Most accounting firms are reasonably good at evaluating individual engagements. They have intake processes, conflict checks, independence protocols, and approval workflows. Partners make judgment calls, document their reasoning, and move forward.
But the firms building the most durable competitive positions are doing something different. They’re managing risk the way the best investors manage a portfolio — not holding by holding, but as a whole. And the advantages compound as they do.
Thinking about risk the way an investor thinks about a portfolio
Sophisticated investors don’t evaluate each holding in isolation. Instead, they start with a strategy and a set of goals, then determine which risks are worth taking and which to avoid. They structure their holdings to reflect that risk appetite, deploy capital where returns justify the risk, staff up where expertise is needed, and monitor outcomes continuously. When the picture shifts, they adjust. Higher risk positions must produce higher returns. If they don’t, something is wrong with the strategy, the execution, or both.
The analogy maps directly to how leading accounting firms are beginning to approach risk. Firm strategy defines the overall direction and risk appetite. Business development decisions determine which risks to pursue, which clients, sectors, and geographies fit the profile, and which don’t.
Service delivery is structured to match that risk posture. Staffing and talent decisions reflect both capacity and quality commitments. Continuous monitoring of profitability, quality outcomes, and emerging exposures tells leadership whether the positions they’ve taken are performing as expected, with early enough warning to act when they’re not.
Firms that have built this capability can accept more of the right opportunities faster, protect their reputation more systematically, and demonstrate to regulators, investors, and clients that they understand and actively govern their own portfolio of risk. That’s a meaningful differentiator.
What portfolio-level visibility actually looks like
A portfolio lens on risk means being able to answer, at any point in time, a specific set of questions:
- Client concentration: Does a disproportionate share of revenue come from a single client, industry, or geography?
- Independence and conflicts: Can the firm identify and manage conflicts across the entire portfolio, including affiliates and joint ventures?
- Delivery capacity: Does the firm have the talent, technology, and infrastructure to serve its current portfolio without quality degradation?
- Financial performance and exposure: Are engagements tracking against their delivery timelines and financial targets? Where are margins compressing, budgets overrunning, or client commitments at risk — and are those signals visible early enough to act?
- Regulatory exposure: How many engagements fall within heightened regulatory scrutiny, and do they receive proportionate oversight?
- Reputational interdependency: Could a failure in one engagement or practice area cascade across the firm’s brand?
- Third-party and supply chain risk: Are offshore providers, technology vendors, and affiliate networks subject to consistent risk oversight?
Most firms can partially answer some of these questions. Others answer them after it’s too late, as it takes them a long time to find the right data and produce leadership reporting. The firms building strategic advantage can fully answer all these questions with confidence in real time and at the portfolio level.
Purpose-built compliance solutions address specific dimensions of this picture. Intapp Conflicts manages conflict identification and resolution across the portfolio. Intapp Intake brings consistency to the client acceptance and risk assessment processes, and continuously monitors for changes in risk factors. Intapp Employee Compliance extends oversight to individual independence obligations. Intapp Walls governs engagement-level data security. And, when connected to the firm’s independence systems or Employee Compliance, Walls provides a critical layer of protection against independence violations, conflicts of interest, and firm policy breaches.
Each of these solutions closes a meaningful gap on its own. But portfolio-level visibility requires that they work together and connect to the broader engagement lifecycle.
These connections should start earlier than most firms think.
Whether through Intapp DealCloud or a firm’s existing CRM system, integrating risk data into business development helps firms pursue the right clients from the outset — evaluating conflict exposure, independence implications, and strategic fit before relationship investment builds, not after.
Additionally, time data from Intapp Time or a firm’s existing time tracking solution adds a continuous monitoring dimension that most firms currently miss. Unexpected team members logging time on an engagement, or patterns of scope expansion not reflected in the original risk assessment, can be early indicators of independence or quality risk. When that data flows through to an AI layer, those signals surface automatically before they become material issues. When all this data is connected, patterns that are invisible in any single system become actionable at the firm level.
Building the infrastructure for lasting advantage
Portfolio-level visibility is primarily a data and governance challenge, not a technology one. The foundational requirement is a unified data layer that connects client data, engagement data, conflict data, independence data, and delivery data across the firm. Without that foundation, no amount of sophisticated tooling will deliver the insight leaders need.
“Sustainable growth requires disciplined execution, standardized processes and the right technology foundation,” Chad Anschuetz, CEO of Doeren Mayhew Advisors, told Accounting Today. “By formalizing policies and procedures across the organization, we create consistency without sacrificing quality.
Intapp Celeste, Intapp’s governed AI platform built specifically for accounting firms, applies AI to a firm’s connected data foundation — spanning pursuits and business development, intake, conflicts, independence, engagement delivery, and financial performance. Celeste is purpose-built to work on top of connected, structured, firmwide data. Firms that invest in the data and technology layer first create the conditions for Celeste to perform — turning portfolio-level risk insight into a continuous capability rather than a periodic report, with compliance built in by design to lower regulatory exposure and ease administrative burden.
The strategic moment
Portfolio-level risk management is becoming a board-level responsibility. Regulators are shifting focus to firmwide patterns, controls, and governance effectiveness. Investors and PE partners expect transparency around portfolio exposure. And in a profession built on trust, the reputational interdependency across a firm’s client base means that systematic risk and quality management is not a cost center. It’s what makes sustained growth possible.
How is your firm approaching portfolio-level risk intelligence? What has made the biggest difference, and where do the most significant opportunities remain? Join the conversation at intapp.com/accounting-risk-intelligence.
