Layar.Consult
Layar Consult Advisory Services

— Advisory Engagements

Three Engagements. Each with a Written Deliverable. Each with a Fixed Fee.

The work described on this page is intended for organisations in Malaysia whose oversight functions are engaging seriously with technology risk and governance responsibilities.

← Return to Home

— Our Approach

How Each Engagement Is Conducted

Every engagement at Layar Consult begins with a scoping conversation — a brief discussion to confirm that the engagement described here is well-matched to the organisation's actual situation. Where a different scope is needed, we say so before any commitment is made.

The engagement itself is structured around its written output. We design the work — the interviews, document reviews, workshops or discussions — to gather what is needed to write clearly and honestly about the subject. Observations are not filtered to produce comfortable findings.

The draft is shared with the client for review and one round of substantive revision is included within the engagement fee. The final document is then delivered in a form ready for board or committee use.

All engagements are conducted under a written scope agreement, signed before work commences.

Confidentiality is absolute. No client engagement is referenced in our materials without written consent.

Draft review is included in every engagement fee, without exception.


01 — Posture Review

Technology Risk Posture Conversation

A short advisory engagement that places the organisation's technology risk posture onto a single readable page. We catalogue the principal exposures — operational, regulatory, vendor, security, talent — and weigh each against the controls actually in place. The output is a written posture note that names the exposures plainly and without theatre.

We do not produce a risk register; we produce a piece of considered prose the leadership may carry into its risk committee. Suited for boards and audit committees preparing a periodic review.

  • Operational, regulatory, vendor, security and talent exposures reviewed
  • Written posture note as primary output, not a risk register
  • Designed for board or audit committee presentation
  • Completed within two to three weeks

Process Steps

1

Scoping conversation

Confirm scope, access requirements and relevant committee calendar.

2

Document and interview review

Review relevant technology policies, risk reports and committee papers. Interview responsible executives.

3

Draft posture note

Produce the written posture note in draft. Share for client review and comment.

4

Final delivery

Deliver finalised posture note, suitable for tabling at the risk or audit committee.

Technology Risk Posture Conversation
Suitable for: boards preparing periodic risk reviews; audit committees approaching a regulatory examination; organisations that have not recently had an independent view of their technology exposures.

Technology Governance Advisory
Suitable for: organisations preparing for regulatory review; companies undertaking deliberate governance uplift; listed entities whose technology governance customs have not been reviewed since listing.
02 — Governance Review

Technology Governance Advisory

A longer engagement that examines the organisation's technology governance customs — the technology committee structure, the approval processes for material change, the relationships between the executive and the board's relevant committees, and the small documentation customs that record material decisions.

The output is a written governance review with a sequenced recommendation. Suited for organisations preparing for a regulatory review or a deliberate governance uplift.

  • Committee structure and terms of reference reviewed
  • Approval and escalation process documentation examined
  • Executive-to-board information flow assessed
  • Written review with sequenced recommendations
  • Completed within four to six weeks

Process Steps

1

Scoping and document collection

Agree scope. Collect committee charters, meeting minutes, policy documents and approval records.

2

Structured interviews

Interview committee chairs, technology executives and company secretarial function.

3

Draft governance review

Produce written review with observations and sequenced recommendations.

4

Review meeting and final delivery

Present findings to relevant leadership. Deliver finalised governance review document.


03 — Committee Workshop

Risk Committee Workshop

A two-day workshop for the executives and board members who attend a technology risk committee. Together we examine the customs of the committee — the agenda, the supporting papers, the manner of presenting risk, the rhythm of decision-making — and write a small set of practical refinements.

We do not propose a new framework wholesale; we refine the customs that already exist. The workshop closes with a written committee handbook the chair may carry forward.

  • Two full days with executives and board members present
  • Current agenda, papers and meeting customs examined
  • Written committee handbook as the closing output
  • Refinement of existing customs, not wholesale replacement

Process Steps

1

Pre-workshop review

Review recent committee papers, minutes and supporting materials before the workshop dates.

2

Day one — current practice

Map the committee's current customs. Identify what serves oversight well and what does not.

3

Day two — refinements and handbook drafting

Agree practical refinements together. Draft the committee handbook during the session.

4

Final handbook delivery

Deliver the finalised committee handbook, ready for the chair to use at the next committee meeting.

Risk Committee Workshop
Suitable for: newly constituted risk committees; committees whose meetings have grown procedural rather than substantive; organisations whose chair wishes to improve the quality of committee discussion before the next examination or reporting cycle.

— Choosing the Right Engagement

Which Engagement Fits Your Organisation's Current Situation?

Feature Posture Conversation Governance Advisory Committee Workshop
Duration 2–3 weeks 4–6 weeks 2 days + prep
Fee (MYR) RM 945 RM 2,820 RM 1,290
Risk posture covered
Governance customs examined
Board/committee attendance
Written deliverable
Regulatory review preparation
Best suited for Boards wanting a clear view of exposures Organisations with governance maturity questions Active committees seeking to improve their practice

— Standards Applied

The Protocols We Hold to Across All Engagements

Strict Confidentiality

All client materials, discussions and findings are held in strict confidence. No engagement is referenced in our external communications without written consent.

Written Scope Before Commencement

Every engagement commences from a written scope document, agreed and signed by both parties. No work proceeds without this agreement in place.

Malaysian Regulatory Literacy

All advisers maintain current familiarity with BNM's Risk in Technology Policy Documents, the Securities Commission's corporate governance code and SSM expectations.

Senior Adviser Continuity

The adviser agreed at the engagement outset conducts the work through to delivery. Engagements are not reassigned to junior staff after initial introductions.

Draft Review Included

Every written deliverable is shared in draft for client review. One round of substantive revision is included within the fixed engagement fee.

No Vendor Interest

We hold no referral arrangements with technology vendors or implementation firms. Our assessments are written without commercial interest in any particular recommendation.


— Engagement Fees

All Fees in Malaysian Ringgit. Fixed. No Retainer.

Posture Conversation

RM 945

Fixed fee · Single engagement

  • Written posture note
  • 5 exposure categories reviewed
  • Draft review included
  • 2–3 week completion
Enquire
Committee Workshop

RM 1,290

Fixed fee · Two-day engagement

  • Two full workshop days
  • Written committee handbook
  • Board and executive attendance
  • Pre-workshop paper review
Enquire

— Begin Here

Not Certain Which Engagement Applies?

A brief preliminary conversation will help determine whether one of the three engagements described here is well-matched to your organisation's current position — and if so, which one.

Request a Conversation