Controls Lab
Internal controls audits for fintech teams, treated as operating craft
This page gathers how we frame the work — not as a generic compliance course, but as a lab for payment, lending, and wallet stacks.
What “good” looks like here
A fintech control environment that auditors can navigate: named owners, evidence that matches the system of record, and honest limitations written before fieldwork — not after an awkward silence.
We focus on recurring friction points: multi-rail payments, rapid vendor swaps, shared services across Korean entities, and product releases that outpace policy updates.
Lab rhythms
-
Inventory sprints
Compress sprawling control lists into a testable set tied to material flows.
-
Sample design clinics
Define populations, exclusions, and documentation that survive methodology challenges.
-
Walkthrough theatre (with stakes)
Timed rehearsals where facilitators push on exceptions and compensating controls.