Professional Services

69 regulations apply to this sector.

Written for this sector

FCPAFCPA applies broadly to US companies and persons engaging in foreign business dealings ISAE 3000Assurance engagements performed by auditors and professional service firms ISAE 3402Assurance standard for service organizations used by auditors and advisors ISO 19011Audit management standard used by auditors and management system consultants ISO 30414HR reporting standard applies broadly to organisations with formal HR functions ISO 31000Generic risk management framework adopted across all industries ISO 31010Risk assessment techniques standard used by risk practitioners across sectors ISO 37000Governance of organisations standard applies to boards and leadership broadly ISO 37001Anti-bribery management standard applies to any organisation managing corruption risk ISO 37301Compliance management systems standard applies broadly to all organisations MSPMSP programme management framework used by project and change management professionals.P3M3 v3Maturity model directly used by project/programme management professionals.PMBOKPMBOK is the standard reference guide for project management professionals globally.UK Bribery ActLaw, accounting, consulting firms must have anti-bribery procedures.

Also applies

AML REG PACKAGELawyers, accountants, and notaries are obliged entities under AML rules AMLAObliged entities in professional services subject to AMLA framework AMLD6Legal and accounting professionals face extended liability under AMLD6 BE Companies AssocLegal and accounting professionals advise on Belgian companies code compliance BE UBO AMLLawyers, accountants subject to UBO/AML compliance obligations.BE WhistleblowingPrivate companies above threshold must implement whistleblowing procedures.Belgian AML LawAccountants, lawyers, notaries are obliged entities under AML.Belgian Law 18/09/2017Legal and accounting professionals are obliged entities.CBE-KBOAll registered Belgian businesses including professional firms must enroll.CMMCProfessional service firms supporting DoD contracts must be CMMC certified CMMI DEVIT professional services firms pursue CMMI certification for quality assurance COSO 2013Audit and accounting firms apply COSO for internal control assessments COSO ERMRisk and audit professionals apply COSO ERM in client engagements CSDDDLarge professional services firms fall within CSDDD company size thresholds.DMBOK ExtensionConsultancies use extensions to specialise DMBOK client delivery DMBOK v2Consultancies apply DMBOK frameworks in client engagements EU IPRLegal and consulting firms advise on and comply with IPR frameworks.EU SanctionsLaw and consulting firms must not provide services to sanctioned parties.EU Sanctions FrameworkProfessional advisors must avoid facilitating sanctions violations.European Market Infrastructure RegulationFund managers and investment advisers must comply with EMIR on behalf of clients.FAIRRisk consultants apply FAIR methodology across client engagements FATF LATAMDNFBPs including lawyers and accountants covered under LATAM FATF implementation FATF StandardsLawyers, accountants and notaries are designated non-financial businesses under FATF Federal Information Security Modernization ActContractors and consultants serving federal agencies must meet FISMA requirements.GDPRProfessional firms handle client personal data subject to GDPR requirements.GLBAFinancial advisers and brokers subject to GLBA safeguards and privacy rules.Health Insurance Portability and Accountability ActLegal, billing, and consulting firms handling PHI are HIPAA business associates.IFRSAccounting and professional service firms implement IFRS for clients.IFRS S1Professional services firms support IFRS S1 implementation and reporting.IIA StandardsAudit professionals implement and advise on IIA Standards.Impact PrinciplesAdvisers supporting impact fund management apply these principles.IOSCO ORFinancial service providers implement IOSCO operational risk standards.ISO 10002Service firms implement ISO 10002 to manage client feedback and complaints ISO 27001Consulting and legal firms adopt ISO 27001 to protect client data assets.ISO 27002Service firms implement ISO 27002 controls to meet client security requirements.ISO 27005Consulting and advisory firms implement it for clients ISO 27014Professional firms adopt it to structure security governance frameworks ISO 27034IT consultancies implement it during software development projects ISO 27037Forensic consulting firms apply it as professional practice standard ISO 27050Legal and forensic firms implement it as eDiscovery practice standard ISO 56002Consultancies and professional firms apply innovation governance principles ISO 9001Service firms use ISO 9001 to demonstrate quality management capability.NBB Governance Manual 2022Governance requirements apply to compliance and audit professional functions.NYDFS TPSPThird-party service providers to DFS entities must meet standards OFACLaw and consulting firms must screen clients against OFAC lists OFAC SanctionsProfessional firms must conduct sanctions due diligence PRINCE2Consultancies and project management firms apply PRINCE2 broadly.PRINCE2 AgileConsultancies offering agile project management use this framework.Reg S AMLLegal and compliance advisers support Reg S AML program implementation.SAFe 6.0Consulting and delivery firms adopt SAFe for enterprise agile transformation Sanctions and Anti-Money Laundering Act 2018Legal and professional firms subject to sanctions compliance duties.Scrum 2020Agile consultancies and delivery teams widely apply Scrum SFDRFinancial advisers providing investment advice subject to SFDR obligations.UN Convention against CorruptionLegal and accounting professionals involved in anti-corruption compliance.UN Principles for Responsible InvestmentInvestment consultants and advisers support PRI-aligned strategies.

TRIZ for Professional Services

Worked contradictions and resolutions for this sector.