Internal audit outsourcing in Austria
How a payment institution, fund manager, investment firm or CASP can outsource its internal audit function. We cover the rules, the models and the annual engagement.
Internal audit from Vienna for the DACH region
We provide internal audit for regulated financial firms in Austria and the DACH region: crypto-asset service providers (CASPs), payment and e-money institutions, fund managers and small investment firms. One service in five forms: ongoing internal audit, co-sourcing alongside your own function (including interim head of internal audit), ad hoc audits, setting up the function, and external quality assessment under Standard 8.4 of the Global Internal Audit Standards. You get a risk-based audit plan, audit reports and working papers that your management body, supervisory body and the FMA can use directly, and follow-up of agreed actions. Thomas Michalik founded OptiRisk and has worked more than ten years in internal audit at bank and insurance groups. We hold consultations in English or German.
Two starting points
Internal audit for CASPs under MiCAR
What MiCAR requires and whether a CASP may outsource the function under Art. 73. What an audit reviews, and how DORA shapes the plan.
More in German: services overview, co-sourcing for your internal audit, who we work for and contact.