What this audit covers

  • Approval workflow review. Who approves what, at which threshold, and with what supporting evidence.
  • Agency oversight. How the client side challenges the agency, and how often.
  • Plan-vs-delivery monitoring. Cadence, ownership, and escalation paths for variance.
  • Reporting verification. Whether agency-supplied numbers are independently checked, or accepted as given.
  • Segregation of duties. Whether the same party buys, reports, and approves — or whether challenge is structural.
How we work

The phases of the engagement.

01

Walk-throughs and interviews

Current-state mapping with the people who actually run the workflow.

02

Document review

Approval logs, media plans, reporting artefacts, and exception records.

03

Control-gap rating

Each gap rated by financial exposure and likelihood.

04

Selected control testing

End-to-end testing of high-risk controls.

What you’ll get

  • A process map of your current media-governance state.
  • A control-gap register with severity, exposure, and recommended remediation.
  • A recommended control framework with named owners and review cadence.
  • Optional: quarterly interim control testing as a retained engagement.
What we typically find

The recurring patterns we surface.

No challenge layer

The same team buying, reporting, and approving — no independent verification step.

Variance reviewed annually

Plan-vs-actual reviewed once a year, when monthly is the minimum standard.

No exception escalation

Delivery anomalies absorbed quietly rather than escalated and remediated.

Agency reports accepted as given

Performance reports accepted from the agency without independent reconciliation.

Ready to discuss a process & controls engagement?

Our partners reply personally to every enquiry — usually within one business day.

Talk to a partner