative approach keeps solutions aligned with your specific priorities.
Can you supplement our internal audit function to address staffing shortages ?
We offer flexible engagement models for co-sourcing or outsourcing your internal audit needs and bring specialized skills in areas such as IT audit, fraud investigations, or compliance with specific regulations.
How can you support our ESG reporting and control requirements?
We help you develop a robust ESG framework, establish data collection processes, and design controls for accurate and transparent reporting that align with industry standards and investor expectations.