GRC
Governance, Risk & Compliance
Frameworks that protect the business — not just tick regulatory boxes.
Graham holds GRCP and GRCA certifications from OCEG — the global standard-setter for integrated governance, risk, and compliance. This is not a side interest; it is a core discipline that shapes how every client engagement is structured.
For SMEs, governance is often treated as something large corporates do. We disagree. The businesses most exposed to governance failures are the ones that think they're too small to need it — until an ATO audit, a director liability claim, or a key person departure forces the issue.
Our GRC work is practical: risk registers that are actually reviewed, compliance calendars that are actually followed, and governance structures that make the business more resilient — not more bureaucratic.
What we deliver
- Governance framework design for SMEs and family businesses
- Risk registers with practical mitigation strategies
- Compliance calendar management (ATO, ASIC, APRA, state regulators)
- Director and officer liability reviews
- Internal control assessments and improvement plans
- Regulatory change monitoring and impact analysis
- Cybersecurity governance and risk assessment
- Board reporting and governance documentation
Who this is for
- SME owners wanting to de-risk without adding bureaucracy
- Businesses in regulated industries (financial services, property, health)
- Companies preparing for investment, sale, or audit
- Boards needing structured governance reporting
Related insights
Browse allAASB 15 SaaS Deferred Revenue: FCPA Compliance Guide
FCPA-signed guidance on unearned revenue pitfalls: SaaS deferred income under AASB 15. Audit contract liabilities and prevent ATO tax traps for scale-ups.
De-Risking Business Structures | FCPA Advisory Australia
Graham Chee, FCPA, explains how to de-risk mature Australian business structures. Expert, principal-led corporate governance advisory. Speak with our principal.
Part IVA Restructure Risks: Holding Co Tax Advisory | FCPA
FCPA-signed guidance on Part IVA anti-avoidance risks when interposing holding companies. Understand Section 177D dominant purpose tests and secure compliance.
BAS & GST Compliance Routine | FCPA Sydney Bookkeeping
Local Knowledge — Sydney accountants. Graham Chee, FCPA, outlines a systematised monthly BAS and GST compliance routine for Australian SMEs.
Part IVA Earnout Risks in Tech Deals | FCPA Tax Review
Principal-led analysis of ato part iva anti-avoidance risks in tech earnouts. Distinguish capital gains from disguised salary under strict ATO scrutiny.
Section 100A ATO Audit Defence: FCPA Trust Tax Guide
Graham Chee, FCPA, explains Section 100A trust reimbursement agreements, TR 2022/4 compliance, and APES 320 audit defence for Australian family SMEs.
Agentic AI Invoicing: APES 305 Risk Guide | FCPA Analysis
Graham Chee, FCPA, explains agentic AI in SME invoicing, evaluating APES 305 engagement scope, automated contract execution, and CPA governance frameworks.
AI Algorithmic Pricing: ACCC Cartel Risks | FCPA Advisory
Principal-led analysis of automated dynamic pricing systems, mapping ACCC cartel conduct risks under the Competition and Consumer Act 2010 for Australian SMEs.
ASIC s180 AI Director Liability | FCPA Board Governance
FCPA-signed guidance on autonomous AI agents in finance: dissecting ASIC s180 director exposure, algorithmic delegation risks, and board oversight controls.
Deepfake CFO Fraud in Australia: APES 110 Controls | FCPA
FCPA-signed guidance on mitigating deepfake CFO fraud in Australia. Learn how APES 110 professional duties and dual-authorisation controls protect NSW mid-marke
Deepfake CFO Fraud & APES 110 Risk | FCPA Sydney Guide
Principal-led analysis of deepfake CFO fraud, ASIC director duties, and APES 110 treasury controls to protect Sydney SMEs from synthetic payment approval scams.
Developer Recoupment Risk Sydney | FCPA Commercial Strata Advisory
Local Knowledge — Sydney accountants. Graham Chee, FCPA, explains mitigating developer recoupment risk in Sydney off-the-plan commercial strata.