Large, global public companies
Complex organizations with board-level reporting, operations in more than one place, and controls that have to hold up under external review.
Denver · Local, national, and global
Big-Firm Expertise. Boutique Experience.
Your controls have to hold up under board, auditor, and regulator scrutiny. You need senior people who stay with the work. Cooper-Richards brings SOX, internal audit, IT risk, advisory, and AI governance expertise to complex organizations globally, from our home base in Denver.
Services
What you stop worrying about
You stop worrying about fire drills, handoffs, and who to pull in. We work with IT, Accounting, and Internal Audit to keep the work moving.
SOX Compliance & Internal Controls
Testing, evidence, and the auditor conversation.
Internal Audit
Reviews that do not fit the day-to-day.
IT Risk & Cybersecurity
Access, change, operations, and the systems the business runs on.
Advisory Services
A senior person on the controls question, with the teams who own it.
AI Governance & Controls
How AI is used, and how it stays under control.
The work
What the engagements cover
People on the work have come from Big Four firms and from large public and private companies. The senior person in the first conversation stays on the engagement.
Read the services- IT controls
- Business process controls
- User access reviews
- Segregation of duties
- SOX readiness and 404(a)
- Internal audit co-source
- Data analysis
- Governance, risk, and compliance
Client profile
Who we work with
Our clients are primarily $1B+ organizations, and a significant share are Fortune 1000 companies. The common thread is complexity: the work has to be right, and someone senior has to stay with it.
Mid-sized companies with a compliance requirement
SOX already in place, or a path toward 404(b). Enough complexity that the work matters, and a need for senior people to stay with it.
Emerging firms
Growing companies putting a control environment in place as they scale, before the first exam or the first public filing.
Start here
Where do you need help?
Two questions. We point you at the practice that actually matches.
Insights
Research, articles, and white papers
article · AI Governance
AI Governance for the Enterprise: Value, Boundaries, and Evidence
AI governance is not about restricting innovation. It's about ensuring organizations can adopt AI with clear accountability, defined boundaries, and evidence that controls are working.
article · SOX & Controls
When Internal Audit Should Be Co-Sourced (and When It Should Not)
Co-sourcing can help internal audit address specialized risks, major initiatives, and temporary resource constraints without relinquishing ownership of the audit function. The challenge is knowing what to delegate and what must remain internal.
article · SOX & Controls
ITGCs After Go-Live: Why the Control Environment Slips
A successful go-live is an important project milestone, but it is not the same thing as a sustainable control environment. Many control weaknesses emerge after implementation, when day-to-day operational realities begin to replace project governance.
Industries we know
Manufacturing and industrial products · Financial services · Consumer products · Home building · Mining. Local firms with global reach. Denver is home base.