The findings of the Royal Commission of Inquiry into Lembaga Tabung Haji have sparked urgent recommendations from governance experts for sweeping institutional reforms aimed at protecting Muslim depositors' savings. Released publicly on July 29, the RCI report identified significant management and governance deficiencies spanning 2014 to 2020 and presented 25 concrete proposals for remediation. The report subsequently formed the basis for parliamentary debate during a special Dewan Rakyat sitting, underlining the seriousness with which lawmakers view the institution's past operational failings.

According to Prof Datuk Dr Norman Mohd Saleh from Universiti Kebangsaan Malaysia's Faculty of Economics and Management, the core problem lies in inadequate checks and balances within TH's decision-making architecture. He emphasises that internal risk control mechanisms—principally the Audit Committee and Risk Management Committee—currently function merely as advisory bodies whose warnings can be easily dismissed by senior management. This structural weakness has allowed high-risk financial moves to proceed without sufficient scrutiny, jeopardising the retirement and pilgrimage savings of hundreds of thousands of Malaysian Muslims.

The professor advocates for a fundamental recalibration of institutional authority structures. Risk committee warnings, he argues, should be integrated as mandatory components of board deliberations rather than optional counsel. More radically, the Risk Management Committee should gain expanded powers to shape investment strategy and strategic decisions, thereby curtailing what governance specialists term "management override"—the practice whereby senior executives disregard risk advice to pursue favoured initiatives. Such structural changes would establish genuine constraints on executive discretion and embed prudential discipline into organisational culture.

Beyond internal reforms, Prof Mohd Saleh proposes that TH operate under formal oversight by Bank Negara Malaysia, similar to frameworks governing conventional financial institutions. This supervisory relationship would introduce specialised expertise in liquidity risk assessment and capital adequacy evaluation, domains requiring technical sophistication that general regulatory bodies may lack. The move would represent a significant shift in TH's regulatory status, acknowledging that managing investment funds at the scale TH operates demands banking-sector-grade supervision.

The appointment and nomination process constitutes another vulnerability requiring attention. Currently, the Nomination and Remuneration Committee selects board members and key executives, yet this process frequently succumbs to executive influence and political patronage. Prof Mohd Saleh stresses that transparent, merit-based selection criteria divorced from political considerations are essential. Unlike publicly listed companies that answer to shareholders at annual general meetings, TH lacks such formal stakeholder accountability mechanisms, rendering independent appointment processes doubly important as a governance safeguard.

Associate Professor Dr Mohd Hafizuddin Syah Bangaan Abdullah, a finance and risk management specialist at UKM, expands on implementation details for proactive risk management. He recommends that TH establish explicit investment tolerance thresholds—formally defining how much risk the institution is willing to accept—before committing capital. Every significant investment proposal should undergo independent risk assessment, stress testing under adverse scenarios, and documented contingency planning including exit strategies. This methodology shifts institutional culture from reactive crisis management to preventive risk governance.

Dr Mohd Hafizuddin advocates establishing a "red-flag escalation mechanism" whereby particularly high-stakes decisions automatically trigger escalation to the board regardless of normal approval hierarchies. If risk tolerance limits face breach, if independent analysis reveals material gaps, or if conflict-of-interest concerns arise, decisions should bypass standard bureaucratic pathways and receive board-level attention. Such mechanisms prevent lower-tier decision-makers from burying inconvenient risk signals and ensure senior leadership confronts material uncertainties.

A critical structural reform involves separating the Risk Management Committee from the Audit Committee. While both bodies address institutional oversight, their functions diverge substantially: the risk function anticipates emerging threats and vulnerabilities, whereas the audit function focuses on compliance verification of past decisions. Complex, investment-heavy organisations like TH benefit from maintaining these as distinct, independently functioning units. Merging them risks conflating forward-looking risk anticipation with backward-looking compliance auditing, potentially degrading both functions.

The RCI report's recommendation that active politicians be excluded from TH leadership positions reflects recognition that political patronage has historically compromised investment discipline. Dr Mohd Hafizuddin emphasises that board member selection should flow from transparent skills matrices identifying required competencies across finance, investment management, risk oversight, and governance domains. Political affiliation should be irrelevant to appointment decisions; technical qualification and independence should predominate.

Financial transparency forms another reform pillar. The board should regularly scrutinise three critical metrics: audited financial position, the quality of financial reporting under Malaysian Financial Reporting Standards, and disclosures regarding related-party transactions. Enhanced RPT reporting is particularly significant given historical concerns that TH management has favoured connected parties in investment decisions. Rigorous RPT monitoring, combined with conflict-of-interest protocols, can significantly reduce scope for self-dealing transactions.

Executive compensation structures require realignment with prudential objectives. Rather than rewarding short-term performance metrics, remuneration should reflect long-term sustainable outcomes adjusted for risk profile. Critically, institutions should implement clawback provisions allowing recovery of bonuses if subsequent evidence reveals that incentive awards rested on inaccurate information or proved financially unsustainable. Such mechanisms create personal accountability for senior management, aligning their financial interests with depositor protection.

The broader reform agenda reflects a transition from reactive oversight to institutional design emphasising early detection and prevention of governance failures. Current regulatory frameworks tend to intervene only after problems surface and escalate. The RCI recommendations pivot toward anticipatory governance, embedding risk discipline into decision processes before high-cost mistakes occur. This preventive orientation requires coordination among TH management, its board, relevant government agencies, and BNM, with each party shouldering clear accountability for their governance domains.

The implications extend beyond TH itself. As Malaysia's largest Islamic savings and retirement institution, TH's governance failings have eroded public confidence in Islamic financial institutions more broadly. The 25 reform recommendations, if conscientiously implemented, could serve as a governance template for other large faith-based and government-linked financial entities managing public savings. For Malaysian and Southeast Asian observers concerned with institutional integrity and financial security, the RCI report's reception and implementation will constitute a significant test of whether governance reform rhetoric translates into genuine structural change.