Risk and Assurance Companies in London: Practical Overview and Selection Guide (2026)
AC
Acumon Chartered Accountants·11 min read
London has a broad market for risk and assurance services, ranging from large professional services firms to smaller specialist advisory practices. The scope can vary quite a bit, with some providers focusing on internal audit and governance, while others work more closely with technology risk, compliance, fraud or operational controls. This guide highlights a selection of companies operating in this space, giving readers useful context on their services, focus areas and the types of organisations they support. It is intended as a practical overview rather than a ranking.
Acumon
Acumon is a UK firm of chartered accountants and advisors providing risk and assurance services to organisations in London and across the UK.
The firm works with organisations ranging from growing businesses and owner-managed companies to larger corporate groups and regulated entities. Risk and assurance services include risk management, technology assurance, governance and internal audit support for CFOs and Finance Directors.
Acumon is a registered audit firm and holds a Public Interest Entity (PIE) audit licence, allowing the firm to audit listed companies and other entities subject to enhanced regulatory oversight in the United Kingdom. PIE audits are subject to additional regulatory supervision and quality requirements, and only a limited number of firms are authorised to undertake this type of work.
In addition to its UK audit registration, Acumon also holds audit licences in several international financial centres, including the Cayman Islands, British Virgin Islands (BVI), Jersey, and Isle of Man. These licences enable the firm to support international corporate groups where entities are located across multiple jurisdictions.
International groups may operate through UK companies, overseas subsidiaries and other entities across multiple jurisdictions. Managing risk, governance and internal controls across these structures requires consistent processes and an understanding of cross-border regulatory requirements.
Acumon works with boards, finance teams, CFOs and Finance Directors to support risk and assurance requirements while also helping organisations strengthen governance arrangements, internal controls and risk management processes.
Risk and Assurance Capabilities
Acumon provides risk and assurance services across a wide range of organisational structures and sectors.
These include:
UK companies and corporate groups
owner-managed and growing businesses
UK subsidiaries of international groups
regulated organisations
charities and not-for-profit organisations
organisations operating across multiple jurisdictions
Accounting advisory engagements are typically led by experienced professionals with direct involvement throughout the engagement.
Regulatory Licences and Registrations
Acumon holds several audit registrations that support its work with organisations operating across multiple jurisdictions.
These include:
UK statutory audit registration
Public Interest Entity (PIE) audit licence
Jersey audit licence
Isle of Man audit licence
Cayman Islands audit licence
British Virgin Islands audit licence
These registrations allow the firm to support organisations with operations and corporate structures spanning the UK and key international financial centres.
Core Services
Alongside accounting advisory services, Acumon provides a range of services supporting financial management, reporting and business planning.
These include:
risk management
IT risk and cybersecurity
governance and compliance
internal audit
technology assurance
internal controls and governance reviews
statutory external audit
charity and not-for-profit audit
group and subsidiary audits
Accounting advisory work is often carried out alongside discussions with management about financial performance, reporting requirements, planning and wider business matters.
Many organisations seek this type of support when their financial requirements change, operations become more complex or additional input is needed for business decisions.
Acumon works with organisations that are:
reviewing their risk position
strengthening internal controls
improving governance arrangements
managing changing regulatory requirements
developing their operations
planning for future growth
Early involvement can help ensure that accounting, reporting and financial management remain appropriate as the organisation develops.
Address: 1-2 Craven Road, Ealing, London, W5 2UA, UK
Phone: 020 8567 3451
Deloitte
Deloitte’s UK Risk Advisory practice covers a broad range of internal audit and risk services, including internal audit outsourcing and co-sourcing, IT internal audit, internal controls certification and internal audit effectiveness reviews. Its London team also works on financial services risk, regulatory matters and governance issues. The firm’s internal audit offering is particularly relevant to organisations with complex technology environments or formal control certification requirements. Deloitte also covers integrated risk and assurance models, making its services relevant to organisations looking beyond individual control reviews.
Key Facts
Ideal for: Large organisations with complex risk, controls and regulatory requirements
Specialization: Enterprise and technology-related risk
Industries: Financial services and other large corporate sectors
Contact Information
Website: www.deloitte.com
Facebook: www.facebook.com/deloitteuk
Twitter: x.com/deloitteuk
LinkedIn: www.linkedin.com/company/deloitte
Address: 1 New Street Square, London, EC4A 3HQ, United Kingdom
Phone: +44 (0)20 7936 3000
PwC
PwC provides risk assurance and consulting services covering risk, compliance, controls and operational resilience. Its London Risk Assurance team works with commercial organisations on compliance advisory and assurance, risk assessment, control framework design and regulatory compliance programmes. Its services also cover internal audit and assurance functions, including regulatory, macroeconomic and emerging risks. This makes its offering relevant to companies that need both assurance work and broader risk and compliance support.
Key Facts
Ideal for: Commercial organisations with complex compliance and control requirements
EY combines assurance and risk consulting through teams covering internal audit, technology risk, enterprise resilience, third-party risk, financial crime and governance. Its Internal Audit Transformation services include diagnostics, technology-enabled audit, co-sourced and managed internal audit, and analytics-based controls testing. EY also has London-based risk consulting leadership covering technology risk and wider risk management. The breadth of the service model makes the firm relevant to organisations where internal audit sits alongside cybersecurity, technology, regulatory or enterprise risk work.
KPMG’s internal audit offering sits within its risk and regulatory consulting services. The firm’s work includes risk assessments, compliance reviews, governance and controls, enterprise risk management and independent assurance. KPMG also provides sector-specific assurance, including support for local authorities and financial services organisations. Its financial services work covers regulatory issues such as CASS and internal audit monitoring, which can be relevant to FCA-regulated firms.
Key Facts
Ideal for: Organisations with significant governance, risk and regulatory requirements
BDO offers internal audit and risk advisory services for organisations of different sizes. Its offering includes outsourced and co-sourced internal audit, external quality assurance reviews, audit committee advisory, continuous auditing and data analytics. BDO also works across technology risk, cyber security, data privacy and third-party assurance. Its London Risk Advisory team includes specialists in financial services, real estate, retail, public sector and other industries.
Key Facts
Ideal for: Businesses and organisations needing outsourced or co-sourced internal audit
Industries: Financial services, real estate, retail, public sector, technology, hospitality and manufacturing
Contact Information
Website: www.bdo.co.uk
LinkedIn: www.linkedin.com/company/bdo-llp
Instagram: www.instagram.com/lifeatbdo
Address: 55 Baker Street, London, W1U 7EU, United Kingdom
Phone: 020 7486 5888
Grant Thornton
Grant Thornton provides internal audit and wider business risk services, with delivery models that include outsourcing, co-sourcing and loan staff. Its risk offering also covers enterprise risk management, controls advisory, technology risk, project and programme assurance, supplier assurance, data assurance and service organisation controls reports. The firm has a London office at Finsbury Circus, while its internal audit practice works across UK and international engagements.
Forvis Mazars combines audit and assurance with consulting services covering risk, governance and internal audit. Its London office provides audit and assurance, internal audit, governance and risk management, while its broader risk consulting practice includes enterprise risk management, internal controls, regulatory compliance and third-party risk. The firm’s Governance, Risk & Internal Control team also undertakes internal audit, IT audit, governance reviews and compliance reviews.
Key Facts
Ideal for: Businesses that need risk, governance and assurance services under one engagement
RSM UK provides risk assurance through its risk and governance practice, with services covering internal audit, controls, technology risk, financial services compliance, fraud risk and enterprise risk management. Its internal audit work includes risk-based planning, control design and effectiveness testing, operational improvement recommendations and support for audit committees and boards. The practice also has dedicated controls assurance leadership in London.
Key Facts
Ideal for: Businesses looking to connect internal audit with operational and governance improvement
Industries: Financial services and wider commercial sectors
Contact Information
Website: www.rsmuk.com
LinkedIn: www.linkedin.com/company/rsm-uk
Instagram: www.instagram.com/rsm.uk
Address: 25 Farringdon Street, London, EC4A 4AB
Phone: +44 (0)20 3201 8000
Crowe UK
Crowe’s risk and assurance services include internal audit, governance reviews, specialist assurance, technology risk, cyber security, project and programme assurance, fraud investigations and supply chain assurance. The firm’s London Risk and Assurance team is led by a dedicated partner and works with social purpose organisations, education providers, corporates and public sector clients. Crowe can provide fully outsourced internal audit or co-sourced support for existing internal audit teams.
PKF Littlejohn has a dedicated Governance, Risk & Control Assurance team providing second- and third-line assurance services, with particular experience in financial services. The firm offers fully outsourced internal audit functions and co-sourced support for in-house teams. Its audit and assurance practice also addresses governance, risk management and internal controls. PKF Littlejohn has an established London office and provides assurance services to businesses, public bodies and other organisations.
Key Facts
Ideal for: Financial services firms and organisations needing second- or third-line assurance
Core services: Internal audit, governance, risk and control assurance, co-sourcing
Specialization: Financial services governance and controls
Industries: Financial services, public bodies and commercial organisations
Saffery’s Risk Assurance Team provides independent advice on business risk management for commercial and not-for-profit organisations. Its work includes identifying and assessing risks, developing mitigation plans, monitoring risk, reporting and creating risk registers. The firm positions risk assurance alongside other audit and controls services, which can make it relevant to businesses that want structured risk assessment connected with their wider assurance programme. Saffery also has a London-based partner leading its risk assurance work.
Key Facts
Ideal for: Commercial and not-for-profit organisations reviewing their risk management frameworks
Core services: Risk identification, risk assessment, mitigation, monitoring and reporting
Specialization: Risk assurance and risk management
Industries: Commercial and not-for-profit organisations
Address: 71 Queen Victoria Street, London, EC4V 4BE
Phone: +44 (0)20 7841 4000
Moore Kingston Smith
Moore Kingston Smith has a risk advisory practice covering cyber security, regulatory and compliance risk, supply chain risk and third-party assurance. Its third-party assurance services include SOC 1, SOC 2, SOC for Cyber Security, ISAE 3000 and ISAE 3402 reporting. This gives the firm a particular focus on organisations that need independent evidence around their internal controls, technology environments or service-provider risks. Its wider risk advisory work also addresses operational resilience and governance.
Key Facts
Ideal for: Service organisations and businesses needing independent controls or third-party assurance
Address: Charlotte Building, 17 Gresse Street, London, W1T 1QL
Phone: +44 (0)20 4582 1000
MHA
MHA’s Governance, Risk & Controls practice provides assurance and advisory work across internal audit, governance and regulatory compliance, finance and risk management, financial system reviews, technology and cyber risk, and operational reviews. The firm works with public and private sector organisations, with particular experience in financial services and charities and not-for-profit organisations. MHA has a London office in the City and a dedicated internal audit team with experience across financial services and not-for-profit engagements.
Key Facts
Ideal for: Financial services, not-for-profit and other organisations needing governance and control reviews
Industries: Financial services, charities, education, public sector and commercial sectors
Contact Information
Website: www.mha.co.uk
Facebook: www.facebook.com/100063452388108
LinkedIn: www.linkedin.com/company/mha-uk
Instagram: www.instagram.com/mhaaccountants
Address: 2 London Wall Place, London, EC2Y 5AU
Phone: +44 (0)20 7429 4100
Conclusion
Risk and assurance providers in London cover a fairly wide range of needs. Depending on the organisation, that may mean internal audit and governance reviews, regulatory compliance, technology and cyber risk, fraud investigations, or assurance over specific business processes and controls.
There is no single right provider for every organisation. The appropriate choice will depend on the nature of the risks involved, the level of internal resources available, regulatory requirements, and whether support is needed for a specific review or as part of an ongoing assurance function. This guide is intended to give organisations a clearer starting point when comparing the different approaches available in the London market.
AC
Written by the Acumon team
Acumon is an ICAEW-registered firm of chartered accountants and registered auditors
based in London, with offices in Pitstone, Aylesbury and Bournemouth. Need advice on
anything covered here? Talk to us.
Risk and assurance services in Bradford range from statutory audit and financial-control reviews to outsourced internal audit, governance, enterprise risk management and technology assurance. The…
Risk and assurance services in Glasgow cover areas ranging from internal audit and enterprise risk management to controls assurance, governance reviews, technology risk, compliance and statutory…
Organisations looking for risk and assurance services in Leeds can choose between global professional services networks, national accountancy groups and regional firms with established local…
Read article
Get in Touch
Ready for Accountants Who Move Your Business Forward?
Tell us what you need. Within one business day, a qualified accountant will be in touch to talk it through and give you a clear, fixed-fee quote — no obligation.
We use essential cookies to run this site, plus Google Analytics and Google Ads to
understand how visitors use it and measure our advertising — only with your consent. See our
Privacy Policy.
