Corporate Service

Most of what keeps a listed company honest happens where no one is watching. A payment approved by two people; an entry reviewed before it posts; a monthly close that reconciles because someone insisted it should. None of it appears in the accounts. All of it decides whether the accounts can be trusted.

Internal control is the discipline of making those small habits hold. It is invisible on the good days — and on the bad days it is the only thing that matters. A company can look compliant on paper and still, on the morning after a problem, be unable to say who decided what, and why. The difference is not a policy. It is whether the controls were exercised before they were needed.

We assess how controls over financial reporting are designed, and then whether they actually operate — through walkthroughs, tests, and the evidence a board will later be asked to rely on. The output is not a binder. It is a set of findings, prioritised, with a remediation plan management can act on and a report the audit committee can read.

For a company preparing to list, the work has a deadline attached. An IPO turns on whether the controls will survive public scrutiny — the routines, the delegated authorities, the discipline of the close. We run internal-control readiness ahead of listing (IPO PN21/PN2), and where a listing has gone wrong, we support resumption-of-trading investigations and reviews requested by the HKEx or the SFC.

The point is not to pass an inspection. It is to be able to answer a question you did not expect — on the day a transaction, an investigation or an audit puts the controls to the test. That is the habit: ask before the market asks.

Good controls are finished work that no one notices. The measure of them is the day they are tested — and hold.