Governance, Compliance &
Risk Advisory
Governance, Compliance &
Risk Advisory
Governance, Compliance &
Risk Advisory
Governance, compliance, and risk management form a critical foundation of BOM’s advisory offering—empowering clients to safeguard business continuity, protect their reputation, and operate confidently in complex regulatory environments. With deep knowledge of Saudi legal and regulatory systems, we help organizations build governance frameworks and compliance programs aligned with global best practices.
We support clients in designing and implementing effective compliance policies tailored to their sector, covering anti-bribery and anti-corruption, anti-money laundering and counter-terrorism financing, sanctions compliance, data privacy, and governance best practices. Our work combines legal precision with a practical understanding of how compliance programs operate within organizations at different stages of maturity.
Corporate governance standards in Saudi Arabia have been elevated substantially over the past decade. The CMA Corporate Governance Regulations (Resolution 8-16-2017 as amended) set detailed requirements for listed companies on board composition, audit and nomination committee structures, related-party transaction policies, and annual governance disclosure. The Companies Law requirements for board independence, internal controls, and shareholder rights apply across both public and private companies. For financial institutions, SAMA’s governance circulars impose additional standards on board oversight, risk management frameworks, and senior management accountability. We advise boards, audit committees, and senior management on their obligations and liabilities under these frameworks, and assist in designing governance structures that satisfy regulatory requirements while supporting sound business decision-making.
Our AML/CFT practice advises financial institutions, designated non-financial businesses and professions (DNFBPs), and corporates on their obligations under the Anti-Money Laundering Law (Royal Decree M/20 of 1439H), SAMA AML guidelines, and FATF standards. We design risk-based compliance programs, advise on customer due diligence and enhanced due diligence procedures, and support clients in engaging with the Financial Intelligence Unit (FIU) and regulatory authorities on suspicious activity reporting and enforcement matters.
We also conduct privileged internal investigations into allegations of fraud, bribery, financial misconduct, and regulatory breaches — providing clients with factual findings, legal analysis, and remediation recommendations that protect privilege while supporting informed decision-making by boards and audit committees.
Main contact
Kelsey Mason
CEO
Kelsey Mason
CEO
Kelsey Mason
CEO
