Assurance & Risk Advisory

We build the quality system behind every opinion we sign

Financial and statutory audits, internal controls and IFC/ICFR testing, forensic investigation, and the full range of assurance work in between, delivered under one quality framework across India, the USA, the UK, Australia and the UAE.

What We Cover

The Engagement Index

Not a list of audit types you can get anywhere else, but one defined quality system applied across all of it, whether the engagement is a statutory audit in Mumbai, an IFC review in Dubai, or a fraud investigation in London.

Financial & statutory audits

Independent examination of financial statements against the framework and legal requirement in your jurisdiction, mandatory or voluntary.

Opinion
Internal controls, internal audit & IFC/ICFR

Design and operating effectiveness of financial controls, plus ITGC review across ERP and financial systems.

Controls
Forensic investigation

Evidence-based investigation of suspected fraud or irregularity, built to hold up before regulators, courts, or parties to a dispute.

Investigation
Tax & indirect tax audits

GST and VAT audits, tax audit compliance, and the country-specific obligations of tax authorities and revenue departments.

Compliance
Due diligence

A target's financial history and compliance record, examined on behalf of an investor or acquirer.

Transaction
Review, compilation & agreed-upon procedures

Lower levels of assurance for organisations that do not need, or are not yet ready for, a full audit opinion.

Limited assurance
Specialised & sector audits

Bank branch and concurrent audits, stock audits, trust account audits, and grant or fund compliance audits.

Sector-specific
Sustainability & ESG assurance

Independent assurance over non-financial disclosures, built alongside our core practice as client demand grows.

Emerging
Built Around Your Jurisdiction

Five Rulebooks,
One Standard Behind Them

What counts as mandatory, what a regulator expects, and who is allowed to sign differs by country. We work to each one's actual requirements.

India

Statutory audit under the Companies Act 2013, tax audit under the Income Tax Act, GST audit, and IFC reporting, by ICAI-registered professionals.

Companies Act 2013ICAIIFC
United States

Financial statement audits under US GAAP, PCAOB standards for public company work, SOX 404 control testing, and litigation-grade forensic accounting.

US GAAPPCAOBSOX 404
United Kingdom

Statutory audit under the Companies Act 2006, to International Standards on Auditing (UK) under FRC oversight, alongside charity and voluntary assurance.

ISA (UK)FRC
Australia

Financial report audits under the Corporations Act to ASIC thresholds, applying Australian standards, plus internal audit and fraud control work.

Corporations ActAASBASIC
UAE

Statutory audit under the Commercial Companies Law, free zone licence renewal audits (DMCC, DIFC, JAFZA, ADGM and others), with VAT and corporate tax support.

IFRSFTAFree zones

Local rules differ. The standard behind the work does not. Groups spanning these markets get one framework, coordinated centrally.

The Dop & Bud Assurance Quality Framework

Four Things That Have to Be True
Before We Sign

An audit opinion is only as good as the system that produced it. Anyone can promise independence and rigour. What determines whether a signature can be trusted is the process standing behind it: who reviewed the work, what technology tested it, and how the firm decided to take the engagement at all.

Gate 01
Independence & acceptance

Assessed before we take the mandate, not after starting the work. If a conflict exists, or we are not the right firm for the risk profile, we say so upfront.

Gate 02
One methodology, five jurisdictions

A single core methodology on every engagement, with each jurisdiction's requirements layered on top. A cross-border group gets one consistent standard, coordinated centrally.

Gate 03
Technology sharpens judgement

The same people who build automation for clients turn it inward: mechanical work cleared fast, analytics directing effort to where risk sits, anomalies flagged for the auditor to evaluate.

Automated tie-outsAnomaly flaggingRisk analyticsDigital confirmations
Gate 04
Structured technical currency

Standards change constantly across five jurisdictions. A structured training and update cycle keeps ISA, US GAAP and PCAOB, Ind AS, IFRS and AASB currency built in, not left to individual initiative.

Only then does the opinion get signed.

The nature, timing and extent of audit procedures, including how much of a population gets tested, is always a matter of the auditor's professional judgement under the applicable auditing standards. Technology accelerates the mechanical work and sharpens where we look. It does not make that call.

How an Engagement Runs

Five Phases, Each One Signed Off

Phase 01
Acceptance & risk assessment

Independence, conflicts, and whether the risk profile is one we are positioned to serve well, assessed before we agree to take the engagement.

Phase 02
Planning

We learn your business, map where misstatement, control failure or fraud risk is most likely, and agree the scope before fieldwork begins.

Phase 03
Fieldwork & testing

Records, controls or specific transactions tested, technology-enabled and data-driven wherever the engagement allows, with the auditor's judgement setting the nature, timing and extent of the work.

Phase 04
Reporting

An audit opinion, a controls assessment, or forensic findings, written to be understood by the people who have to act on them.

Phase 05
Remediation & follow-through

Where we find a weakness, we help fix it.

An assurance engagement should leave your business stronger than it found it.

Data Security & Confidentiality

Independence, Evidence and Discretion, Actively Protected

Assurance and forensic work carry a different confidentiality risk than most engagements: independence has to be actively protected, and in forensic cases the allegation itself is often more sensitive than the eventual finding.

Nothing is disclosed before it is confirmed

An allegation under investigation is treated as strictly confidential until findings are established, so reputations are not put at risk by a suspicion that turns out to be unfounded.

Independence is assessed, not assumed

Acceptance and continuance decisions screen for conflicts of interest, so the relationships that might compromise objectivity never enter into how we test or report.

Working papers retained to your jurisdiction's standard

With access restricted to the engagement team and those with a legitimate right to review.

NDA as standard

On every engagement, before any financial data or evidence is shared.

Questions, Answered

Before You Ask

Do we need a statutory audit, or is this optional for us?

It depends on your jurisdiction, entity type, size and structure. Tell us where you operate and we will tell you plainly whether an audit is mandatory or voluntary for you.

What is the difference between an internal audit and a statutory audit?

A statutory audit is an independent, often legally required examination of your financial statements. An internal audit reviews your own processes and controls, usually not mandatory, aimed at improving how the business runs.

Will you take on any engagement, or do you turn some down?

We assess independence and risk before accepting a mandate. If there is a conflict, or the engagement is not a good fit for what we can do well, we say so before starting rather than after.

Can you support a group with entities in more than one of these five countries?

Yes. One methodology, coordinated centrally, with local regulatory requirements layered in per jurisdiction.

Is our information kept confidential, especially during a forensic investigation?

Yes. Every engagement is covered by an NDA, and in forensic work specifically, nothing is disclosed until findings are confirmed.

An Opinion Backed by a Real Quality System, Not Just a Signature

Whether it is a statutory requirement, a lender's request, a board's concern, or a specific suspicion that needs investigating, let's talk about what level of assurance your business actually needs, and the framework standing behind it.