Outsourced internal audit, executed under delegated authority.
End-to-end internal audit for licensed fund managers and investment firms — risk-based planning, control testing and board-ready reporting, delivered by a practitioner with hands-on MFSA-regulated audit experience and current CIA candidacy.
The audit cycle
A standard four-stage cycle, scoped to your risk profile and regulatory obligations.
Planning
A risk-based annual audit plan, scoped against your regulatory obligations and prior findings.
Fieldwork
Control testing, walkthroughs and evidence gathering across the areas in scope.
Reporting
Findings graded by severity, written up in board- and committee-ready packs.
Follow-up
Remediation tracked to closure, with status reported at each cycle.
What you get
Documentation built to stand up to a regulator's review, not just an internal file.
Planning & fieldwork
- Risk-based annual audit plans
- Control testing workpapers
- Walkthrough documentation and evidence logs
Reporting & follow-up
- Findings reports graded by severity
- Audit committee and board reporting packs
- Remediation tracking logs through to closure
Why RegServ
Close to four years executing internal audit work inside MFSA-regulated fund managers and investment firms under delegated authority, currently pursuing CIA (Certified Internal Auditor) certification through the IIA Malta chapter — the same standard applied whether the audit sits in-house or is outsourced.
Need an internal audit function?
A scoping call covers your risk profile, reporting lines and what a first cycle would look like.