I & M Bank House 3rd Floor, 2nd Ngong Avenue
0110-835-834
info@bellmacconsulting.com

Governance, Risk Management, & Compliance (GRC)

GRC is a strategic framework that integrates governance, risk management, and compliance across all departments to minimize risks, reduce costs, and enhance efficiency

It is a strategy that necessitates organization-wide cooperation to produce outcomes that adhere to internal standards and procedures established for each of the three core functions.

Governance/ Corporate Governance

Effective corporate governance ensures transparency, accountability, and alignment of stakeholder interests. At Bellmac Consulting LLP, we help you establish a robust governance structure with clear policies, procedures, and accountability frameworks, leveraging GRC technologies to keep your organization on track.

Risk Management/ Enterprise Risk Management

Enterprise risk management safeguards business value by optimizing risk profiles and meeting corporate objectives. We provide consultancy, managed services, risk culture assessments, and business continuity planning to help organizations mitigate risks effectively, as well as advice on the full range of risk management.

Compliance/ Corporate Compliance

Regulatory non-compliance can lead to financial losses and reputational damage. Organizations must stay ahead of evolving regulations while ensuring cost-effective compliance. Bellmac offers comprehensive advisory and support on regulatory compliance and registrations, covering:

  • Tax & Social Security: Kenya Revenue Authority, NSSF, NHIF
  • Investment & Licensing: Kenya Investment Authority, Communications Authority, Betting Control & Licensing Board, Energy Regulatory Commission
  • Trade & Standards: Export Promotion Council, KEBS, National Environment Management Authority
  • Sector-Specific Compliance: Sacco Societies Regulatory Authority, Tourism Regulatory Authority,Energy and Petroleum Regulatory Authority.

Our Governance, Risk Management, and Compliance (GRC) Services include:

1. Legal & Compliance Audit

A Legal & Compliance Audit ensures an organization complies with applicable laws and regulations, mitigating risks of penalties and fines. Our audits assess awareness and adherence to statutory requirements across industries.

Our Legal and Compliance Audits cover:

Each industry has different requirements, but primarily our Legal and Compliance Audits are performed on the following legal matters:

  • Statutory Law Compliance – This audit assists in identifying the strength of compliance of the organization’s policies, operating and risk management procedures to the applicable legal and regulatory framework.
  • Employment and Labour Laws Compliance. nsures adherence to labor laws, safeguarding employee rights . The Ministry of Labor regularly audits businesses to make sure they are abiding by the relevant laws and guidelines.
  • Data Security requirements compliance– A company that keeps private customer information is legally obligated to keep it secure from theft and misuse. A compliance audit assesses an organization’s measures to protect customer data, ensuring secure handling, modern encryption, and compliance with data protection laws.
  • Compliance Checklists and Compliance Reports– We draft compliance checklists to be used to monitor legal compliance and compliance reports which includes recommendations and proposals on the corrective measures to address areas of non-compliance discovered during Legal and Compliance Audits.
  • Regulatory Health Checks– We assess regulatory compliance controls, including policy documentation, employee training, management oversight, and internal compliance measures. Our health checks focus on:
    • Staff awareness of legal and regulatory obligations.
    • Effectiveness of compliance controls.
    • Identification and resolution of non-compliance issues.
  • Compliance Training- We offer tailored compliance training for businesses and employees to enhance regulatory understanding and adherence.

2. Corporate Governance Audit

Strong corporate governance enhances business stability, profitability, and resilience. An effective governance framework aligns objectives, policies, and risk limits with an organization’s size and complexity. The Board of Directors is responsible for establishing and enforcing this framework. At Bellmac, our accredited Governance Auditors conduct audits for statutory bodies, government agencies, NGOs, and private companies, leveraging industry expertise to ensure your business runs successfully.

Our Corporate Governance Audits cover:

  • Key Governance Areas: The Board of Directors, Ethical Leadership and Corporate Citizenship, Accountability, Risk Management and Internal Control, Transparency and disclosure, Shareholder Rights and obligations, Stakeholder Relationships, Compliance with Laws and Regulations and Sustainability and Performance Management.
  • Governance reports:We draft governance reports that identify governance gaps with actionable recommendations to address the gaps identified.
  • Policy & Framework Development: Assisting in drafting and reviewing governance policies, procedures, and safeguards.to enhance governance.
  • Board Training & Workshops: Providing tailored corporate governance training for leadership teams.

 

3. Bellmac Social & Ethical Audits

Companies today are accountable for their entire value chain, requiring compliance with laws, international standards, and ethical best practices. Consumers and regulators increasingly prioritize fair labor practices and social responsibility as key indicators of product quality.

Our Social and Ethical Audit Service helps businesses assess and enhance their social performance, ethical practices, and legal compliance. We conduct thorough evaluations of policies, procedures,contracts,environmental, social risk, community, corporate governance, financial reporting, data privacy, anti-corruption, human rights and operations to identify risks and improvement opportunities.

Our Approach

  • Customized Audits: Tailored to your business needs, goals, and industry challenges.
  •  Comprehensive Assessments: Our audit covers a broad range of areas that impact your Company’s social and ethical practices covering contracts, environmental impact, social risk, governance, financial transparency, data privacy, anti-corruption, and human rights.
  • Experienced Auditors: Our team of auditors has extensive experience in conducting Social and ethical audits across all industries.
  • Actionable Recommendations: After completing the audit, we provide you with a detailed report that includes practical steps to strengthen ethical practices,taking into account the unique needs and challenges of your business.
  • Follow-Up Support: We understand that implementing changes can be challenging, and therefore, we offer guidance to implement changes effectively.

Key Audit Areas

  1. Economic Impact – The Audit assesses the costs and benefits of a project or practice, analyzing resource allocation and the impact on community development, healthcare infrastructure, and housing needs in impoverished areas.
  2. Environmental Responsibility – The Audit considers the environmental impact of a project or practice, including potential pollution of soil, water, or air and its effect on human health. A social audit in this area examines the project’s responsible execution and sustainable practices.
  3. Social risk – The Audit assesses the risk of negative consequences, such as protests, violence, litigation, or criminal activities, and examines specific impacts on marginalized groups, such as indigenous peoples, women, children, and migrants.
  4. Community –The Audit Examines community-based projects that offer services or employment to residents in a specific area and empowers communities to take ownership of these opportunities.
  5. Human Rights- The Audit conducts checks for human rights abuses in certain areas, including child labor, freedom of association and assembly, freedom from discrimination, and indigenous people’s rights.
  6. Contracts – The Audit evaluates a project’s impact on individuals under contract with a company, assessing fair pay, humane treatment, and accessibility to medical treatment if injured on the job.
  7. Governance and Board Oversight: The effectiveness of the board of directors and its role in setting the tone at the top of the organization. The audit assesses the board’s composition, independence, and decision-making processes related to ethical and compliance matters.
  8. Code of Conduct and Ethics: This is the primary document that sets out a Company’s expectations for ethical behavior. The audit reviews the adequacy of the code of conduct and ethics and assess whether it is effectively communicated and understood by employees.
  9. Risk Management: The audit assesses the Company’s risk management processes related to ethical and compliance matters, including the identification, assessment, and mitigation of risks.
  10. Whistleblower Program: The audit assesses the effectiveness of the Company’s whistleblower program, including the policies and procedures for reporting and investigating allegations of ethical or legal violations.
  11. Vendor and Supplier Management: The audit assesses the Company’s vendor and supplier management processes, including due diligence and monitoring procedures, to ensure that the Company is not working with unethical or non-compliant partners.
  12. Employee Training and Communication: The audit assesses the effectiveness of the Company’s employee training and communication programs related to ethical behavior and compliance with applicable laws and regulations.

Key Steps in Our Social and Ethical Audits

At Bellmac, we prioritize helping our clients build a strong ethical culture and positive social impact. Our Social and Ethical Audits follow these key steps:

  • Records of charitable contributions: We review records of donations and philanthropic activities.
  • Volunteer Engagement: We assess the organization’s participation in community service and volunteer events.
  • Organizational Transparency: We evaluate communication and decision-making processes to ensure openness and accountability.
  • Work Environment: We examine policies on employee health, safety, and overall well-being.
  • Fair Compensation:We assess salary structures and wage policies for equity and fairness.
  • Community initiatives:We evaluate efforts to support and engage local communities.
  • Diversity and Inclusion: We review hiring practices, training programs, and inclusion policies.
  • Accounting and Financial Transparency:We assess the accuracy and openness of financial reporting practices.
  • Company Values:We examine whether the organization promotes clear values such as integrity, respect, diversity, and safety to foster an ethical workplace culture.
  • Code of Ethics and Conduct
    We assess the effectiveness and integration of a company’s ethical standards by examining:

    • Whether company values are reflected in the Code of Ethics and embedded in decision-making.
    • Alignment between the Code of Ethics and the Code of Conduct, especially in addressing compliance risk areas.
    • Guidance provided by the Code of Conduct on applying ethical principles to real-world scenarios (e.g., foreign operations, Foreign Corrupt Practices Act rules (FCPA) compliance on gifts and entertainment).
    • Communication of the Code to all employees, directors, and agents.
    • Measures taken to ensure employees understand and apply the Code in daily operations.
    • The Effectiveness of employee training on ethics and conduct.
  • Risk Assessment
    Following our review of ethical guidelines, we perform a comprehensive risk assessment to identify compliance risks, considering changes in the business environment, laws, and regulations. We evaluate:

    • Risks related to business practices, including anti-bribery, anti-kickback, asset protection, and harassment prevention.
    • Risks specific to individual business units, with tailored assessments per unit.

Findings inform the development of robust risk mitigation strategies, policies, and training to ensure legal compliance and ethical operations.

  • Ethics and Business Conduct Policies
    We review company policies to ensure they effectively address high-risk areas identified during the audit. Our process includes:

    • Evaluating policy coverage of ethical and compliance concerns.
    • Interviewing employees to gauge awareness and understanding.
    • Identifying policy gaps where employee awareness is low, to recommend targeted training.

This ensures the organization maintains a strong, well-understood ethical foundation across all levels

  • Awareness Training Audit
    We assess the effectiveness of a company’s ethics and compliance training programs—essential for risk mitigation and reputational protection. Our review includes:

    • Training Delivery: Evaluating whether training is conducted online or in-person and if it effectively reaches all employees.Determining how completion of the course is measured
    • Completion Metrics:
      Reviewing how course completion is defined (e.g., quizzes, assessments) to ensure knowledge retention.
    • Tracking & Follow-up: Assessing systems used to track training completion rates, and measures taken to follow up with employees who fail to complete or pass required courses.
  • Inquiry and Reporting Mechanisms
    We evaluate the effectiveness of systems used to report and investigate ethical or legal concerns raised by employees, suppliers, customers, and other stakeholders. Our audit covers:

    • Prioritization of Concerns
      Assessing whether the company prioritizes concerns based on severity for timely resolution.
    • Formal Investigation Protocol
      Reviewing the formal process for assigning investigations to qualified personnel..
    • Investigation Guidelines and Consistent Standards
      Ensuring investigations follow established, objective, and consistent guidelines.
    • Documentation of Investigations
      Verifying proper systems are in place to formally record and report all investigations.
    • Adherence to Established Timelines
      Evaluating adherence to investigation timelines for effective issue resolution.
    • Investigation Quality
      Confirming thoroughness in determining the validity of concerns raised.
    • Decision Transparency
      Checking whether the company provides clear explanations for actions taken or not taken post-investigation.This ensures that the Company’s decision-making process is transparent and accountable.
    • Appropriate Management Approvals
      Ensuring appropriate approvals and expert consultations (e.g., legal, HR) are obtained before action.
    • Stakeholder Communication
      Evaluating how the company communicates investigation outcomes to reporting parties, reinforcing transparency and accountability.
  • Communication Program
    We assess the company’s communication strategy to determine how effectively it promotes ethics awareness and reinforces the importance of compliance across the organization.
  • Ethics and Compliance Program Evaluation
    Our team evaluates the implementation and ongoing effectiveness of the company’s ethics and compliance program. This includes reviewing the frequency of internal and external audits, testing of internal controls, and continuous program improvement to sustain a strong ethical culture.
  • Leadership Commitment
    We examine leadership’s role in setting the tone at the top—essential for embedding ethics and compliance into the company culture. Our audit includes:

    • CEO’s Statement: Reviewing formal declarations of ethical commitment across all business areas.
    • Reporting Structure: Assessing whether ethics violations can be reported directly to the CEO or Board of Directors.
    • Ethics & Compliance Committee: Evaluating the committee’s role in leading and overseeing the ethics program.

Automated Social and Ethical Audits and Anonymized Unethical Violation Reporting

In today’s complex business environment, upholding ethical standards is critical to avoiding legal risks, reputational harm, and loss of trust. We offer automated social and ethical audits alongside an anonymized reporting mechanism to help companies proactively detect and address ethical violations.

Overview

Our advanced software conducts in-depth audits across business operations including financial reporting, employee conduct, and vendor relationships to identify potential ethical breaches. The system flags risks and delivers actionable remediation insights.

Service Components

The service is divided into three main components: data collection, analysis, and reporting.

  • Data Collection
    We gather company-specific data—policies, procedures, employee records—and design a custom anonymized questionnaire addressing key areas such as:

    • Bribery & corruption
    • Discrimination & harassment
    • Conflicts of interest
    • Data privacy
  • Data Analysis
    Collected data is analyzed using AI and machine learning to detect patterns or anomalies suggesting ethical concerns. Our experts verify and categorize these findings for accuracy.
  • Reporting:
    We deliver a detailed, easy-to-understand report highlighting:

    • Identified violations
    • Severity assessment
    • Actionable recommendations prioritized by risk

Anonymized Social and Ethical Violations Reporting

We provide a secure online platform where employees can confidentially report unethical behaviour or social violations. Reports are reviewed by our compliance team, who coordinate with the company to investigate and resolve issues promptly.

Benefits to your Company

  • Comprehensive Analysis:End-to-end analysis across critical ethical and social areas
  • Real-Time Monitoring:Ongoing access to detect and manage emerging risks
  • Actionable Recommendations: Practical steps to address and prevent violations
  • Cost-Effective:Automated processes reduce time and resource expenditure
  • Reputation Management: Early detection safeguards brand integrity
  • Legal Compliance:Ensures adherence to laws and regulatory standards

Social and Ethical Training

Bellmac’s Social and Ethical Training Service equips organizations with the tools to embed integrity, accountability, and responsible decision-making into their culture. Our tailored programs are designed to address the specific needs of businesses across all sectors.

Overview

Our training empowers employees with practical knowledge and skills to handle ethical challenges and promote socially responsible behavior at all levels of the organization. Key training areas include:

  1. Corporate Social Responsibility (CSR) – Understanding CSR, its importance, and its benefits to both business and society.
  2. Stakeholder Engagement – Identifying stakeholders and strategies for meaningful engagement.
  3. Sustainability – Incorporating sustainable practices into operations.
  4. Corporate Philanthropy – Leveraging philanthropy for social impact.
  5. Diversity, Equity & Inclusion (DEI) – Fostering an inclusive and equitable workplace.
  6. Socially Responsible Investing – Attracting ethical investors and the value it brings.
  7. Impact Measurement and Evaluation – How the company can measure the impact of its CSR activities and the tools and methodologies for impact measurement and evaluation.
  8. Understanding the importance of ethics in business.
  9. Identifying ethical issues and dilemmas.
  10. Developing ethical decision-making skills.
  11. Understanding legal and regulatory requirements.
  12. Creating a code of ethics.
  13. Reporting ethical concerns and violations.
  14. Promoting ethical behavior in the workplace.
  15. Handling conflicts of interest.
  16. Conducting ethical audits and assessments.

Our Approach

We deliver training that is interactive, practical, and engaging, using:

  • Real-world case studies
  • Role-playing simulations
  • Group discussions
  • Multimedia presentations

Our expert trainers bring current insights and foster open dialogue in a supportive learning environment.

Benefits

Our Business Social and Ethical Training Service provides a range of benefits for your Company, including:

  • Boosts employee morale and engagement
  • Strengthens organizational trust and transparency
  • Reduces risk of ethical breaches and legal exposure
  • Enhances reputation and brand image
  • Increases customer trust and loyalty

Bellmac’s Social and Ethical Training Service is a strategic investment in building a values-driven, compliant, and resilient organization. Let us help you create a workplace grounded in ethics and social responsibility.

4. Environmental, Health And Safety (EHS) Audit

Bellmac’s EHS Audit Services ensure your organization complies with all applicable regulations, including:

  • Environmental Laws: Compliance audits based on the Environmental Management and Co-ordination Act (EMCA), 1999 and related regulations. We provide a detailed Environmental Legal Register tailored to your operations.
  • Health and Safety Laws: Compliance audits aligned with the Occupational Safety and Health Act (OSHA), Chapter 514, including provision of a Statutory Health and Safety Register.

Environmental, Health and Safety Audits offer a range of benefits to the organization including:

  • Avoid penalties, fines, and criminal liability
  • Verify compliance with local and national legal frameworks
  • Evaluate adequacy of risk assessments across operations
  • Enhance employee safety and reduce workplace hazards
  • Minimize legal exposure and litigation risk

Support operational compliance with EHS standards