Thames Kay Consultancy LLCWhat we deliver, across four pillars.
Governance & AI assurance, corporate finance & transactions, transformation, and managed operations — one accountable partner.
Govern & Assure
Controls a board can publicly defend — not just claim.
AI Governance
Clear rules for how your organisation uses AI — and a named owner for every decision. We design governance that survives a regulator's questions, not just a steering-committee slide.
- AI governance charter
- ISO/IEC 42001 AIMS design
- Board oversight framework
Corporate Governance
Controls a board can publicly defend — not just claim.
- Board and committee structure
- Governance charters
- SCA Governance Code alignment
AI Risk & Compliance
AI risk assessment and compliance mapping built for the GCC: CBUAE, DIFC Regulation 10, ADGM, UAE PDPL and the EU AI Act, reconciled into one register your audit committee can read.
- AI risk assessment (NIST AI RMF)
- Compliance obligation matrix
- EU AI Act risk tiering
Internal Controls (ICoFR)
The SCA's circular on internal control ends the trial phase on 31 December 2026 — from 2027, the auditor's opinion on your controls is public.
- Key control identification
- Control design & operating effectiveness testing
- Deficiency remediation
AI Audit & Assurance
We test AI systems the way auditors test controls — independently, against defined criteria, with evidence — and report what we find in language an audit committee can act on.
- AI audit programme
- Bias & fairness test results
- Explainability assessment
Enterprise Risk Management
A risk register is not risk management — appetite, ownership and response make it real.
- Risk appetite statement
- Risk identification workshops
- Risk-to-control mapping
AI Security & Resilience
AI-specific security controls mapped to ISO 27001, incident playbooks for model failures, and continuity planning that assumes the model will eventually be wrong, poisoned or unavailable.
- AI security control set
- Adversarial risk assessment
- AI incident response playbook
Internal Audit & EQA
Internal audit programme design, co-sourced fieldwork delivery, and External Quality Assessment (EQA) — anchored in decades of Big Four and group-level audit leadership at the region's leading financial centre.
- Internal audit charter
- Risk-based audit plan
- Co-sourced fieldwork delivery
IT Audit & System Controls
Access, change and data controls decide whether any reported number can be trusted.
- Access control review
- Change management testing
- Backup & recovery testing
Continuity & Crisis
Continuity is tested on the worst day — the plan has to exist, work and be rehearsed before it.
- Business impact analysis
- Recovery plans
- Crisis leadership and decision structure
AI Consultancy
Ready-check, high-payback use cases, and safe pilots aligned to ISO/IEC 42001.
- AI readiness assessment
- Use-case discovery and prioritisation
- Safe pilot design and delivery
Virtual Chief AI Officer
A part-time senior AI owner on retainer, aligned to ISO/IEC 42001 and DIFC Regulation 10.
- Ongoing AI strategy and oversight
- Board and committee reporting on AI
- Regulatory monitoring and escalation
Finance & Transactions
Money moves when the numbers are believable.
Capital Raising & Banking
We build the model, the pack and the negotiating position before you face a single lender or investor.
- Investor-grade financial model
- Funding pack
- Capital structure advice
M&A & Corporate Development
Deal value is protected in diligence and delivered in integration — we stay for both.
- Deal strategy
- Due diligence
- Deal structuring
Restructuring & Turnaround
We stabilise cash first, then face the banks with one credible plan — led by a principal who has negotiated from both sides of the table.
- Cash control
- Bank negotiation plan
- Debt renegotiation
Tax Advisory & Compliance
The UAE corporate tax regime is new — structures that made sense in 2022 may now cost you money.
- Corporate tax structuring
- Free-zone & qualifying-income analysis
- Cross-border tax advisory
Treasury & CFO Advisory
Covenants, cash and the banking relationships — watched by a principal who has sat inside bank credit committees.
- Cash flow visibility
- Covenant monitoring
- Board-quality reporting
Fund Administration
NAV, investor statements and filings — run to the standard DFSA and ADGM expect.
- Fund bookkeeping
- NAV calculation
- Investor reporting
Transform & Digitize
Change that ships — with the checks built in from day one.
Business Transformation
Programmes fail in design, not delivery — we build the controls in before go-live, not after the audit.
- Target operating model
- Controls-by-design
- Stage-gate checkpoints
Process Re-Engineering & PMO
Enterprise-wide process redesign, and a PMO that keeps delivery honest.
- Process mapping
- Process redesign
- PMO setup
ERP & Finance Systems
IFRS 18 applies from January 2027 — reconfiguring during a live close is the expensive way to meet it.
- IFRS 18 readiness assessment
- Chart of accounts redesign
- ERP reconfiguration
Automation & E-Invoicing
Readiness is a project you schedule, not a scramble — automation first where volume and error rates are highest.
- Automation opportunity assessment
- Process automation
- E-invoicing readiness
Data & Analytics
When every department reports different numbers, leadership is choosing between versions of the truth.
- KPI definition
- Board & leadership dashboards
- Data cleansing
Cybersecurity
Defence measured against recognised standards, ranked by what an attacker would try first.
- Security posture assessment
- Standards benchmarking
- Ranked remediation plan
Finance Process Improvement
Finance-function processes — invoicing, collections, approvals — mapped, tightened and reported.
- Process mapping
- Approval workflow redesign
- Delegation of authority
Operate & Scale
Run clean, close on time, keep the record defensible.
Managed Accounting & Reporting
Clean books are cheap. Cleaning up three years of them during a funding round is not.
- Bookkeeping
- Monthly close
- IFRS-compliant reporting
CFO Support Services
Senior finance leadership sized to your stage — a named principal, not a bench.
- Fractional CFO
- Budgets & forecasts
- Board & investor reporting
VAT & Regulatory Filings
Registrations, returns and reconciliations run as a calendar-driven managed service — every deadline owned.
- VAT registration
- Return filing
- Reconciliation
HR & Emiratization
Policies, records and resourcing support that keep the people side audit-ready.
- HR policy design
- Recruitment & resourcing support
- Pay & retention design
Real Estate & Construction
Contract gaps and unverified progress claims are where builds lose their budgets.
- Cost monitoring
- Contract review
- Progress claim verification
ESG & Sustainability
Disclosure expectations are converging on the ISSB standards — ESG claims that can't be evidenced are a liability.
- ESG strategy
- ESG measurement
- Sustainability reporting
The engagement model.
Fixed-scope first engagements or retainer arrangements — whichever fits your board and audit committee's risk appetite.
Book a consultation