Our Risk and compliance solutions such as BASEL II compliance solutions, Information security audits, find wide range of applications to Institutional clients from the Banking & Financial Industry.

Our BASEL II compliance solutions are tailor made to suit the requirements of Banks and Financial Institutions with a view to comply with the recommendations of the second accords issued by the Basel Committee on Banking supervision.

A team of 50++ experienced BFAS team including experienced BASEL II consultants provide assistance to Banks and financial Institutions on various compliance aspects such as:

	Capital Allocation norms & the Risk sensitivity.
	Independently advising on the level of Operational and Credit Risks.
	Quantifying the level of Operational and Credit Risks.
	Advising on the level, nature and quantum of Economic, Regulatory capital to reduce the scope for regulatory arbitrage.
	Commenting and advising on the Residual Risks namely the Systemic Risks, Strategic Risks, Reputation Risks, Liquidity Risks and the Legal Risks.

In addition to the above, we also provide comprehensive solutions to Banks and Financial Institutions on Risk Management and Risk Modelling and advising on Risk mitigation strategies. We also offer our expertise on compliance in terms of the Sarbanes Oxley Act 2002, commonly known as SOX or Sarbox. In terms of SOX audits we provide compliance audits on various aspects of SOX such as:

	SOX Section 302 : Internal Control certifications
	SOX Section 404 : Assessment of Internal Control.
	Impact of the SOX on the IT Department on an Organization in terms of:
	- Risk Assessment.   - Control Environment.   - Control Activities.   - Monitoring.   - Information Systems.   - Communications.

Our team of Bfas consultants have the expertise and experience in conducting Information Systems Audits (IS Audits) with a view to evaluate the overall information system’s, practices and operations within an Organization. Such services are directed to ensure that an Organizations Information systems have the capability to safeguard assets, maintain data integrity and is operating effectively and efficiently with a view to achieve the objectives and goals of the Organization.