- Home
- Sectors
Where we work
Sectors
Our work spans regulated industry, government, and the nonprofit sector. What the engagements have in common is not an industry — it is that somebody else will eventually read the file.
Sosa & Arvelo is a management consulting firm. The practice was built by people who spent their careers inside the institutions that write, enforce, and answer to regulation — a state cybercrime investigative unit, a government retirement system, the finance operation of a major municipality, and a federal grants apparatus.
That background is why the work concentrates where consequences are public: proceedings with multi-billion-dollar implications, agencies operating under oversight, institutions preparing for examination, and organizations whose funding depends on a defensible file. The subject matter changes. The discipline does not.
Financial Services & Commercial
23 NYCRR 500 programs and annual certification, NIST control mapping, third-party and vendor risk, privacy, incident response and electronic evidence, and beneficial-ownership posture.
Detailed page
Nonprofits & Faith-Based
Federal grant financial management under 2 CFR 200, tax-exempt status before the IRS and Hacienda, fund accounting, Form 990 and the board package, and controls designed for small teams.
Detailed pageAlso
Sectors where the work speaks for itself
Energy & Utilities
Regulatory proceedings are where this practice operates at its largest scale. Rate proceedings and restructuring matters with multi-billion-dollar implications, where the deliverable is not a recommendation but a record: findings tied to the standard they have to satisfy, and reasoning a reviewer can follow.
Alongside the proceedings sits the operational work — critical-infrastructure and OT security, the IT/OT boundary, and what federal instruments aimed at the energy sector actually require of a given operator rather than what the press release says.
- Regulatory proceedings and rate matters
- Restructuring and oversight contexts
- Critical-infrastructure and OT security
- Federal energy policy translation
Government & Public Sector
Agency finance and operations, public retirement systems, municipal financial management, and federal funds administration — including a portfolio of roughly $2 billion administered by a partner before the firm, and the financial operation of one of Puerto Rico’s largest municipalities.
Public-sector work carries a constraint private engagements do not: the record is discoverable, the timeline is political, and the review is public. We design programs that survive that, and we say plainly when a proposed approach will not.
- Agency finance and operations
- Retirement system governance and reporting
- Municipal financial management
- Federal grant administration and oversight
Banking, Insurance & Regulated Industry
Institutions that are examined rather than merely audited. The work is program design against a named regime, and the evidence file that proves the program operated — not a policy binder produced the week before the examination.
- Examination readiness
- Control design and testing
- Regulatory change management
Legal, Defense & Investigations
Electronic evidence, digital forensics, and incident work where the material may later be read by a regulator, an insurer, or a court. This capability comes from prosecutorial practice — chain of custody, imaging decisions, and what remains usable when a matter becomes a proceeding.
- Electronic evidence and forensics
- Incident response and notification
- Expert instruction and training
Next step
Tell us what you're facing.
A 30-minute conversation, no charge, no obligation. We will tell you whether an assessment is the right next step, whether we are the right firm — and if we are not, who is more likely to be.