Logo
Contact Us

ServicesGovernance, Risk & Compliance

Our Mantra for

Governance, Risk & Compliance

Controls that keep pace with regulation.

Building the control environment and regulatory standing a growing business needs AML, internal controls, enterprise risk, and policy documentation before a regulator or investor asks for it.

What we cover

A programme, not a binder.

The law asks for a risk-based programme: who you serve, how money moves, and what staff do when something looks wrong. Registration is the start. We design and document the rest so it matches this business.

  1. AML compliance

    goAML registration and DNFBP obligations a programme proportionate to what you actually do, written so it can be operated, not only filed.

  2. Internal controls & enterprise risk

    Internal controls design and enterprise risk-framework advisory the risks that would actually stop the business, named, owned, and pointed at the control that is supposed to hold them.

  3. Business risk advisory

    Profitability, liquidity, and operational risk reviews so the board sees where cash and margin leak before the year-end pack says so.

  4. Policy documentation & compliance-officer support

    Policies staff can follow on a Tuesday, and support for the compliance officer who has to run them not a binder that describes an ideal.

How we work

Map the risk. Then make it runnable.

First we see how money actually moves. Then a programme people can operate. Then we test it so the next inspection is a walk through the file, not a reconstruction.

  1. Risk map

    Customers, products, geographies, delivery channels, and how funds move. An assessment that names inherent and residual risk including what has changed since the last version sat in a drawer.

  2. Design

    Framework, policies, and standards matched to that map. Roles named, including the compliance officer. A programme the board can approve because it describes this business.

  3. Stand-up

    Files, screening, goAML where it is required, and the first live process under the new standard. The programme starts when real work runs not when the Word document is saved.

  4. Test and train

    Independent review against how the controls actually run, training for the people who have to use them, and remediation with owners and dates.

Registration is not the programme. The programme is what staff do when something looks wrong.

FAQs

Before a regulator asks.

Registration is a login. The programme is what staff do on a Tuesday. These are the questions that come up before an inspection.

  • No. goAML is a login. Federal Decree-Law No. 10 of 2025 requires a risk-based programme: who you serve, how money moves, and what staff do when something looks wrong. Registration is the start. We design and document the rest so it matches this business.

    At Mantra, we can design the programme so it matches this business not only the login. Let's talk.

Let's talk.

Tell us where the numbers feel unclear. We'll listen first.