- Home
- Sectors
Where we work
Sectors
Our work spans regulated industry, government, and the nonprofit sector. What the engagements have in common is not an industry — it is that somebody else will eventually read the file.
Sosa & Arvelo is a management consulting firm. The practice was built by people who spent their careers inside the institutions that write, enforce, and answer to regulation — a state cybercrime investigative unit, a government retirement system, the finance operation of a major municipality, and a federal grants apparatus.
That background is why the work concentrates where consequences are public: proceedings with multi-billion-dollar implications, agencies operating under oversight, institutions preparing for examination, and organizations whose funding depends on a defensible file. The subject matter changes. The discipline does not.
Sectors with a dedicated page
Financial Services & Commercial
Cybersecurity programs and annual certification, control-framework mapping, third-party and vendor risk, privacy, incident response and electronic evidence, and beneficial-ownership posture.
Detailed page
Nonprofits & Faith-Based
Federal grant financial management, tax-exempt status before the IRS and Hacienda, fund accounting, annual filings and the board package, and controls designed for small teams.
Detailed pageFurther sectors
Energy & Utilities
Regulatory proceedings are where this practice operates at its largest scale. Rate proceedings and restructuring matters with multi-billion-dollar implications, where the deliverable is not a recommendation but a record: findings tied to the standard they have to satisfy, and reasoning a reviewer can follow.
Alongside the proceedings sits the operational work — critical-infrastructure and OT security, the IT/OT boundary, and what federal instruments aimed at the energy sector actually require of a given operator rather than what the press release says.
- Regulatory proceedings and rate matters
- Restructuring and oversight contexts
- Critical-infrastructure and OT security
- Federal energy policy translation
Government & Public Sector
Agency finance and operations, public retirement systems, municipal financial management, and federal funds administration — including a portfolio of roughly $2 billion administered by a partner before the firm, and the financial operation of one of Puerto Rico’s largest municipalities.
Public-sector work carries a constraint private engagements do not: the record is discoverable, the timeline is political, and the review is public. We design programs that survive that, and we say plainly when a proposed approach will not.
- Agency finance and operations
- Retirement system governance and reporting
- Municipal financial management
- Federal grant administration and oversight
Banking, Insurance & Regulated Industry
Institutions that are examined rather than merely audited. The work is program design against a named regime, and the evidence file that proves the program operated — not a policy binder produced the week before the examination.
- Examination readiness
- Control design and testing
- Regulatory change management
Legal, Defense & Investigations
Electronic evidence, digital forensics, and incident work where the material may later be read by a regulator, an insurer, or a court. This capability comes from prosecutorial practice — chain of custody, imaging decisions, and what remains usable when a matter becomes a proceeding.
- Electronic evidence and forensics
- Incident response and notification
- Expert instruction and training
Next step
Tell us what you’re facing.
A 30-minute conversation, no charge, no obligation. We will tell you whether an assessment is the right next step, whether we are the right firm — and if we are not, who is more likely to be.