Engagement
Full treasury control application audit
A structured audit of how payment release, liquidity views, and bank connectivity controls operate inside your treasury applications.
Who this is for
Corporate treasury teams, internal audit leads, and CFOs who need an independent reading of how control rules behave inside live treasury applications — not a restatement of vendor manuals.
Result
You receive a written findings pack that maps each material gap to a specific screen, entitlement role, or payment path, with severity ratings and recommended remediation owners. The pack is written so external auditors and board committees can follow the evidence trail without reinterpretation.
Scope included
- Inventory of treasury applications in scope (payment hub, cash pooling, bank connectivity, in-house bank modules where present)
- Walkthrough of payment initiation, approval hierarchies, and release cut-offs with the people who operate them
- Sampling of dual-authorization and four-eyes enforcement across entitlement roles
- Review of reconciliation exception queues and override logs for a defined period
- Comparison of documented control matrices against observed system behaviour
- Closing workshop and written report with prioritised findings
Scope excluded
- Financial statement audit opinions
- Vendor selection or implementation project management
- Continuous monitoring after the engagement ends (available as a separate follow-up)
- Penetration testing or network security assessments
Provider and process
Engagements are led by Online Logic practitioners from the Tokyo desk at 2-11-1 Nagatacho, Chiyoda-ku. Work proceeds in four stages: scoping letter, fieldwork, findings validation with treasury operations, and final report.
Timeline and delivery
Typical duration is four to eight weeks depending on the number of applications and legal entities. Fieldwork usually includes several days on the client treasury floor; remaining analysis runs from our Nagatacho office.
Preparation
Please arrange access to read-only application environments, current entitlement extracts, the latest control matrix, and a named liaison from treasury operations. We will send a document request list with the scoping letter.
Constraints
We do not alter live configurations during the audit. Findings that require urgent attention are raised verbally during fieldwork so operations can act before the final report.
Fee basis
Fees are quoted as a fixed engagement amount after scoping. Price reflects the number of applications, entities, and payment corridors in scope — not a daily rate alone.
Next step
Request a scoping call and list the applications you want examined. We reply within two business days with a proposed timeline.