The Royal Commission of Inquiry report on Tabung Haji (TH), released in late July, has sparked urgent calls from governance specialists for fundamental restructuring of how the Islamic pilgrimage savings institution manages risk and makes critical financial decisions. The document, which examined management lapses between 2014 and 2020, has become a watershed moment prompting parliament to debate remedial measures, with experts now detailing what comprehensive institutional reform must entail.

According to Professor Datuk Dr Norman Mohd Saleh from Universiti Kebangsaan Malaysia's Faculty of Economics and Management, the most pressing issue lies in how risk assessments are currently treated within TH's decision-making architecture. The institution's Audit Committee and Risk Management Committee frequently issue warnings that board directors may simply dismiss as non-binding guidance rather than mandatory constraints on strategic actions. This permissive framework has allowed management to override safeguards designed to protect the religious savings of millions of Muslim Malaysians, creating conditions where poor investment choices proceed unchecked until catastrophic losses materialise.

Prof Norman contends that TH's internal checks and balances require not merely cosmetic adjustment but structural empowerment, particularly for the Risk Management Committee. Rather than functioning as an advisory body whose opinions carry no enforceable weight, the RMC must be granted genuine authority to influence or delay strategic and investment decisions until its concerns are adequately addressed. This shift would require rewriting standard operating procedures to make risk committee recommendations binding unless formally overridden through documented board consensus, creating an institutional culture where financial prudence supersedes convenience.

A critical deficiency Professor Norman identified centres on TH's current lack of direct regulatory oversight from Bank Negara Malaysia. Unlike commercial banks and other financial institutions subject to BNM's supervisory framework, TH operates with limited external assessment of liquidity risks and capital adequacy relative to its enormous portfolio of investment holdings. This regulatory gap leaves TH vulnerable to accumulating structural weaknesses undetected until they reach crisis proportions, whereas proactive external supervision could identify deteriorating conditions and trigger corrective measures before depositors' interests face material jeopardy.

The appointment process for TH's board and senior management requires equal overhaul, Prof Norman argued. The Nomination and Remuneration Committee must select candidates according to transparent, integrity-centred merit criteria rather than allowing political connections or executive preferences to dominate selections. TH's status as a non-listed entity further complicates accountability, depriving it of the annual general meeting forum where shareholders can interrogate management performance and demand changes. Without this built-in accountability mechanism, TH desperately needs compensatory safeguards through rigorous, impartial board recruitment.

Associate Professor Dr Mohd Hafizuddin Syah Bangaan Abdullah, also from UKM's economics faculty with specialist expertise in finance and risk management, expanded on these governance imperatives by advocating proactive rather than reactive institutional orientation. Currently, TH tends to identify problems only after investments have gone wrong, requiring expensive remediation. Instead, risk management protocols should operate upstream, establishing clear investment appetite thresholds before any major transaction receives approval, conducting stress tests under adverse market scenarios, and documenting exit strategies in advance. This preventive posture demands that risk assessment become woven into investment approvals rather than examined retrospectively.

Assoc Prof Hafizuddin introduced the concept of escalation mechanisms for decisions breaching predetermined risk tolerance limits. Under such a system, major investments triggering red flags would automatically bypass normal approval procedures and require full Board of Directors consideration regardless of management recommendation. Additionally, he argued that TH's Risk Management Committee should operate independently from the Audit Committee, since risk management requires forward-looking foresight about emerging threats, whereas audit functions focus retrospectively on compliance verification. Conflating these distinct responsibilities compromises both functions' effectiveness.

The composition of TH's board itself demands restructuring to eliminate systemic conflicts of interest. Assoc Prof Hafizuddin endorsed the RCI's recommendation against appointing active politicians as board chairpersons or members, a measure that would insulate TH from political pressure influencing investment decisions made primarily in depositors' interests rather than partisan advantage. Appointment criteria should reference explicit skills matrices identifying required expertise in Islamic finance, capital markets, risk management, and governance rather than allowing credentials to remain vague or subjective.

Compensation structures for TH management warrant reform toward performance-based remuneration adjusted for risk outcomes, Assoc Prof Hafizuddin observed. Currently, executives may receive bonuses regardless of whether investment returns prove sustainable or rest on accounting treatments later reversed. Implementing clawback mechanisms allowing compensation recovery when performance metrics subsequently deteriorate would align management incentives with long-term institutional health rather than short-term metrics potentially achieved through unsound practices. The Board should regularly monitor audited financial positions under Malaysian Financial Reporting Standards, evaluate Related Party Transaction disclosures for conflicts, and assess reporting quality as core governance responsibilities.

The institutional challenge facing TH transcends merely implementing the RCI's 25 recommendations as isolated technical fixes. Rather, the report's findings indicate a governance culture requiring wholesale reorientation toward conservative financial stewardship, transparent decision processes, and genuine accountability to millions of Muslim Malaysians entrusting life savings to the institution. The parliamentary debate following the RCI report's tabling represents opportunity for legislative action establishing binding supervisory frameworks where currently voluntary guidelines prevail.

For Malaysia's broader financial system, TH's experience illustrates how institutional size combined with weak external oversight and political entanglement creates conditions for accumulating undetected risks. Banks and investment firms operate under rigorous BNM supervision precisely because regulators learned through previous crises that independent expert oversight prevents catastrophes. Extending comparable regulatory discipline to TH, while strengthening its internal governance infrastructure through the mechanisms experts have outlined, would substantially reduce future vulnerability to mismanagement.

The path forward requires sustained commitment from TH's leadership, supervising government agencies, and parliamentary committees to implement structural changes rather than accepting superficial compliance gestures. The stakes involve protecting the religious savings of pilgrims, maintaining institutional credibility essential for TH's fundraising legitimacy, and demonstrating that Malaysian governance structures can learn from past failures to construct more resilient institutional frameworks. Without genuine reformation, the lessons from TH's documented weaknesses will remain unheeded, leaving the institution vulnerable to repeating similar errors with potentially greater consequences.