Periscope Advisory Group

Services and pricing

Scope you can see. Pricing you can understand.

Clear expectations should start before fieldwork. These estimated hourly rates cover the most common services we provide to banks and credit unions.

We confirm scope and fees in writing before work begins. As we learn your institution, recurring work should become more efficient—not automatically more expensive each year.

Estimated hourly rates

A straightforward starting point.

Internal audit
$80 / hour
Compliance and BSA
$90 / hour
IT audit
$100 / hour
Cybersecurity specialty
$110 / hour

Rates are estimates for typical engagements. Final pricing depends on scope, complexity, timing, and the level of support your team needs.

Internal audit

The institution, end to end.

Risk-based coverage for financial, operational, lending, and governance areas, delivered as individual audits or a complete outsourced program.

$80 / hour

Financial and operations

  • General accounting and financial reporting
  • Regulatory Call Report
  • Asset/liability management, interest rate risk, and liquidity risk
  • Investment operations
  • Derivative operations
  • Current Expected Credit Losses (CECL)
  • Deposit operations
  • Branch operations
  • Item processing
  • Automated Clearing House (ACH)
  • Wire transfer operations
  • Remote deposit capture

Lending and credit

  • Loan operations
  • Credit administration and independent loan review
  • Commercial lending
  • Indirect lending
  • Consumer and installment lending
  • Residential mortgage lending
  • Mortgage banking
  • Other real estate owned (OREO)

Risk and program leadership

  • Third-party and vendor risk management
  • Fraud risk management and anti-fraud controls
  • Human resources and payroll
  • Bank insurance
  • Bank holding company and related-entity transactions
  • Enterprise-wide internal audit risk assessment
  • Annual internal audit plan development
  • Outsourced or co-sourced internal audit
  • Internal audit quality assessment
  • Issue validation and follow-up testing
  • FDICIA testing and readiness
  • SOX testing and readiness

IT and cybersecurity

Technology risk in operating terms.

Practical assurance over governance, infrastructure, resilience, critical applications, and cyber defenses—mapped to the risks leadership needs to see.

$100+ / hour

Governance and risk

Typically $100 / hour

  • FFIEC IT audit
  • IT governance and board oversight
  • IT and cybersecurity risk management
  • Information security and customer information programs
  • IT audit and issue management
  • Privacy and records management

Systems and operations

Typically $100 / hour

  • Identity and access management
  • Core banking and critical applications
  • Payments and electronic banking
  • Architecture, infrastructure, and operations
  • Vulnerability, patch, and configuration management
  • Logging, monitoring, and security operations
  • Change management and development

Resilience and assurance

Typically $100 / hour

  • Third-party IT risk management
  • Incident response and regulatory notification
  • Business continuity and operational resilience
  • Internal controls over financial reporting ITGCs
  • FDICIA ITGC testing and readiness
  • SOX ITGC testing and readiness
  • IT audit risk assessment
  • Cybersecurity risk assessment

Cybersecurity specialty

Typically $110 / hour

  • Internal and external vulnerability scanning and reporting
  • Social engineering
  • Cloud security

Regulatory compliance and BSA

Coverage organized around how banks operate.

Independent testing across lending, deposits, operations, and financial crime compliance, with findings written for action rather than citation alone.

$90 / hour

Loan compliance

  • Equal Credit Opportunity Act and Regulation B
  • Home Mortgage Disclosure Act and Regulation C
  • Alternative Mortgage Transaction Parity Act and Regulation D
  • Fair Debt Collection Practices Act and Regulation F
  • S.A.F.E. Mortgage Licensing Act and Regulation G
  • Mortgage Assistance Relief Services and Regulation O
  • Fair Credit Reporting Act and Regulation V
  • RESPA and Regulation X
  • Truth in Lending Act and Regulation Z
  • Loans to insiders and Regulation O
  • Margin stock credit and Regulation U
  • Community Reinvestment Act
  • Military Lending Act
  • Servicemembers Civil Relief Act

Deposit compliance

  • Electronic Fund Transfer Act and Regulation E
  • Truth in Savings Act and Regulation DD
  • Reserve requirements and Regulation D
  • Availability of funds and collection of checks and Regulation CC
  • Unlawful internet gambling and Regulation GG
  • Garnishment of accounts containing federal benefit payments
  • FDIC official signs, advertising, and deposit insurance representations

Operational compliance and BSA

  • Privacy of consumer financial information and Regulation P
  • Limitations on interbank liabilities and Regulation F
  • Unfair or deceptive acts or practices and UDAAP
  • Electronic Signatures in Global and National Commerce Act
  • Right to Financial Privacy Act
  • Bank Secrecy Act and anti-money laundering independent testing
  • BSA model validation
  • Second-line compliance monitoring

Need a different scope?

Start with the risk, not the menu.

This is a guide to our most common work, not a limit. Tell us what your institution needs and we will map the right scope with you.

Discuss your scope