Capability Statement

Governance, risk & compliance — designed in from the start.

A one-page summary of what Ulyx Advisory does, who we serve, and the certifications and procurement IDs agencies and partners need on file.

One page · PDF · Rev. Oct 1, 2026

What we deliver

Core competencies

  • Enterprise Risk Management & Internal ControlsInternal-control programs for state and local agencies and grant recipients, aligned to COSO and the GAO Green Book.
  • Board Structure & GovernanceCharters, bylaws, decision rights, reporting and vetting procedures, ethics requirements, and member training.
  • Audit Remediation & Corrective ActionRoot-cause analysis and corrective-action plans for legislative-audit and single-audit findings.
  • Grants Compliance2 CFR Part 200 policies, procedures, and subrecipient-monitoring frameworks.
  • Technology & AI GovernanceAI use and acquisition policies, inventories, and risk assessments built on public frameworks such as the NIST AI RMF.
  • Privacy by Design, Records & EthicsPrivacy, records-management, and ethics programs designed into systems and processes; MODPA readiness.
  • Performance ManagementStrategic-plan and performance frameworks with measures tied to how the organization operates.
  • Training & FacilitationWorkshops and cohort training on governance, internal controls, and privacy.

Prime contractor? See our teaming capability statement →