-
Business Consulting
Our Consulting team guarantees quick turnarounds, lower partner-to-staff ratio than most and superior results delivered on a range of services.
-
Business Risk Services
Our Business Risk Services team deliver practical and pragmatic solutions that support clients in growing and protecting the inherent value of their businesses.
-
Corporate Finance
Our experienced Corporate Finance team has provided a range of transaction, valuation, deal advisory and restructuring services to clients for the past two decades.
-
Digital Risk
Our Digital Risk team offer advisory and consulting solutions that give our clients peace of mind, clear value for money and an enhanced ability to react to cyber attacks.
-
Digital Transformation
Our Digital Transformation team work with business leaders to deliver efficient digital strategies and operating models that provide new or enhanced capabilities.
-
Forensic and Investigation Services
Our Forensic and Investigation Services team have targeted solutions to solve difficult challenges - making the difference between finding the truth or being left in the dark.
-
Objectives and Key Results (OKRs)
Objectives and Key Results (OKRs) is a goal setting framework that helps teams, individuals and organisations set and track measurable goals.
-
People and Change Consulting
Our People & Change Consulting team help clients adapt to the changing nature of the workforce - how they attract, retain, engage, develop, deploy and lead their people.
-
Restructuring
Grant Thornton is Ireland’s leading provider of insolvency and corporate recovery solutions.
-
Outsourced Payroll
Our outsourced payroll teams become your dedicated payroll department, aiming to process your payroll in the most cost effective and compliant manner.
-
Outsourcing
Grant Thornton's reliable and cost-effective outsourcing services help you streamline your business operations by taking care of your workload.
-
Audit and Accounting Advisory
Our Audit and Accounting Advisory team takes the headache out of multi-jurisdictional audit compliance requirements as well as technical compliance with accounting standards and legislation for clients.
-
Business Process Outsourcing
Grant Thornton’s Business Process Outsourcing (BPO) team serves the needs of rapidly growing mid-tier multinationals operating out of Ireland and other hubs through the provision of services across the full range of finance functions.
-
Flexible People Solutions
At Grant Thornton, our Financial Accounting and Advisory Services (FAAS) department have a dedicated team that help finance functions maximise efficiency.
-
Global Compliance & Reporting Solutions
Our Global Compliance & Reporting Solutions service offering covers a full suite of compliance services including financial statement preparation and related filings, dual bookkeeping, direct and indirect tax, statistical returns and payroll.
-
Global Payroll Solutions
At Grant Thornton, we meet the challenges of our clients. Our Global payroll compliance service offering is tailored to meet all your payroll requirements through a single point of contact.
-
Grant Thornton Financial Counselling
Grant Thornton Financial Counselling (GTFC) comprises a team of highly qualified professionals who offer financial advice to individuals and corporates across a range of areas including savings, investments, pension planning, and inheritance and succession planning.
-
Inheritance Planning
Our services on Inheritance Planning mirror those on Succession Planning whereby the foundations of the plan are derived from meaningful conversations with those that wish to pass on or protect their asset base.
-
Personal Tax Compliance & Planning
The Grant Thornton Personal Tax team helps clients remain compliant and up to date with all of their tax obligations whilst ensuring that they are solutions driven and manage their finances in the most tax efficient way possible.
-
Succession Planning
We have extensive experience guiding our clients successfully through the succession process. This involves advice on both the qualitative and quantitative aspects of the process. While there is a business at the core of each succession plan we advise on, it is all predicated on understanding the people and their respective wishes.
-
Company Secretarial
Grant Thornton’s Company Secretarial team contains qualified Company Secretaries. Clients are assured that they will meet all of their obligations under the Companies Acts and other relevant legislation and regulations.
-
Corporation Tax
Our Corporation Tax team is made up of more than 40 highly experienced senior partners and directors who work directly with a wide range of domestic, international, and financial services clients. We place a strong emphasis on direct service to clients and we pride ourselves on the close personal relationships we build and the deep understanding of their businesses we develop
-
Employer Solutions
Attracting and retaining key talent, managing employment costs and ensuring compliance with complex tax rules presents one of the most serious challenges today for many businesses. You need to ensure that your business complies with increasingly complex tax legislation and can adapt to updated Revenue guidance in a cost-effective way and we are here to help.
-
Financial Services Tax
The Grant Thornton team is made up of experts who are fully up to date in terms of changing and evolving tax legislation. This is combined with industry expertise and an in-depth knowledge of the evolving financial services regulatory landscape.
-
Global Mobility Services
Grant Thornton Ireland offer a different approach to managing global mobility. We have brought together specialists from our tax, global payroll, people and change and financial accounting teams across Ireland and Northern Ireland, while drawing on the knowledge and insights of our global network of over 143 offices of mobility professionals to provide you with a holistic approach to managing global mobility.
-
International Tax
We develop close relationships with clients in order to gain a deep understanding of their businesses to ensure they make the right operational decisions. The wrong decision on how a company sells into a new market or establishes a new subsidiary can have major tax implications.
-
Tax Advisory
The Grant Thornton Tax Advisory team blends commercial experience and knowledge with tax expertise to advise clients on the full range of transactions including sales, mergers, restructurings and succession planning.
-
Tax Incentives
Our Tax Incentives team help clients access vital cash funding and tax incentives to enable them to achieve their growth ambition.
-
VAT
Grant Thornton’s team of indirect tax specialists helps a range of clients across a variety of sectors including pharmaceuticals, financial services, construction and property and food to navigate these complexities.
-
Real Estate Tax Advisory
The Irish real estate market has experienced considerable change in recent years. This has resulted in the emergence of a number of challenges for investors, but has also brought about significant opportunities. With this in mind, taxation is now more than ever one of the key factors for real estate investors when appraising investments, financing methods and development structuring.

Subscribe to our mailing list
Update your subscriptions for Grant Thornton publications and events.
When you have a dependence on third parties, you need a dedicated approach to third-party risk management (TPRM). TPRM programs manage the risks that can be introduced through third-party relationships, including brand and reputation risks through data leaks, disruptions to customer service, supply chain risks and even financial fraud. When your service provider uses downstream entities for extended service and support, you also need to consider the risks from a fourth party (a subcontractor to your third party).
The realities of third-party risks are important in the boardroom. The board’s oversight of the risk function is important to making sure all bases of the risk profile are covered. That’s especially true for private companies, where risks might be greater due to less regulatory mandated oversight.
How can you find the capacity and skills for additional TPRM when you form a significant new third-party relationship?
Internal audit (IA) can play a critical role in responding to this risk environment, and IA is keenly aware of third-party risk. In a recent survey from the Institute for Internal Auditors, third-party risk was identified as one of the top three areas of concern. The internal audit team brings an independent perspective to process, risks and controls, along with experience in reporting to senior leadership, all of which can be key to designing your TPRM program.
Trends in TPRM
As you launch or improve your TPRM program, consider starting with an awareness of market trends. Some of the current trends include:
IA in evaluating TPRM readiness
Internal audit can help you provide a TPRM readiness assessment, which typically includes three phases:
- Planning and initiation:
IA can help evaluate the effectiveness of a TPRM program by selecting a framework that provides a comprehensive view of the TPRM program lifecycle and in defining the in-scope operating environment. - TPRM program assessment:
IA can help assess the governance and operating model, including TPRM program lifecycle to evaluate controls and to identify process gaps and opportunities for improvement. - Reporting:
IA can help prioritize any remediation needs with key stakeholders, develop a comprehensive program assessment and compile a report for board and executive leadership.
IA in assessing TPRM frameworks
There are essentially three TPRM program governance models to consider for your organization: centralized, federated, and de-centralized. The internal audit team can help determine which will work best in the structure of your organization, as each model comes with its own unique benefits and challenges to weigh.
Since internal auditors are independent and objective, they are often called upon to wear a consultant hat instead of an auditor hat. Their risk-based perspective can help determine the maturity level of the existing third-party risk management process, and what governance model and operating framework is the most appropriate. Their knowledge can help determine the appropriate controls for each relationship. IA knows the right questions to help ensure your organization gets the information it needs to select, monitor and manage third-party relationships.
For example, if a third party has access to the company’s data, you might need to ask:
- Is there a defined data classification policy? Does the policy clearly define how certain classes of data should be secured?
- Does the third party have privileged access or elevated privileges? If so, does it log and perform reviews of the activities it performs?
- Does the third party always have carte blanche access, or does it use a limited portal or channel?
- Is the third party being monitored by your organization?
IA can also ask important questions in each phase of the TPRM program. For instance, in contracts and negotiation, IA can make sure you include a “right to audit” clause so that your organization can perform its own investigation if necessary. It’s also important to assess how the third party might be able to grow with your organization in the future.
IA in every phase of TPRM program lifecycle
A TPRM program lifecycle is designed to maximize the business goals while minimizing the risks that arise from external relationships. The goals of the program should be to increase awareness of third-party management roles and responsibilities; establish coordination of third-party relationships; provide a clear understanding of risk; and deliver standardized risk classification and rating levels. The program lifecycle comprises four phases, and IA can play an important role in each one:
- Profiling and selection (due diligence):
IA can evaluate the profiling and selection process, along with adoption and consistency. IA can also assess the risk assessment process, including risk acceptance and exception. The exception process should depend on the risk level of the third party or vendor, require approval from designated authorities and identify compensating controls. - Contract negotiation:
IA can evaluate the entry criteria before a contract is negotiated, to determine if it was evaluated using appropriate mechanisms. A third party or vendor should only be on-boarded after the contractual obligations are met — or for exceptions, after risk mitigation strategies are in place to ensure compensating controls are implemented in a timely manner. - Managing and monitoring:
IA can review guiding principles for risk assessment and monitoring review frequency. These should be based on the nature of service provided and the risk exposure that the company faces when contracting with the third party or vendor. - Termination/off-boarding:
IA can review the process for off-boarding to ensure there is a comprehensive checklist, and appropriate controls and communications in situ.
Outlined below is a typical TPRM program framework, illustrating the business drivers, risk areas and program components over the four phases of the TPRM program lifecycle:
Third party risk management program framework
Third-party services can often help lower costs, improve efficiency, add skills, boost capacity and offer other benefits, but those benefits come with risks that should be managed.
That’s why it’s essential to have a comprehensive and well-designed TPRM program to provide ongoing control monitoring and risk oversight. Internal audit is a valuable partner in addressing these risks, from evaluating the TPRM program governance model to assessing the process, risks and controls through the TPRM program lifecycle. All of this work plays an important role in managing the risks that arise from third party relationships.