About the practice
A small audit desk for fintech controls
Security Platforms began as a Taoyuan-based practice helping payment and lending operators prepare evidence that holds up under walkthrough pressure—not as a product company wearing audit language.
Origin
After years inside regulated financial operations in Taiwan, our founding auditor left in-house roles to offer independent reviews that finance committees could commission without buying a long retainer. The early engagements were payment-institution reconciliations and lending override logs—still the core of our fieldwork today.
We keep the practice deliberately small so senior attention stays on each engagement. Associates handle sampling and evidence logging; the engagement lead owns findings language and the draft discussion with management.
Working approach
- Scoping starts with your licence type and the last board risk appetite statement, not a generic checklist.
- Fieldwork mixes remote evidence review with on-site walkthroughs near Taoyuan or Taipei when handoffs need to be seen in person.
- Draft findings are discussed before the final report so management responses are informed, not rushed.
- We decline work that requires us to act as your outsourced compliance officer or to rewrite policies we would later audit.
Values clients feel in the room
Specificity over theatre
Findings name the control, the sample, and the owner. We avoid colour charts that hide weak evidence.
Respect for operators
Process owners keep the business running. Walkthroughs are scheduled with care and documented without spectacle.
Taiwan context first
Engagements are grounded in local supervisory expectations and the practical constraints of licensed fintech firms here.