-
Audit approach overview
Our audit approach will allow our client's accounting personnel to make the maximum contribution to the audit effort without compromising their ongoing responsibilities
-
Annual and short period audit
At P&A Grant Thornton, we provide annual and short period financial statement audit services that go beyond the normal expectations of our clients. We believe strongly that our best work comes from combining outstanding technical expertise, knowledge and ability with exceptional client-focused service.
-
Review engagement
A review involves limited investigation with a narrower scope than an audit, and is undertaken for the purpose of providing limited assurance that the management’s representations are in accordance with identified financial reporting standards. Our professionals recognize that in order to conduct a quality financial statement review, it is important to look beyond the accounting entries to the underlying activities and operations that give rise to them.
-
Other Related Services
We make it a point to keep our clients abreast of the developments and updates relating to the growing complexities in the accounting world. We offer seminars and trainings on audit- and tax-related matters, such as updates on Accounting Standards, new pronouncements and Bureau of Internal Revenue (BIR) issuances, as well as other developments that affect our clients’ businesses.
-
Tax advisory
With our knowledge of tax laws and audit procedures, we help safeguard the substantive and procedural rights of taxpayers and prevent unwarranted assessments.
-
Tax compliance
We aim to minimize the impact of taxation, enabling you to maximize your potential savings and to expand your business.
-
Corporate services
For clients that want to do business in the Philippines, we assist in determining the appropriate and tax-efficient operating business or investment vehicle and structure to address the objectives of the investor, as well as related incorporation issues.
-
Tax education and advocacy
Our advocacy work focuses on clarifying the interpretation of laws and regulations, suggesting measures to increasingly ease tax compliance, and protecting taxpayer’s rights.
-
Business risk services
Our business risk services cover a wide range of solutions that assist you in identifying, addressing and monitoring risks in your business. Such solutions include external quality assessments of your Internal Audit activities' conformance with standards as well as evaluating its readiness for such an external assessment.
-
Business consulting services
Our business consulting services are aimed at addressing concerns in your operations, processes and systems. Using our extensive knowledge of various industries, we can take a close look at your business processes as we create solutions that can help you mitigate risks to meet your objectives, promote efficiency, and beef up controls.
-
Transaction services
Transaction advisory includes all of our services specifically directed at assisting in investment, mergers and acquisitions, and financing transactions between and among businesses, lenders and governments. Such services include, among others, due diligence reviews, project feasibility studies, financial modelling, model audits and valuation.
-
Forensic advisory
Our forensic advisory services include assessing your vulnerability to fraud and identifying fraud risk factors, and recommending practical solutions to eliminate the gaps. We also provide investigative services to detect and quantify fraud and corruption and to trace assets and data that may have been lost in a fraud event.
-
Cyber advisory
Our focus is to help you identify and manage the cyber risks you might be facing within your organization. Our team can provide detailed, actionable insight that incorporates industry best practices and standards to strengthen your cybersecurity position and help you make informed decisions.
-
ProActive Hotline
Providing support in preventing and detecting fraud by creating a safe and secure whistleblowing system to promote integrity and honesty in the organisation.
-
Accounting services
At P&A Grant Thornton, we handle accounting services for several companies from a wide range of industries. Our approach is highly flexible. You may opt to outsource all your accounting functions, or pass on to us choice activities.
-
Staff augmentation services
We offer Staff Augmentation services where our staff, under the direction and supervision of the company’s officers, perform accounting and accounting-related work.
-
Payroll Processing
Payroll processing services are provided by P&A Grant Thornton Outsourcing Inc. More and more companies are beginning to realize the benefits of outsourcing their noncore activities, and the first to be outsourced is usually the payroll function. Payroll is easy to carve out from the rest of the business since it is usually independent of the other activities or functions within the Accounting Department.
-
Our values
Grant Thornton prides itself on being a values-driven organisation and we have more than 38,500 people in over 130 countries who are passionately committed to these values.
-
Global culture
Our people tell us that our global culture is one of the biggest attractions of a career with Grant Thornton.
-
Learning & development
At Grant Thornton we believe learning and development opportunities allow you to perform at your best every day. And when you are at your best, we are the best at serving our clients
-
Global talent mobility
One of the biggest attractions of a career with Grant Thornton is the opportunity to work on cross-border projects all over the world.
-
Diversity
Diversity helps us meet the demands of a changing world. We value the fact that our people come from all walks of life and that this diversity of experience and perspective makes our organisation stronger as a result.
-
In the community
Many Grant Thornton member firms provide a range of inspirational and generous services to the communities they serve.
-
Behind the Numbers: People of P&A Grant Thornton
Discover the inspiring stories of the individuals who make up our vibrant community. From seasoned veterans to fresh faces, the Purple Tribe is a diverse team united by a shared passion.
-
Fresh Graduates
Fresh Graduates
-
Students
Whether you are starting your career as a graduate or school leaver, P&A Grant Thornton can give you a flying start. We are ambitious. Take the fact that we’re the world’s fastest-growing global accountancy organisation. For our people, that means access to a global organisation and the chance to collaborate with more than 40,000 colleagues around the world. And potentially work in different countries and experience other cultures.
-
Experienced hires
P&A Grant Thornton offers something you can't find anywhere else. This is the opportunity to develop your ideas and thinking while having your efforts recognised from day one. We value the skills and knowledge you bring to Grant Thornton as an experienced professional and look forward to supporting you as you grow you career with our organisation.
Breach, breach, brace for impact!
28 Feb 2018(Part 1 of 2)
Lui is a sassy yuppie from Makati who loves to shop. A patron of the high-end stores in Greenbelt, Lui frequently buys stuff using her favorite Bank X Platinum credit card. A ballpark estimate puts her monthly credit card purchases at around P50,000, but Lui religiously pays her credit card balance in full a week before its due date. One day, while she was sipping her latte and swiping through her Bank X mobile app, Lui almost passed out when her latest credit card bill displayed a whopping P200,000! Not a minute later, #BankXHacked trended at No.1 on Twitter.
Lui’s story, although made-up, is a financial horror we could only hope we never experience for real. Given the advancements in information technology, we would think organizations have enough cyber battle gear to combat data breaches. Alas, recent statistics show that data security is, and continues to be, a cause for concern in the digital world.
A data breach study sponsored by IBM in 2017 indicates that the global average cost of a data breach declined by 10 percent to $3.62 million; the average cost per lost or stolen record of sensitive and confidential information in 2017 was $141, down from $158 recorded in 2016. However, the same study showed that, while the total cost and unit cost decreased, the average size of data breach grew by 1.8 percent (to an average of more than 24,000 affected records).
In the Philippines, the Commission on Elections voter database breach that exposed the sensitive personal information of about 78 million voters in 2016 was one of the worst large-scale breaches in recent years. Its occurrence over Holy Week that year underscores one realization: Digital criminals do not rest, even on holidays. And neither should any organization’s data security safeguards.
We live in a world where every entrepreneurial pursuit is driven by data. This is not surprising, given that terms such as “data mining,” “data analytics,” “data analysis,” “data science” and “big data” have become a staple on business tables and in published articles. Businesses now realize that effective decision-making is truly dependent on data that is succinctly analyzed and communicated in a quick, paperless fashion.
High-technology applications enable faster data gathering and processing but, if not properly secured, also pose a far more unsettling risk – data loss. Any piece of information not readily available to the public, such as confidential company information and sensitive personal data, getting into the wrong hands can spell doom for a business or an individual. The endless possibilities of what can be done with stolen personal data are scary.
Thus, in its mission to protect its citizens from harm caused by unauthorized access or use of personal data, the Philippine government put Republic Act No. 10173 into law, also known as the Data Privacy Act of 2012 (DPA).
The DPA’s scope is limited to personal data, which is any type of personal information that, on its own or combined with other information, can reasonably and directly ascertain an individual’s identity. The DPA also emphasizes protecting sensitive personal data, which includes any information about the race, ethnic origin, marital status, age, color, affiliations (religious/philosophical/political), health, education, genetic, or sexual life of a person, and government-issued identifiers (e.g., social security numbers, health records, licenses, and tax returns).
The DPA has been a hot topic this year due to the gone-unnoticed September 2017 Phase I registration target date and the approaching March 8, 2018 deadline for Phase II of the registration process with the National Privacy Commission (NPC). Sections 9 to 11 of NPC Circular 17-01 provide a brief overview of the two phases and their respective requirements, with the designation of a Data Protection Officer (DPO) and the submission of an application for registration being the two high-priority Phase I requirements. Section 47 of the DPA’s Implementing Rules and Regulations (IRR) likewise reiterated that required businesses (identified in Section 5 of NPC Circular 17-01) must submit 10 items to the NPC as part of the Phase II registration. One of the policies required in the IRR related to data governance, data privacy and information security is a reporting policy on how to deal with data breaches.
Breach or not?
The IRR emphasizes two terms related to breach reporting: security incident and personal data breach. A security incident is an event that affects or tends to affect data protection, or may compromise the availability, integrity, and confidentiality of personal data. When there are no measures in place (or the measures in place are inadequate) to prevent or mitigate a security incident, the risk of harm rises and the security incident may result in one, or a combination of, the following types of personal data breaches:
Availability breach – loss, accidental, or unlawful destruction of personal data; Integrity breach – alteration of or unauthorized changes to personal data; and Confidentiality breach – unauthorized disclosure of or access to personal data.
Now that Bank X has confirmed the breach of the personal data of millions of its credit cardholders, what must it do to comply with the DPA requirements for reporting an actual breach? Whom should Bank X notify about the actual breach, and how?
(Part 2 next week)
Mark Anthony Basa is a managing consultant, Advisory Services Division of P&A Grant Thornton. P&A Grant Thornton is one of the leading Audit, Tax, Advisory, and Outsourcing firms in the Philippines, with 21 partners and over 850 staff members. We’d like to hear from you! Tweet us: @PAGrantThornton, like us on Facebook: P&A Grant Thornton, and email your comments to mark.basa@ph.gt.com or pagrantthornton.marketscomm@ph.gt.com. For more information, visit our Website: www.grantthornton.com.ph.
As published in The Manila Times, dated 28 February 2018