The governance failings documented by Malaysia's Royal Commission of Inquiry into Lembaga Tabung Haji (TH) have sparked urgent appeals from academic experts for sweeping institutional reforms that would fundamentally reshape how the hajj fund protects the savings of Muslim Malaysians. The RCI report, released publicly in late July following parliamentary debate, identified significant management and governance weaknesses spanning 2014 to 2020, presenting 25 distinct recommendations for systemic improvement.

Professor Datuk Dr Norman Mohd Saleh from Universiti Kebangsaan Malaysia's Faculty of Economics and Management has identified the weakness of existing risk oversight as a critical vulnerability requiring immediate remediation. He argues that current standard operating procedures treat risk warnings from both the Audit Committee and Risk Management Committee as advisory recommendations that board directors can ignore at will. This permissive framework has allowed management to override cautionary advice, potentially exposing depositors' funds to avoidable losses. The professor contends that the Risk Management Committee must be granted substantially greater authority to influence major strategic and investment decisions, transforming it from a passive warning mechanism into an active gatekeeper of high-risk ventures.

Central to Professor Saleh's analysis is the absence of mandatory coordination between the committees advising the board and the board's actual decision-making processes. He proposes that risk assessments from both committees must be formally integrated into every significant financial decision, creating an institutional structure where risk considerations cannot be bypassed through procedural shortcuts. Additionally, he recommends that Bank Negara Malaysia assume direct supervisory responsibility over Tabung Haji's liquidity management and capital adequacy assessments, introducing external regulatory scrutiny from the country's central banking authority. This external layer of oversight would complement internal governance mechanisms and provide independent validation of financial management practices.

The appointment and recruitment processes for Tabung Haji's leadership have emerged as another vulnerability area requiring transparent restructuring. Professor Saleh emphasises that the Nomination and Remuneration Committee's selection procedures must operate according to clearly articulated merit-based criteria, insulated from executive preference and political influence. Given that Tabung Haji functions as a non-listed entity without the annual general meeting accountability mechanism available to publicly traded companies, the appointment process becomes the primary mechanism for ensuring leadership quality and integrity. Professor Saleh argues that without transparent merit selection, the institution lacks sufficient accountability to the depositors whose capital it manages.

Associate Professor Dr Mohd Hafizuddin Syah Bangaan Abdullah, also from UKM's Faculty of Economics and Management, advocates for a fundamental philosophical shift from reactive to proactive risk management throughout the institution. He proposes that before any major investment proposal reaches formal approval, Tabung Haji should establish explicit investment tolerance boundaries, obtain independent risk assessments, conduct rigorous stress testing of potential scenarios, and prepare documented exit strategies for all high-value commitments. This preventative approach would embed risk analysis into the investment evaluation process itself, rather than waiting for problems to emerge after capital has been deployed.

Professor Abdullah introduces the concept of a red-flag escalation mechanism that would automatically elevate decisions to the board level when predetermined risk thresholds are breached, when independent assessments identify material gaps in planning, or when conflicts of interest are identified. Rather than proceeding through standard approval pathways, such flagged decisions would be diverted to full board consideration, preventing departmental-level managers from implementing high-risk investments without adequate senior oversight. This structural innovation would create a circuit-breaker mechanism preventing the management override practices that the RCI investigation documented.

A significant institutional restructuring Professor Abdullah recommends involves separating the Risk Management Committee from the Audit Committee. These functions, while often combined in simpler organisations, serve fundamentally different purposes within a complex financial institution like Tabung Haji. The risk function focuses on forward-looking identification of emerging threats and vulnerabilities, while audit functions concentrate on backward-looking compliance verification and accuracy confirmation. By maintaining these as distinct committees with separate reporting lines and personnel, Tabung Haji could ensure that risk assessment receives adequate specialised attention without being subsumed within compliance-focused auditing.

Professor Abdullah also endorses the RCI's recommendation that active politicians be excluded from serving as chairman, board members, or subsidiary directors within the Tabung Haji ecosystem. Political involvement introduces conflicting incentives and can compromise the institution's independence in making financially prudent decisions when those decisions might carry political consequences. Complementing this political separation, appointment criteria should be tightened to reflect a formal skills matrix identifying technical competencies necessary for effective governance in a high-value investment context.

Performance monitoring by the board must centre on three critical indicators that Professor Abdullah identifies as fundamental to institutional health. Regular review of audited financial positions ensures accurate understanding of the institution's true economic condition. Consistent assessment of reporting quality under Malaysian Financial Reporting Standards confirms that stakeholders receive faithful representations of financial reality. Systematic disclosure and monitoring of related-party transactions prevents self-dealing arrangements that could redirect institutional resources toward connected parties rather than depositor interests.

Executive compensation structures require fundamental redesign to align management incentives with long-term institutional success rather than short-term financial engineering. Professor Abdullah recommends linking management remuneration to long-term performance metrics that account for risk-adjusted returns, preventing compensation systems from inadvertently rewarding excessive risk-taking or unsustainable performance inflated through accounting adjustments. Establishing clawback mechanisms would allow the institution to recover incentives awarded based on subsequently inaccurate or ultimately unsustainable financial information, creating personal financial consequences for executives whose decisions prove to have been built on unreliable data.

The 25 recommendations contained in the RCI report reflect widespread recognition among Malaysia's policy community that Tabung Haji's institutional framework requires comprehensive modernisation. The fund manages savings belonging to hundreds of thousands of Malaysian Muslims saving for hajj pilgrimage, making governance failures matters of profound personal significance for families who have contributed to these accounts over decades. The governance vulnerabilities documented by the RCI represent not merely technical failings but breaches of fiduciary responsibility affecting some of Malaysia's most vulnerable savers.

Implementation of these reforms will require sustained political commitment and institutional discipline across multiple years. The recommendations demand not simply procedural adjustments but cultural transformation within Tabung Haji toward prioritising depositor protection over alternative institutional objectives. Success will depend on whether the government demonstrates willingness to impose genuine structural constraints on management autonomy, whether board members develop capacity to exercise independent judgment against executive preferences, and whether the institution develops tolerance for the slower decision-making pace that proper governance entails. The RCI report thus represents not a conclusion but rather the beginning of potentially lengthy institutional reform requiring careful monitoring and sustained external accountability.