Arnaud Barosi Partner - Governance, Risk & Internal Control

Arnaud Barosi


  • Internal audit services (outsourcing, co-sourcing, external quality assessment [IIA Standard 1312])
  • Third party assurance reporting: readiness assistance and examination (ISAE 3000 / ISAE 3402 / SSAE 18 [SOC1])
  • Internal governance services (e.g. regulatory gap analysis, suitability of assessment of key function holders [“fit & proper concept”], self-assessment of boards, facilitation of trainings to key function holders, drafting manual of internal governance, drafting of terms of reference, assessment of management information flow)
  • Regulatory advisory services (e.g. regulatory heath-check, regulatory inspection simulation, design remediation plan, policies and procedures drafting)
  • Compliance advisory services (e.g. setup of compliance risk assessment / compliance monitoring plan, assistance to compliance function)
  • Assistance in drafting application files to the Luxembourg regulatory authorities (e.g. banks, investment firms, management companies, AIFMs, specialized PFS, electronic money institutions, payment institutions)
  • Setup and assessment of internal control framework (including mapping of risk and mitigating controls)
  • Oversight and due diligence advisory (e.g. setup of oversight due diligence framework [risk-based approach], due diligence questionnaire, due diligence on-site visit and reporting)
  • Business process optimization (flowcharting)
  • Internal governance operating model & regulatory assessment in M&A transactions


  • Asset Management
  • Banking
  • Real Estate / Private Equity
  • Corporate Trust Entities
  • Electronic Money Institutions, Payment Institutions


  • English
  • French