- Risk-based internal audit plans and annual programmes
- Operational, financial and compliance audit execution
- Outsourced and co-sourced internal audit function
- Control design and effectiveness testing
- Audit committee and board-ready reporting
Governance, risk & compliance services in Malaysia
Seven service lines, each delivered by a small, senior team and mapped to the standard it has to stand up against.
- Enterprise and operational risk frameworks (ISO 31000)
- Risk register design, facilitation and assurance review
- Facilitated risk workshops and risk maturity assessment
- Compliance reviews and obligations registers
- Policy, delegation and governance framework development
- Psychosocial risk assessment and control review
- Gap assessment, system design, documentation and rollout
- Internal ISO audits and management review support
- Certification audit preparation and representation
- ISO 45001 safety management system build and audit
- Supplier and second-party audits
- End-to-end process mapping, including swim lane models
- Bottleneck, handoff and control gap analysis
- Process redesign and re-engineering for control and efficiency
- SOP, work instruction and form development
- Automation and digitalisation readiness assessment
- Improvement actions, owners and KPIs tracked in StrategyX
- Business impact analysis and criticality assessment
- Continuity, recovery and contingency plans (ISO 22301)
- Crisis management structure, roles and escalation
- Desktop and functional exercise design and evaluation
- Post-incident review and corrective action tracking
- Fraud risk assessment and fraud control planning
- Investigation of suspected fraud, misconduct and policy breach
- Whistleblowing channel and investigation protocol design
- Section 17A adequate procedures review and ISO 37001 systems
- AML/CFT programme review and compliance testing
- Third-party and vendor integrity due diligence
- ISPS Code gap assessment for ships and port facilities
- Ship and port facility security assessment and plan preparation support
- Maritime voyage risk assessment
- Route card risk assessment for transit and high-risk areas
- Security drill and exercise design, facilitation and evaluation
- Internal audit of ship and port facility security arrangements
