Andriy Oreshyn
Governance • Risk • Independent Assurance
_{Helping Boards, executives and organizations strengthen governance, accountability, oversight and organizational effectiveness in regulated and safety-critical environments.}

Independent advisory, assessment and assurance services for utilities, nuclear organizations, infrastructure, public-sector entities and other regulated industries.Governance, Risk & Independent Assurance Advisory
Organizations invest heavily in governance frameworks, risk management, management systems, compliance programs, major projects and assurance activities.
The critical question is not only whether these arrangements exist.
Are they working effectively and producing the intended results?
With nearly four decades of experience across the utility and nuclear sectors, I help Boards, executives, Audit Committees and management teams evaluate whether governance arrangements, risk management practices, oversight mechanisms, major initiatives and management systems are operating effectively in practice.
My work combines independent challenge, evidence-based assessment and practical recommendations.
Independent insight. Evidence-based assessment. Practical improvement.WHAT I DO
Independent Assessment of Governance, Risk and Organizational Effectiveness
I provide independent assessments and advisory services to determine whether governance structures, accountability arrangements, risk controls, oversight mechanisms, management systems and major initiatives are functioning as intended and supporting organizational objectives.
My assessments look beyond documented compliance to examine:
- whether responsibilities and accountabilities are clear;
- whether controls are operating effectively;
- whether management information accurately reflects performance and risk;
- whether corrective actions are preventing recurrence;
- whether oversight activities focus attention on the issues that matter most;
- whether programs and initiatives are achieving their intended outcomes.Particular depth includes nuclear assurance, management systems, supplier oversight, corrective action effectiveness, project assurance and governance in highly regulated environments.SERVICES
Areas of Expertise
Governance & Accountability Reviews
Independent evaluation of governance structures, accountability arrangements, oversight responsibilities and decision-making processes.
- Governance effectiveness assessments;
- Roles and accountability reviews;
- Board and committee effectiveness reviews;
- Delegation of authority assessments;
- Oversight framework reviews;
- Governance improvement recommendations.Risk & Assurance Advisory
Helping organizations determine whether risks are understood, assurance activities are appropriately targeted and leadership receives an accurate picture of organizational exposure.
- Enterprise and strategic risk assessments;
- Risk governance reviews;
- Assurance mapping;
- Risk reporting assessments;
- Emerging risk evaluations;
- Independent challenge and validation;
- Assurance program effectiveness reviews.Project & Program Assurance
Independent review of major projects and organizational initiatives to assess governance, risk, readiness and the effectiveness of management controls.
- Project governance reviews;
- Stage-gate assessments;
- Readiness reviews;
- Project risk assessments;
- Independent project assurance;
- Lessons learned and post-implementation reviews;
- Supplier and contractor oversight assessments.Management Systems, Compliance & Supplier Assurance
Independent assessment of management systems and assurance arrangements in regulated and safety-critical environments.
- Nuclear assurance;
- Quality management systems;
- Occupational health and safety management systems;
- Environmental management systems;
- Supplier qualification and oversight;
- Corrective action program effectiveness;
- Audit and assessment program effectiveness;
- Regulatory and standards compliance.
Experience includes work with ASME NQA-1, CSA N286, CNSC regulatory requirements and ISO-based management systems.CLIENT CHALLENGES
When Organizations Seek Independent Advice
Clients typically contact me when:
✓ Governance responsibilities and accountabilities are unclear.
✓ Boards or Audit Committees require additional independent assurance.
✓ Major projects or organizational initiatives require objective assessment.
✓ Risk reporting does not provide a clear picture of the risks that matter most.
✓ Management systems appear compliant, but organizational performance is not improving.
✓ Assurance activities are extensive, but leadership remains uncertain about actual effectiveness.
✓ Supplier or contractor oversight requires strengthening.
✓ Corrective actions are being completed but recurring problems continue.
✓ Management needs an independent assessment of readiness, effectiveness or organizational risk.
✓ Leadership requires an experienced and independent perspective.WHY WORK WITH ME
Experience
Nearly four decades of utility and nuclear industry experience spanning operations, quality, independent oversight, auditing, assurance, governance, supplier oversight, corrective action and organizational performance.
Independence
Objective assessment based on evidence, professional judgment and practical understanding of complex, regulated organizations.
Effectiveness Focus
Assessment that goes beyond documented compliance to determine whether governance arrangements, controls, management systems and assurance activities are actually producing their intended results.
Practicality
Recommendations designed to be achievable, proportionate to risk and focused on sustained organizational improvement.Experience in Regulated & Safety-Critical Environments
Areas of professional experience include:
Nuclear assurance • ASME NQA-1 • CSA N286 • CNSC requirements • Quality management • Supplier assurance • Corrective action programs • Project oversight • Governance effectiveness • Risk management • Occupational health & safety • Environmental management • Independent assessment

• About
• What I Do
• Supplier Audit
• Contact

• Back

About Me
—
I am an independent governance, assurance, and risk advisor with nearly four decades of experience in the utility and nuclear industries.
Throughout my career, I have worked in operations, projects, quality, oversight, audit, and governance-related roles. This experience allows me to assess not only whether organizations comply with requirements, but whether their governance structures, management systems, oversight processes, and decision-making practices are delivering the intended outcomes.
My approach is based on independence, professional skepticism, evidence-based assessment, and practical recommendations focused on long-term improvement.
I believe effective governance is not about bureaucracy.
It is about clarity of accountability, informed decision-making, and sustainable organizational performance.
My professional experience includes nuclear operations and engineering, more than two decades of independent oversight and assessment in the Canadian nuclear sector, and Lead Auditor work involving ASME NQA-1, CSA N286, CNSC requirements and ISO-based management systems.

• Back

Independent Governance, Risk & Assurance Services
I provide independent advisory, assessment, and assurance services to Boards, executives, Audit Committees, management teams, utilities, infrastructure organizations, public-sector entities, and other regulated or safety-critical organizations.
Engagements may range from a focused independent review of a specific issue to broader support involving governance, risk, internal audit, project assurance, supplier oversight, management systems, or organizational effectiveness.
My role is to provide experienced, objective challenge and help leadership determine whether important arrangements are working effectively in practice.Executive Advisory Services
Organizations do not always need another large consulting engagement. Sometimes they need an experienced independent perspective on a difficult governance, risk, assurance, or performance issue.
I work with executives, Boards, Audit Committees, and senior management teams to provide objective analysis, independent challenge, and decision support.
Typical areas of support include:
- Strategic risk discussions;
- Independent review of management proposals;
- Governance improvement initiatives;
- Assurance strategy development;
- Review of major decisions and organizational initiatives;
- Board and Audit Committee assurance support;
- Independent challenge of risk, performance, and oversight information.The objective is to help leadership test assumptions, identify blind spots, and make better-informed decisions.Fractional Chief Audit Executive Services
Some organizations require experienced internal audit leadership but do not need, or cannot justify, a full-time Chief Audit Executive.
I provide flexible audit leadership and advisory support tailored to organizational needs.
Services may include:
- Enterprise risk assessment;
- Risk-based audit planning;
- Audit Committee reporting;
- Audit methodology development;
- Internal audit quality reviews;
- Assurance coordination;
- Audit program effectiveness reviews;
- Staff mentoring and technical support;
- Temporary or transitional audit leadership.This support can be scaled from periodic advisory involvement to more active fractional leadership.Governance & Accountability Reviews
Governance frameworks may look sound on paper while responsibilities, authorities, and accountability remain unclear in practice.
I assess whether governance arrangements support effective oversight, decision-making, and organizational accountability.
Typical engagements include:
- Governance effectiveness assessments;
- Accountability and role-clarity reviews;
- Oversight framework evaluations;
- Delegation of authority reviews;
- Board and committee effectiveness reviews;
- Governance improvement recommendations;
- Review of decision-making and escalation arrangements.The focus is not simply whether governance structures exist, but whether they are understood, used, and producing the intended outcomes.Risk & Assurance Advisory
Effective risk management requires more than maintaining a risk register. Leadership needs confidence that significant risks are understood, properly governed, and supported by appropriate assurance.
I help organizations evaluate the quality of their risk and assurance arrangements.
Typical engagements include:
- Enterprise and strategic risk assessments;
- Risk governance reviews;
- Assurance mapping;
- Risk reporting assessments;
- Emerging risk evaluations;
- Independent challenge and validation;
- Assurance framework effectiveness reviews;
- Review of gaps, overlaps, and duplication in assurance activities.The objective is to help leadership focus attention on the risks that matter most and understand whether existing assurance provides sufficient confidence.Project & Program Assurance
Major projects and strategic initiatives can consume significant resources while creating operational, financial, regulatory, and organizational risk.
I provide independent review of projects and programs where leadership requires objective insight into governance, readiness, risk, controls, or performance.
Typical engagements include:
- Project governance reviews;
- Stage-gate assessments;
- Readiness reviews;
- Project and program risk assessments;
- Independent project assurance;
- Lessons learned reviews;
- Post-implementation reviews;
- Supplier and contractor oversight assessments.The purpose is to provide an independent view of whether the project is appropriately governed, risks are understood, controls are operating, and leadership has an accurate picture of readiness and performance.Management Systems, Compliance & Supplier Assurance
Management systems can comply with documented requirements while still failing to produce reliable or sustainable results.
Drawing on extensive experience in highly regulated and safety-critical environments, I assess whether management systems and assurance arrangements are functioning effectively in practice.
Areas of experience include:
- Nuclear assurance;
- CSA N286 assessments;
- ASME NQA-1-related assurance and supplier oversight;
- Quality management systems;
- Occupational health and safety management systems;
- Environmental management systems;
- Supplier qualification and performance reviews;
- Corrective action program effectiveness;
- Audit and assessment program effectiveness;
- Regulatory and standards compliance.My focus extends beyond whether requirements are documented to examine whether controls are implemented, understood, effective, and capable of supporting sustained performance.Typical Engagements
Organizations may engage me for:
- A focused independent review of a governance, risk, or performance concern;
- A short-duration diagnostic assessment;
- Board or Audit Committee assurance support;
- Project or program assurance;
- Supplier or contractor oversight review;
- Management-system effectiveness assessment;
- Corrective action program review;
- Internal audit or assurance program evaluation;
- Fractional or interim audit leadership;
- Independent review of a major initiative or management proposal.Engagements can be tailored to the scale, complexity, risk, and maturity of the organization.How I Work
My approach is evidence-based, independent, and proportionate to the issue being assessed.
Depending on the engagement, the work may include:
- Document and records review;
- Interviews with leadership, management, and staff;
- Governance and process mapping;
- Requirements and criteria evaluation;
- Sampling and evidence testing;
- Field observation;
- Trend and performance analysis;
- Benchmarking;
- Independent challenge and validation.The objective is not simply to determine whether requirements are being met.
The more important question is whether the arrangements are functioning effectively and whether leadership has an accurate understanding of organizational performance, risk, and assurance.The Outcome
A useful independent assessment should provide more than findings.
It should help leadership understand:
- What is working;
- What is not working;
- Why it matters;
- Where risk is concentrated;
- Whether existing controls and assurance are sufficient;
- What practical actions will improve effectiveness;My aim is to provide clear, evidence-based insight that supports better governance, stronger accountability, and more effective organizational performance.

• Back

This page is intended for professional correspondence.→ Connect on LinkedIn

• Back

Independent Nuclear Supplier Audits & Qualification Support
CSA N299 • CSA N286 • CSA N285 • ASME NQA-1 • ASME Section IIINuclear organizations depend on complex supplier networks. Effective supplier assurance requires more than reviewing documented programs and certifications; it requires objective evidence that applicable requirements are understood, appropriately flowed down, and effectively implemented in practice.
I provide independent supplier audits and qualification support for nuclear organizations and companies operating within, or preparing to enter, the nuclear supply chain.ServicesSupplier Qualification & Requalification Audits
Independent supplier audits against client-defined requirements to provide objective evidence supporting supplier qualification and continued approval.Nuclear Quality Program Assessments
Assessment of documented programs and implementation against applicable CSA N299, CSA N286, CSA N285, ASME NQA-1, ASME Section III, and contractual requirements.Supplier Surveillance & Oversight
Focused assessments of supplier performance, implementation, quality controls, and areas of elevated risk.Corrective Action & Finding Follow-up
Independent review of corrective actions, effectiveness, and closure of supplier audit findings.Audit Readiness & Mock Audits
Independent assessment for organizations preparing for customer, utility, regulatory, or nuclear supply-chain audits.Remote Document Review & On-Site Verification
Remote review of programs, procedures, records, and objective evidence combined, where appropriate, with targeted on-site implementation verification.Supplier Qualification Support
Supplier audits and assessments are structured around the client’s defined technical, quality, contractual, and regulatory requirements. The resulting objective evidence can support supplier qualification, requalification, and continued-approval decisions.The final supplier qualification decision remains with the responsible client organization.Preparing for a Nuclear Customer Audit
For organizations entering the nuclear supply chain or preparing for a customer audit, I provide an independent assessment of both documented programs and their implementation.
The objective is not simply to prepare documentation for an audit. It is to identify weaknesses before the customer does and determine whether the organization can demonstrate effective implementation through objective evidence.Flexible Audit Teams
Engagements can range from focused independent assessments to multi-disciplinary supplier audits. Where specialized technical expertise is required, additional pre-qualified independent associates can be engaged based on the scope of the assessment.
Audit teams are structured around the applicable requirements, supplier risk, technical scope, and assurance needs of the client.Discuss a Supplier Assurance Requirement
If you require an independent supplier audit, qualification assessment, audit-readiness review, or specialized nuclear assurance support, please contact me to discuss the scope and applicable requirements.Contact →