About us
Over twenty years on both sides of control — in government administration, in banking and in industry. That experience determines the questions we ask during an audit.
Paweł Porowski
Internal audit · internal control · investigations and inspections · fraud prevention · digital operational resilience · cybersecurity · AI
More than 20 years in internal control and audit. Sixteen years as an internal auditor in Polish government administration, then compliance control at Bank Gospodarstwa Krajowego and digital operational resilience at PKO Bank Polski. Currently fraud and internal audit expert at the Woodeco Group, and principal of the Lykta advisory practice.
That path matters in practice. Audit in public administration teaches evidentiary discipline and what documentation looks like when it has to survive external inspection. Banking teaches working with large data sets and thinking in terms of risk. Industry teaches that a recommendation which cannot be implemented alongside day-to-day operations is a useless recommendation.
Active in the profession: coordinator of the IT branch group at the Institute of Internal Auditors IIA Poland, member of the Association of Certified Fraud Examiners (ACFE) and of ISSA — Information Systems Security Association. Graduate of the Wrocław University of Economics. Works in English and Polish.
Experience
-
2025 — present
Fraud and internal audit expert
Woodeco Group. Building a fraud prevention system and running internal audit in a manufacturing and trading group — the perspective of a real business, not compliance alone.
-
2025
Digital operational resilience expert
PKO Bank Polski. Operational resilience in a regulated environment — continuity of critical processes and technology supplier risk.
-
2023 — 2025
Compliance control expert
Bank Gospodarstwa Krajowego. Compliance control in a state development bank — work on large transaction data sets under financial supervision.
-
2007 — 2023
Internal auditor
Polish government administration. Sixteen years of audit engagements: risk analysis and annual plans, audits of procurement, expenditure, assets, projects and IT systems, investigations, management control.
-
2000 — 2007
Banking — Bank Millennium, Bank BGŻ
From banking assistant through deputy branch manager to specialist and managerial sales roles. Knowledge of operational processes from the position of the person performing them, not only auditing them.
Professional bodies
- Institute of Internal Auditors IIA Poland — coordinator of the IT branch group (since 2024)
- Association of Certified Fraud Examiners (ACFE) — member
- ISSA Poland and Information Systems Security Association — member
Certifications
- Certified IT Systems Security Auditor Polish Institute of Internal Control — certificate no. 10702, second degree
- Cyber Resilience Academy Foundation Cyber Resilience Academy
- AgilePM® Foundation APMG International
- Agile Business Consortium Scrum Master Agile Business Consortium
- Artificial intelligence certification path DeepLearning.AI, Microsoft Learning, Polish Development Fund
- Data analytics — Power BI Dashboards and management reporting
Education and languages
- Wrocław University of Economics
- IIA professional courses: performance auditing, ethics in internal audit, the evolution of internal audit, the role of audit in climate risk, assurance in ESG reporting
- Languages: Polish, English, basic Italian
What stands behind it
years of audit in government administration
Hundreds of audit engagements and investigations conducted under the rigour of the Public Finance Act — with documentation that passed inspections by the Supreme Audit Office and managing authorities.
sectors: public, banking, industry
Audit in administration, compliance control and operational resilience in banks, and fraud prevention in a manufacturing group. We know how these worlds differ in practice.
as a tool, not a slogan
We use artificial intelligence in day-to-day audit work and teach others to do the same — knowing both what genuinely speeds things up and where it creates unacceptable risk.
Four principles
A finding must carry an amount
A shortcoming without a valuation is an opinion, easily dismissed. So we quantify every material finding and state the method — conservatively, because an inflated number destroys the credibility of the whole report.
Nobody finds out at the board meeting
Findings go back for factual verification before they reach the report. The audited party has the right to correct the record. An audit is not an ambush and is not a weapon in internal politics.
A recommendation must be workable
We do not write „supervision should be strengthened”. We write who does what, by when, and how we will know it worked. A recommendation that cannot be implemented alongside daily operations is just a well-phrased sentence.
Confidentiality without exception
We work under a non-disclosure agreement. We do not name clients as references without their explicit consent — in the matters we handle, the very fact that an audit was commissioned can be sensitive information.
Lykta Paweł Porowski
Lykta Paweł Porowski
ul. Władysława Pytlasińskiego 16/13
00-777 Warsaw, Poland
VAT ID (NIP): 9661363371
REGON: 541716521
tel. +48 502 366 305
e-mail: biuro@lyktaofficial.eu
Our other sites
Classified information protection runs under the lykta.pl brand. Business intelligence and detective services launch shortly at lyktawywiad.pl and lyktadetektyw.pl.
Let’s talk about your organisation
The first conversation is free and without obligation. Describe the situation — we will tell you whether an audit is the right instrument here.
Get in touch