Governance, Risk & Compliance

Graham holds GRCP and GRCA certifications from OCEG — the global standard-setter for integrated governance, risk, and compliance. This is not a side interest; it is a core discipline that shapes how every client engagement is structured.

For SMEs, governance is often treated as something large corporates do. We disagree. The businesses most exposed to governance failures are the ones that think they're too small to need it — until an ATO audit, a director liability claim, or a key person departure forces the issue.

Our GRC work is practical: risk registers that are actually reviewed, compliance calendars that are actually followed, and governance structures that make the business more resilient — not more bureaucratic.