London has a broad market for risk and assurance services, ranging from large professional services firms to smaller specialist advisory practices. The scope can vary quite a bit, with some providers focusing on internal audit and governance, while others work more closely with technology risk, compliance, fraud or operational controls. This guide highlights a selection of companies operating in this space, giving readers useful context on their services, focus areas and the types of organisations they support. It is intended as a practical overview rather than a ranking.
Acumon
Acumon is a UK firm of chartered accountants and advisors providing risk and assurance services to organisations in London and across the UK.
The firm works with organisations ranging from growing businesses and owner-managed companies to larger corporate groups and regulated entities. Risk and assurance services include risk management, technology assurance, governance and internal audit support for CFOs and Finance Directors.
Acumon is a registered audit firm and holds a Public Interest Entity (PIE) audit licence, allowing the firm to audit listed companies and other entities subject to enhanced regulatory oversight in the United Kingdom. PIE audits are subject to additional regulatory supervision and quality requirements, and only a limited number of firms are authorised to undertake this type of work.
In addition to its UK audit registration, Acumon also holds audit licences in several international financial centres, including the Cayman Islands, British Virgin Islands (BVI), Jersey, and Isle of Man. These licences enable the firm to support international corporate groups where entities are located across multiple jurisdictions.
International groups may operate through UK companies, overseas subsidiaries and other entities across multiple jurisdictions. Managing risk, governance and internal controls across these structures requires consistent processes and an understanding of cross-border regulatory requirements.
Acumon works with boards, finance teams, CFOs and Finance Directors to support risk and assurance requirements while also helping organisations strengthen governance arrangements, internal controls and risk management processes.
Risk and Assurance Capabilities
Acumon provides risk and assurance services across a wide range of organisational structures and sectors.
These include:
- UK companies and corporate groups
- owner-managed and growing businesses
- UK subsidiaries of international groups
- regulated organisations
- charities and not-for-profit organisations
- organisations operating across multiple jurisdictions
Accounting advisory engagements are typically led by experienced professionals with direct involvement throughout the engagement.
Regulatory Licences and Registrations
Acumon holds several audit registrations that support its work with organisations operating across multiple jurisdictions.
These include:
- UK statutory audit registration
- Public Interest Entity (PIE) audit licence
- Jersey audit licence
- Isle of Man audit licence
- Cayman Islands audit licence
- British Virgin Islands audit licence
These registrations allow the firm to support organisations with operations and corporate structures spanning the UK and key international financial centres.
Core Services
Alongside accounting advisory services, Acumon provides a range of services supporting financial management, reporting and business planning.
These include:
- risk management
- IT risk and cybersecurity
- governance and compliance
- internal audit
- technology assurance
- internal controls and governance reviews
- statutory external audit
- charity and not-for-profit audit
- group and subsidiary audits
Accounting advisory work is often carried out alongside discussions with management about financial performance, reporting requirements, planning and wider business matters.
Many organisations seek this type of support when their financial requirements change, operations become more complex or additional input is needed for business decisions.
Acumon works with organisations that are:
- reviewing their risk position
- strengthening internal controls
- improving governance arrangements
- managing changing regulatory requirements
- developing their operations
- planning for future growth
Early involvement can help ensure that accounting, reporting and financial management remain appropriate as the organisation develops.
Contact Information
- Website: acumon.com
- Email: [email protected]
- Address: 1-2 Craven Road, Ealing, London, W5 2UA, UK
- Phone: 020 8567 3451
Deloitte
Deloitte’s UK Risk Advisory practice covers a broad range of internal audit and risk services, including internal audit outsourcing and co-sourcing, IT internal audit, internal controls certification and internal audit effectiveness reviews. Its London team also works on financial services risk, regulatory matters and governance issues. The firm’s internal audit offering is particularly relevant to organisations with complex technology environments or formal control certification requirements. Deloitte also covers integrated risk and assurance models, making its services relevant to organisations looking beyond individual control reviews.
Key Facts
- Ideal for: Large organisations with complex risk, controls and regulatory requirements
- Core services: Internal audit, IT audit, controls testing, risk advisory, regulatory risk
- Specialization: Enterprise and technology-related risk
- Industries: Financial services and other large corporate sectors
Contact Information
- Website: www.deloitte.com
- Facebook: www.facebook.com/deloitteuk
- Twitter: x.com/deloitteuk
- LinkedIn: www.linkedin.com/company/deloitte
- Address: 1 New Street Square, London, EC4A 3HQ, United Kingdom
- Phone: +44 (0)20 7936 3000
PwC
PwC provides risk assurance and consulting services covering risk, compliance, controls and operational resilience. Its London Risk Assurance team works with commercial organisations on compliance advisory and assurance, risk assessment, control framework design and regulatory compliance programmes. Its services also cover internal audit and assurance functions, including regulatory, macroeconomic and emerging risks. This makes its offering relevant to companies that need both assurance work and broader risk and compliance support.
Key Facts
- Ideal for: Commercial organisations with complex compliance and control requirements
- Core services: Risk assurance, compliance advisory, controls, operational resilience, internal audit support
- Specialization: Risk and compliance assurance
- Industries: Technology, telecoms, oil and gas, pharmaceuticals, financial services and commercial sectors
Contact Information
- Website: www.pwc.co.uk
- Facebook: www.facebook.com/PwCUK
- LinkedIn: www.linkedin.com/company/pwc-uk
- Instagram: www.instagram.com/pwc_uk
- Address: 1 Embankment Place, London, WC2N 6RH, United Kingdom, WC2N 6RH
- Phone: +44 (0)20 7583 5000
EY
EY combines assurance and risk consulting through teams covering internal audit, technology risk, enterprise resilience, third-party risk, financial crime and governance. Its Internal Audit Transformation services include diagnostics, technology-enabled audit, co-sourced and managed internal audit, and analytics-based controls testing. EY also has London-based risk consulting leadership covering technology risk and wider risk management. The breadth of the service model makes the firm relevant to organisations where internal audit sits alongside cybersecurity, technology, regulatory or enterprise risk work.
Key Facts
- Ideal for: Organisations seeking integrated risk, assurance and internal audit capabilities
- Core services: Internal audit transformation, technology risk, enterprise resilience, third-party risk
- Specialization: Technology-enabled internal audit and risk consulting
- Industries: Financial services, corporate and regulated sectors
Contact Information
- Website: www.ey.com
- Facebook: www.facebook.com/pages/Ernst-Young/195665063800329
- LinkedIn: www.linkedin.com/company/ernstandyoung
- Address: 1 More London Place, London SE1 2AF
- Phone: +44 20 7951 2000
KPMG
KPMG’s internal audit offering sits within its risk and regulatory consulting services. The firm’s work includes risk assessments, compliance reviews, governance and controls, enterprise risk management and independent assurance. KPMG also provides sector-specific assurance, including support for local authorities and financial services organisations. Its financial services work covers regulatory issues such as CASS and internal audit monitoring, which can be relevant to FCA-regulated firms.
Key Facts
- Ideal for: Organisations with significant governance, risk and regulatory requirements
- Core services: Internal audit, ERM, compliance reviews, controls and regulatory assurance
- Specialization: Governance, risk and compliance
- Industries: Financial services, public sector, industrial and corporate organisations
Contact Information
- Website: kpmg.com
- Facebook: www.facebook.com/KPMG
- Twitter: x.com/kpmguk
- LinkedIn: www.linkedin.com/company/kpmg-uk
- Address: 15 Canada Square, Canary Wharf, London, E14 5GL
- Phone: +44 (0)20 7311 1000
BDO
BDO offers internal audit and risk advisory services for organisations of different sizes. Its offering includes outsourced and co-sourced internal audit, external quality assurance reviews, audit committee advisory, continuous auditing and data analytics. BDO also works across technology risk, cyber security, data privacy and third-party assurance. Its London Risk Advisory team includes specialists in financial services, real estate, retail, public sector and other industries.
Key Facts
- Ideal for: Businesses and organisations needing outsourced or co-sourced internal audit
- Core services: Internal audit, risk management, controls advisory, technology risk, third-party assurance
- Specialization: Internal audit and risk advisory
- Industries: Financial services, real estate, retail, public sector, technology, hospitality and manufacturing
Contact Information
- Website: www.bdo.co.uk
- LinkedIn: www.linkedin.com/company/bdo-llp
- Instagram: www.instagram.com/lifeatbdo
- Address: 55 Baker Street, London, W1U 7EU, United Kingdom
- Phone: 020 7486 5888
Grant Thornton
Grant Thornton provides internal audit and wider business risk services, with delivery models that include outsourcing, co-sourcing and loan staff. Its risk offering also covers enterprise risk management, controls advisory, technology risk, project and programme assurance, supplier assurance, data assurance and service organisation controls reports. The firm has a London office at Finsbury Circus, while its internal audit practice works across UK and international engagements.
Key Facts
- Ideal for: Organisations needing internal audit combined with specialist risk expertise
- Core services: Internal audit, enterprise risk, controls advisory, technology risk, project assurance
- Specialization: Risk and internal audit
- Industries: Financial services, commercial organisations and other regulated sectors
Contact Information
- Website: www.grantthornton.co.uk
- LinkedIn: www.linkedin.com/company/grant-thornton-uk
- Instagram: www.instagram.com/gt_trainees
- Address: 8 Finsbury Circus, London, EC2M 7EA
- Phone: +44 (0)20 7383 5100
Forvis Mazars
Forvis Mazars combines audit and assurance with consulting services covering risk, governance and internal audit. Its London office provides audit and assurance, internal audit, governance and risk management, while its broader risk consulting practice includes enterprise risk management, internal controls, regulatory compliance and third-party risk. The firm’s Governance, Risk & Internal Control team also undertakes internal audit, IT audit, governance reviews and compliance reviews.
Key Facts
- Ideal for: Businesses that need risk, governance and assurance services under one engagement
- Core services: Internal audit, IT audit, risk management, governance reviews, compliance reviews
- Specialization: Governance, risk and internal control
- Industries: Financial services, public sector, consumer and other major sectors
Contact Information
- Website: www.forvismazars.com
- Twitter: x.com/ForvisMazarsUK
- LinkedIn: www.linkedin.com/company/forvis-mazars-in-the-uk
- Instagram: www.instagram.com/forvismazarsuk
- Address: 30 Old Bailey, London, EC4M 7AU
- Phone: +44 (0) 20 7063 4000
RSM UK
RSM UK provides risk assurance through its risk and governance practice, with services covering internal audit, controls, technology risk, financial services compliance, fraud risk and enterprise risk management. Its internal audit work includes risk-based planning, control design and effectiveness testing, operational improvement recommendations and support for audit committees and boards. The practice also has dedicated controls assurance leadership in London.
Key Facts
- Ideal for: Businesses looking to connect internal audit with operational and governance improvement
- Core services: Internal audit, controls assurance, enterprise risk, technology risk, compliance
- Specialization: Risk and governance
- Industries: Financial services and wider commercial sectors
Contact Information
- Website: www.rsmuk.com
- LinkedIn: www.linkedin.com/company/rsm-uk
- Instagram: www.instagram.com/rsm.uk
- Address: 25 Farringdon Street, London, EC4A 4AB
- Phone: +44 (0)20 3201 8000
Crowe UK
Crowe’s risk and assurance services include internal audit, governance reviews, specialist assurance, technology risk, cyber security, project and programme assurance, fraud investigations and supply chain assurance. The firm’s London Risk and Assurance team is led by a dedicated partner and works with social purpose organisations, education providers, corporates and public sector clients. Crowe can provide fully outsourced internal audit or co-sourced support for existing internal audit teams.
Key Facts
- Ideal for: Organisations seeking internal audit alongside specialist governance and assurance reviews
- Core services: Internal audit, governance, technology risk, cyber assurance, fraud and supply chain assurance
- Specialization: Risk and assurance for complex organisations
- Industries: Non-profits, higher education, corporates and public sector
Contact Information
- Website: www.crowe.com
- Email: [email protected]
- Twitter: x.com/CroweUK
- LinkedIn: www.linkedin.com/company/crowe-uk
- Instagram: www.instagram.com/crowe_uk
- Address: 55 Ludgate Hill, London, EC4M 7JW
- Phone: +44 (0)20 7842 7100
PKF Littlejohn
PKF Littlejohn has a dedicated Governance, Risk & Control Assurance team providing second- and third-line assurance services, with particular experience in financial services. The firm offers fully outsourced internal audit functions and co-sourced support for in-house teams. Its audit and assurance practice also addresses governance, risk management and internal controls. PKF Littlejohn has an established London office and provides assurance services to businesses, public bodies and other organisations.
Key Facts
- Ideal for: Financial services firms and organisations needing second- or third-line assurance
- Core services: Internal audit, governance, risk and control assurance, co-sourcing
- Specialization: Financial services governance and controls
- Industries: Financial services, public bodies and commercial organisations
Contact Information
- Website: www.pkf-l.com
- Email: [email protected]
- Twitter: x.com/PKF_Littlejohn
- LinkedIn: www.linkedin.com/company/littlejohn
- Instagram: www.instagram.com/pkf.littlejohn
- Address: 30 Churchill Place, London, E14 5RE
- Phone: 020 7516 2200
Saffery
Saffery’s Risk Assurance Team provides independent advice on business risk management for commercial and not-for-profit organisations. Its work includes identifying and assessing risks, developing mitigation plans, monitoring risk, reporting and creating risk registers. The firm positions risk assurance alongside other audit and controls services, which can make it relevant to businesses that want structured risk assessment connected with their wider assurance programme. Saffery also has a London-based partner leading its risk assurance work.
Key Facts
- Ideal for: Commercial and not-for-profit organisations reviewing their risk management frameworks
- Core services: Risk identification, risk assessment, mitigation, monitoring and reporting
- Specialization: Risk assurance and risk management
- Industries: Commercial and not-for-profit organisations
Contact Information
- Website: www.saffery.com
- Email: [email protected]
- LinkedIn: www.linkedin.com/company/saffery
- Instagram: www.instagram.com/saffery_uk
- Address: 71 Queen Victoria Street, London, EC4V 4BE
- Phone: +44 (0)20 7841 4000
Moore Kingston Smith
Moore Kingston Smith has a risk advisory practice covering cyber security, regulatory and compliance risk, supply chain risk and third-party assurance. Its third-party assurance services include SOC 1, SOC 2, SOC for Cyber Security, ISAE 3000 and ISAE 3402 reporting. This gives the firm a particular focus on organisations that need independent evidence around their internal controls, technology environments or service-provider risks. Its wider risk advisory work also addresses operational resilience and governance.
Key Facts
- Ideal for: Service organisations and businesses needing independent controls or third-party assurance
- Core services: Third-party assurance, SOC reporting, ISAE reporting, cyber security, supply chain risk
- Specialization: Controls and technology-related assurance
- Industries: Technology, professional services and other service organisations
Contact Information
- Website: mooreks.co.uk
- Twitter: x.com/MooreKSLLP
- LinkedIn: www.linkedin.com/company/moore-kingston-smith
- Address: Charlotte Building, 17 Gresse Street, London, W1T 1QL
- Phone: +44 (0)20 4582 1000
MHA
MHA’s Governance, Risk & Controls practice provides assurance and advisory work across internal audit, governance and regulatory compliance, finance and risk management, financial system reviews, technology and cyber risk, and operational reviews. The firm works with public and private sector organisations, with particular experience in financial services and charities and not-for-profit organisations. MHA has a London office in the City and a dedicated internal audit team with experience across financial services and not-for-profit engagements.
Key Facts
- Ideal for: Financial services, not-for-profit and other organisations needing governance and control reviews
- Core services: Internal audit, regulatory compliance, finance and risk management, technology risk
- Specialization: Governance, risk and controls
- Industries: Financial services, charities, education, public sector and commercial sectors
Contact Information
- Website: www.mha.co.uk
- Facebook: www.facebook.com/100063452388108
- LinkedIn: www.linkedin.com/company/mha-uk
- Instagram: www.instagram.com/mhaaccountants
- Address: 2 London Wall Place, London, EC2Y 5AU
- Phone: +44 (0)20 7429 4100
Conclusion
Risk and assurance providers in London cover a fairly wide range of needs. Depending on the organisation, that may mean internal audit and governance reviews, regulatory compliance, technology and cyber risk, fraud investigations, or assurance over specific business processes and controls.
There is no single right provider for every organisation. The appropriate choice will depend on the nature of the risks involved, the level of internal resources available, regulatory requirements, and whether support is needed for a specific review or as part of an ongoing assurance function. This guide is intended to give organisations a clearer starting point when comparing the different approaches available in the London market.