ARNAIZ B&C
← Back to Home

Arnaiz Intelligence

Assess, investigate and institutionalize through professional judgment.

Arnaiz Intelligence integrates methodology, forensic data analysis and technology to understand exposure, prioritize action, and turn findings into traceable, sustained management.

Technology organizes, connects and accelerates; professional judgment governs.Assessment and prioritization · Forensic analysis · Institutionalization · Alerts and integrity

Assessment and prioritization · Proprietary multi-company SaaS

ARNAIZ RISK-360™

Comprehensive Risk Assessment

Structures comprehensive risk and internal-control assessments to turn dispersed exposure into reviewed findings, priorities and a traceable course of action.

A multi-company platform for structuring comprehensive risk and internal-control assessments. Its deterministic methodology selects the relevant items from a universe of more than 650 according to industry, company profile and applicable processes; it incorporates a predesigned process architecture benchmarked against the APQC framework, together with frameworks for risk, internal control, compliance, governance and fraud prevention. It converts responses and traceable evidence into findings, priorities, professional recommendations and 30/60/90-day action plans.

Problem addressed

Organizations that need to understand where to begin, establish their current position, organize exposure, assess control maturity and prioritize a course of action.

What the client obtains

A structured assessment, reviewed findings, priorities, professional recommendations and a traceable action plan.

View ARNAIZ RISK-360™ scope, frameworks and limitations

Operational capabilities

  • Manage multiple companies and users with strict client-level information isolation.
  • Define company profile, industry, applicable processes, risks, exposure and assessment scope.
  • Capture responses with evidence, provenance, traceability and version control.
  • Generate findings, priorities, professional recommendations and 30/60/90-day action plans.
  • Export results to Word, PDF and Excel and preserve historical snapshots of each assessment.

Methodological framework

  • Core framework: COSO 2013 Internal Control.
  • Complementary references: ISO 31000:2018 for risk management, internal audit, fraud-risk prevention and detection, compliance, corporate governance, and process architecture benchmarked against APQC.
  • Mexico, depending on scope and sector: SAT, IMSS, INFONAVIT, STPS, the Financial Intelligence Unit (UIF), LFPIORPI and anti-money-laundering requirements, personal-data protection, anti-corruption, and tax and labor risk; the National Banking and Securities Commission (CNBV) and the financial-services consumer protection authority (Condusef) where applicable.
  • Sector adaptation, as applicable: transport, manufacturing, commerce, construction, services, agribusiness, financial services, hospitality and related activities.

Explicit limitations

  • The technology solutions used or integrated by Arnaiz B&C support different functions; they do not replace professional judgment or review and do not automatically certify compliance.
  • Each ARNAIZ RISK-360™ assessment selects only the items relevant to the organization and defined scope.
  • Assessment items, weightings, algorithms and proprietary methodology are not disclosed.

Digital and data forensics · Proprietary system

A-FIS™

Arnaiz Forensic Intelligence System examines financial, operational and documentary information to identify inconsistencies, anomalous patterns, relationships and signals requiring investigation.

What it analyzes

Large volumes of transactions, documents, records and communications within the authorized scope.

What it helps identify

Inconsistencies, relationships, temporal breaks and potential fraud-risk signals that require corroboration.

How it supports review

Preserves integrity, provenance and traceability so results can be reviewed and reproduced.

View public capabilities and applications

Public capabilities

  • Chain of custody, integrity, traceability and reproducible results.
  • Nigrini/Benford analysis and Beneish, Altman Z'' and Dechow F scores.
  • ISA 240, networks and relationships, operating cycles, text/NLP, temporal breaks and normalized scoring.

Applications

  • Payroll, fuel, suppliers and spare parts.
  • Email, invoices, Mexican tax identifiers and CFDI records, SAT 69-B listings and keyword analysis.
  • Traceable support for human and expert review.

Professional limitation

An anomaly or signal is not evidence of fraud by itself. The conclusion depends on qualified evidence, context and professional review.

Institutionalization · Strategic Technology Partner

SoftExpert

An integrated enterprise platform from Brazil for institutionalizing processes, documents, risks, audits, indicators, projects and action plans.

SoftExpert centralizes processes, documents and risks in one platform. Its business process management (BPM) capabilities support process modeling and standardization, forms, business rules and workflow automation. Combined with governance, risk and compliance (GRC), document management, performance management, projects, a Project Management Office (PMO) and strategic planning, it helps move fragmented activities into traceable, sustained operations.

What it institutionalizes

BPM processes and workflows; risks and controls; audits and compliance; documents; indicators; projects, portfolios and plans.

What changes in management

It standardizes activities, automates workflows, assigns accountability and enables verifiable tracking of objectives, controls and initiatives.

Role of Arnaiz B&C

Arnaiz B&C represents and supports the solution in Mexico, from diagnosis and scope design through configuration, implementation, adoption and improvement.

SoftExpert is headquartered in Brazil. Arnaiz B&C connects the platform with each organization’s operations, objectives, accountability, controls and indicators.

Discuss implementation with Arnaiz B&C

Alerts and integrity · Specialized third-party platform

KomuniK™

An independent, web-based whistleblowing and alert channel for employees, suppliers, customers and the community.

It supports anonymous and confidential reports, supporting-file intake and case tracking. Its 24/7/365 availability helps alerts enter the integrity and compliance system in an orderly, documented manner.

What it receives

Reports, context and supporting files provided by the person raising the alert.

What it preserves

Confidentiality, documentation and continuity of case tracking within the defined channel.

What it enables

A formal path to assess the alert, define accountability and agree on the appropriate response.

KomuniK™ receives and documents the alert. Assessment, investigation and response remain governed by the organization’s protocol and, where appropriate, professional intervention.

Governance and limitations

Technology with review, traceability and defined limitations.

Cross-cutting principles

The technology solutions used or integrated by Arnaiz B&C support different functions. They do not replace professional judgment or review, and a signal or anomaly does not automatically become an accusation.

Each ARNAIZ RISK-360™ assessment selects only the relevant items. Assessment items, weightings, algorithms and proprietary methodology are not disclosed.

Engagement-level governance

Scope defines sources, accountability, access, versions, reproducibility, retention, closure and use limitations according to the nature of each matter.

Human review governs every finding, recommendation and conclusion.

Confidential assessment

What do you need to assess, investigate or institutionalize?

Let us discuss the need, intended outcome and appropriate entry point before sensitive information is received.

Tell us what you need to resolve.