Top 10 B2B Corporate Governance Advisory Firms MY

When a Malaysian PLC signs a governance advisory engagement, the purchase order lists specific services: internal audit outsourcing, a board effectiveness review, an ISO 37001 anti-bribery program, or an annual report CG disclosure check. The ten firms below run these engagements on the ground in Kuala Lumpur and serve the Main Market, ACE Market, and GLC segment. Selection here was based on stated practice lines, service packaging, and how directly their deliverables map to the Companies Act 2016, MMLR, and MCCG 2021.

1. Deloitte Malaysia

Deloitte Malaysia runs its Risk Advisory team out of Menara LGB, Jalan Raja Chulan, selling three deliverables: outsourced internal audit, ERM framework design, and Board Effectiveness Reviews. For a Main Market PLC, Deloitte maps the audit committee’s quarterly agenda against MMLR requirements and MCCG 2021 expectation gaps. Their internal audit outsourcing typically runs four field cycles per year using an integrated workbench that tests controls across SAP, Oracle, and the finance close spreadsheets. The Nomination Committee receives an interview-based board evaluation report with director-level skill matrices.

2. PwC Malaysia

PwC Malaysia’s GRC practice is the main point of call for GLCs — the operational reason is Section 17A of the MACC Act 2009. They build and test anti-bribery management systems certified to ISO 37001:2016, including gift registers, conflicts-of-interest logs, and delegated authority matrices. On the board side, PwC deploys a standardized board risk questionnaire of roughly 200 checkpoints, validating whether the audit committee sees accurate risk data before each meeting. They also draft Related Party Transaction policies for shareholder circulars under MMLR 10.08.

3. EY Malaysia

EY Malaysia separates governance into two practice lines: Business Risk Services for internal audit, and Climate Change & Sustainability Services for mandatory sustainability reporting. Under Bursa’s sustainability reporting requirements, boards need climate risk committees with actual data pipelines. EY builds those loops from the ERP system (SAP S/4HANA or Oracle) into TCFD-aligned disclosures. They also run a board composition diagnostic that scores directors’ skills against the Bursa Board Diversity Policy and returns a gap list showing which director profiles are missing from the boardroom.

4. KPMG Malaysia

KPMG Malaysia’s Governance & Risk Consulting arm is the strongest when the engagement is about the three lines of defense. BNM- and SC-regulated clients — banks, insurers, and fund managers — use KPMG to redraw risk committee mandates and internal audit charters. Their team produces a 12-month Board Committee Workplan in Q4 for the following year, mapping audit committee, risk committee, and nomination committee meetings to deliverable dates. KPMG also co-sources internal audit staff into client teams for cost-reduction engagements, billing by cycle rather than by retainer.

5. BDO Malaysia

BDO Malaysia’s GRA practice is a mainstay for mid-cap Main Market PLCs with revenue bands between RM100 million and RM1 billion, plus federal statutory bodies. BDO outperforms the Big 4 in one operational respect: they run audit committee effectiveness reviews in Bahasa Malaysia, which matters when the board’s internal documents are in the national language. They standardize to four internal audit cycles annually and embed procurement governance audits that check vendor approval chains against Finance Ministry pekeliling requirements.

6. Crowe Malaysia

Crowe Malaysia publishes an annual gap analysis of Bursa Main Market annual reports, scoring disclosures against MCCG 2021 practices — that data set is the backbone of their advisory pitch. Their governance team maintains a separate Islamic Finance advisory unit dedicated to Shariah-compliant companies, covering audit committee composition for Islamic REITs and unit trust management companies. Fraud risk engagements follow the corporate liability test of Section 17A, and Crowe measures code-of-conduct training completion rates as a key audit output.

7. RSM Malaysia

RSM Malaysia is the most active governance advisor to ACE Market companies, especially those planning the transition to the Main Market. The work items are administrative: RPT policies tightened to MMLR thresholds, board charters rewritten to include step-up requirements, and audit committees restructured to include at least one MIA member. RSM packages internal audit co-sourcing on a cycle-by-cycle invoicing structure so pre-profit companies can match cash flow. They also issue whistleblower policy templates that respect the Whistleblower Protection Act 2010.

8. Mazars Malaysia

Mazars Malaysia sells internal audit outsourcing and the MCCG 2021 Practice 5.1 item — board performance evaluation. They deliver a 360-degree board survey with anonymized director-to-director scoring, then a facilitator interviews each director; the output is a nomination committee report. Mazars also handles IT governance audits for companies that rarely get deep IT coverage, checking user access logs, backup and recovery testing, and finance system change management.

9. Institute of Corporate Directors Malaysia

ICDM is an institute, not an audit firm, but it is an advisory force in its own right. ICDM’s Board Advisory unit conducts direct board evaluations and runs a formal director placement pipeline, recruiting candidates from its pool of ICDM-certified directors. The certification pathway is a structured multi-day program followed by an assessment; boards of companies preparing for IPO or regulator scrutiny treat the certification as a de facto baseline for independent director appointments. ICDM also pushes the Bursa 30% female board target.

10. Malaysian Institute of Corporate Governance

MICG is the older national governance institution of the two. MICG runs Board Induction workshops for newly appointed directors, covering Companies Act 2016 fiduciary duties, MCCG 2021, and Bursa listing rules in a single-day format. For larger PLCs, MICG provides advisory review of the annual report’s Corporate Governance Overview Statement to ensure it addresses all practices expected by the Securities Commission before submission.