GRC
Governance, Risk & Compliance
Frameworks that protect the business — not just tick regulatory boxes.
Graham holds GRCP and GRCA certifications from OCEG — the global standard-setter for integrated governance, risk, and compliance. This is not a side interest; it is a core discipline that shapes how every client engagement is structured.
For SMEs, governance is often treated as something large corporates do. We disagree. The businesses most exposed to governance failures are the ones that think they're too small to need it — until an ATO audit, a director liability claim, or a key person departure forces the issue.
Our GRC work is practical: risk registers that are actually reviewed, compliance calendars that are actually followed, and governance structures that make the business more resilient — not more bureaucratic.
What we deliver
- Governance framework design for SMEs and family businesses
- Risk registers with practical mitigation strategies
- Compliance calendar management (ATO, ASIC, APRA, state regulators)
- Director and officer liability reviews
- Internal control assessments and improvement plans
- Regulatory change monitoring and impact analysis
- Cybersecurity governance and risk assessment
- Board reporting and governance documentation
Who this is for
- SME owners wanting to de-risk without adding bureaucracy
- Businesses in regulated industries (financial services, property, health)
- Companies preparing for investment, sale, or audit
- Boards needing structured governance reporting
Related insights
Browse allBank Covenants & Liquidity | FCPA Principal Analysis
Graham Chee, FCPA, explains why bank covenant compliance masks balance sheet fragility for Australian mid-market boards. Principal-led strategic advisory.
NSW Payroll Tax Grouping | FCPA Strategic Guide Sydney
Local Knowledge — Sydney accountants. Graham Chee, FCPA, details NSW payroll tax grouping rules, threshold risks.
Acquiring Shell Entities: FCPA Regulatory Arbitrage Guide
Graham Chee, FCPA, details strategic shell company acquisitions for scale-up market entry, ASIC compliance, and regulatory arbitrage. Read the playbook.
AASB 15 SaaS Deferred Revenue: FCPA Compliance Guide
FCPA-signed guidance on unearned revenue pitfalls: SaaS deferred income under AASB 15. Audit contract liabilities and prevent ATO tax traps for scale-ups.
De-Risking Business Structures | FCPA Advisory Australia
Graham Chee, FCPA, explains how to de-risk mature Australian business structures. Expert, principal-led corporate governance advisory. Speak with our principal.
Part IVA Restructure Risks: Holding Co Tax Advisory | FCPA
FCPA-signed guidance on Part IVA anti-avoidance risks when interposing holding companies. Understand Section 177D dominant purpose tests and secure compliance.
BAS & GST Compliance Routine | FCPA Sydney Bookkeeping
Local Knowledge — Sydney accountants. Graham Chee, FCPA, outlines a systematised monthly BAS and GST compliance routine for Australian SMEs.
Part IVA Earnout Risks in Tech Deals | FCPA Tax Review
Principal-led analysis of ato part iva anti-avoidance risks in tech earnouts. Distinguish capital gains from disguised salary under strict ATO scrutiny.
Section 100A ATO Audit Defence: FCPA Trust Tax Guide
Graham Chee, FCPA, explains Section 100A trust reimbursement agreements, TR 2022/4 compliance, and APES 320 audit defence for Australian family SMEs.
Agentic AI Invoicing: APES 305 Risk Guide | FCPA Analysis
Graham Chee, FCPA, explains agentic AI in SME invoicing, evaluating APES 305 engagement scope, automated contract execution, and CPA governance frameworks.
AI Algorithmic Pricing: ACCC Cartel Risks | FCPA Advisory
Principal-led analysis of automated dynamic pricing systems, mapping ACCC cartel conduct risks under the Competition and Consumer Act 2010 for Australian SMEs.
ASIC s180 AI Director Liability | FCPA Board Governance
FCPA-signed guidance on autonomous AI agents in finance: dissecting ASIC s180 director exposure, algorithmic delegation risks, and board oversight controls.