Governance for private and family companies
Decision rights, delegation of authority, board and committee structure, and the accountability mechanisms that only matter once something goes wrong. Half day.
Related: governance advisory
Books, Writing and Executive Education
Board briefings, executive workshops and published writing on governance, assurance and the practical limits of AI in audit.
Advisory work reaches one organisation at a time. Teaching reaches the people who have to run the programme after the engagement ends.
Which is, in the long run, the more useful contribution.
This page covers the education and writing side of the practice: board and executive briefings, in-house workshops, and the published writing that sits in the Insights section.
Programmes delivered in-house
Built around your environment, your frameworks and the questions your own auditors have raised, not from a generic deck.
Cybersecurity oversight for directors
What a board should ask, what an adequate answer sounds like, and how to tell a reassuring briefing from an informative one. Ninety minutes.
Related: cybersecurity risk assessmentAI risk and AI governance for boards
Where AI is already in use in your organisation, what data goes into it, who validated the output, and what your position is if a customer asks whether their data trained a model. Ninety minutes.
Related: AI audit automationSOX 404 for first-year public companies
Scoping, the ITGC trap, deficiency evaluation and the decisions that set your programme cost for a decade. Half day for finance and IT together.
Related: SOX 404 complianceSOC 2 readiness for engineering and finance
Scope, evidence, and the gaps that appear in almost every first engagement, run jointly, because the split between the two teams is where these programmes fail. Half day.
Related: SOC 2 readinessCalifornia privacy law in practice
Who CCPA and CPRA apply to, why most companies are already sharing data, and the vendor contract gap found in nearly every assessment. Half day.
Related: data privacy compliancePublished writing
The current body of published work sits in the Insights section of this site, with commentary and shorter pieces published on LinkedIn.
The editorial position across all of it is consistent and worth stating: publish the number, publish the limitation, and publish the situation where the service is not needed. Most professional writing in this field avoids all three, which is why so little of it is useful to someone actually making a decision.
Recurring subject matter
- Governance for organisations without a governance function, the private and family companies where the arrangements exist informally and have never been tested
- The boundary between assurance and advisory, independence, why it constrains your auditor, and why that constraint creates genuine demand for an independent advisor
- IT general controls, the most consistently underestimated area in any SOX or SOC programme
- The practical limits of AI in audit, what makes an AI-assisted procedure defensible, and what will not survive review
- California privacy law as an operational problem rather than a legal one
Books
Long-form titles are in preparation. As they are published they will be listed here with publisher, ISBN and where to obtain them.
Publisher note: this section is intentionally empty rather than populated with placeholder titles. Claiming publications that do not yet exist is an E-E-A-T liability, not an authority signal, see docs/06-post-launch-seo-checklist.md for how to populate it at publication.
Speaking
Enquiries for conference sessions, association meetings and in-house programmes are welcome. Include the event, audience, date and format in the form below and a direct answer follows within a business day, including a direct no where the fit is poor.
Executive education: common questions
Not answered here? Ask Javed directly
Who are the board briefings designed for?
Directors and audit committee members without a technical background who are nonetheless accountable for overseeing cybersecurity, privacy and now AI adoption. That describes most mid-market boards.
The sessions are deliberately not technical. They cover what a director needs to be able to ask, what an adequate answer sounds like, and where management reporting on these topics tends to be reassuring without being informative.
Can sessions be delivered for our team rather than a public audience?
Yes; most are. In-house delivery is more useful because the material can be built around your actual environment, your actual frameworks, and the questions your own auditors have raised.
Typical formats are a ninety-minute board briefing, a half-day workshop for a finance or IT team, or a short series across several weeks where a programme is being stood up.
Do you speak at industry events?
Yes, on the subjects covered across this site: governance for private companies, IT general controls, SOC 2 readiness, California privacy law, and the practical limits of AI in audit.
Enquiries about speaking should go through the contact form with the event, audience and date, a direct answer follows within a business day.
Organisations we have worked with
Three decades of audit, controls and finance leadership across banking, card, mortgage, insurance, staffing and semiconductor.
Get in touch
Enquire about a briefing, workshop or speaking engagement
Include the audience, the format and the date if you have one.
Have a deadline, or just a question?
Send the shape of it. The first call is diagnostic, not billed, and it regularly ends with a smaller engagement than the one you asked about.
Javed Peeran CPA
Request a consultation
Briefing a board on something it has not had to govern before?
Sessions are built for the audience in the room rather than delivered from a deck, so the shape of the engagement is worth a short conversation first.
Schedule a Consultation
Or speak to Javed directly (310) 980-3958 Message on WhatsApp