Partner-led coverage

Financial institution audit and advisory services.

We focus on community financial institutions under $500 million in assets. Every engagement begins with a clear scope, timeline, and proposal tailored to your institution.

For SOC 1 and SOC 2 reporting across industries, explore Periscope SOC.

Internal Audit

Risk-based coverage for financial, operational, lending, and governance areas, delivered as individual audits or a complete outsourced program.

Financial and operations

  • General accounting and financial reporting
  • Regulatory Call Report
  • Asset/liability management, interest rate risk, and liquidity risk
  • Investment operations
  • Derivative operations
  • Current Expected Credit Losses (CECL)
  • Deposit operations
  • Branch operations
  • Item processing
  • Automated Clearing House (ACH)
  • Wire transfer operations
  • Remote deposit capture

Lending and credit

  • Loan operations
  • Credit administration
  • Commercial lending
  • Indirect lending
  • Consumer lending
  • Residential mortgage lending
  • Other real estate owned (OREO)

Risk and program leadership

  • Third-party and vendor risk management
  • Fraud risk management and anti-fraud controls
  • Human resources and payroll
  • Bank insurance
  • Bank holding company and related-entity transactions
  • Enterprise-wide internal audit risk assessment
  • Annual internal audit plan development
  • Issue validation and follow-up testing
  • FDICIA testing and readiness
  • SOX testing and readiness

Technology Risk and Cybersecurity

Risk-based testing over governance, infrastructure, resilience, critical applications, and cyber defenses.

FFIEC IT Audit

  • IT governance and board oversight
  • IT and cybersecurity risk management
  • Information security and customer information programs
  • Identity and access management
  • Core banking and critical applications
  • Payments and electronic banking
  • Third-party risk management
  • Architecture, infrastructure, and operations
  • Vulnerability, patch, and configuration management
  • Logging, monitoring, and security operations
  • Incident response and regulatory notification
  • Business continuity and operational resilience
  • Change management and development
  • Privacy and records management
  • IT audit and issue management

Internal Controls

  • SOX/FDICIA testing and readiness

Risk Assessment

  • IT Audit Risk Assessment
  • Cybersecurity Risk Assessment

Cybersecurity specialty

  • Internal and external vulnerability scanning and reporting
  • Social engineering
  • Cloud security

Regulatory Compliance and BSA

Risk-based testing across lending, deposits, operations, and financial crime compliance.

Loan compliance

  • Equal Credit Opportunity Act
  • Home Mortgage Disclosure Act
  • Fair Debt Collection Practices Act
  • S.A.F.E. Act
  • Loans to Insiders
  • Fair Credit Reporting Act
  • RESPA
  • Truth in Lending Act
  • Margin stock
  • Community Reinvestment Act
  • Military Lending Act
  • Servicemembers Civil Relief Act

Deposit compliance

  • Electronic Fund Transfer Act
  • Truth in Savings Act
  • Reserve requirements
  • Availability of funds
  • Unlawful internet gambling
  • Garnishment of accounts containing federal benefit payments

Operational compliance and BSA

  • Privacy of consumer financial information
  • Limitations on interbank liabilities
  • Unfair or deceptive acts or practices
  • E-Sign
  • Right to Financial Privacy Act
  • Bank Secrecy Act and anti-money laundering independent testing
  • BSA model validation
  • Second-line compliance monitoring