Advisory · GRC & Internal Audit

Enabling stronger controls for Capital Market Institutions

Built primarily for CMA-regulated capital market institutions. Assessed by former CMA inspectors, so gaps get caught before a regulatory inspection, not after.
Inspection readiness
Ex-CMA review
Control
On paper
Under review
Compliance monitoring programme
Annual, CMA reporting
Documented
Holds up
Risk Assessment Questionnaire
Annual submission
Submitted
2 findings
Governance framework
Board and committee charters
Documented
Corrective action
Internal audit review
Article 62 · every 3 years
Due
Scheduled
Every finding ships with a corrective action plan
Report: one-time or quarterly
Trusted by
Governance · Risk · Compliance

Governance, Risk & Compliance for Capital Market Institutions

Avoid regulatory risk and potential penalties by strengthening your governance, risk, and compliance controls. We help capital market firms build stakeholder confidence by addressing areas of concern before they become findings, not after an examiner flags them.

Compliance

Compliance examinations, monitoring programs, and CMA reporting

Risk

Risk identification and management, including the annual Risk Assessment Questionnaire

Governance

Governance frameworks for CMIs

Internal audit

Internal Audit & Review

Let our ex-CMA inspectors assess and audit your organizational controls. Move with confidence knowing your firm complies with Article 62 of the Capital Market Institutions Regulations, and knowing exactly what to fix if it doesn't.

Article 62 · Capital Market Institutions Regulations
Reviews aligned to Article 62 of the Market Institutions Regulations, required at least once every three years
One-time engagements (3 to 6 months) or ongoing, quarterly-reported audits
Findings delivered with a clear, practical corrective action plan

Two ways to run it, one three-year clock

Review at least once every 3 years
Article 62 deadline
One-time engagement
3 to 6 months, closes with a report
3–6 months
Report
Ongoing audit support
Quarterly-reported, continuous visibility
Why Dal

Why Dal

Generic auditors work from a checklist. Ours worked inside the CMA's own inspection process, so they know the difference between a control that looks right on paper and one that actually holds up under regulatory review, before you find out the hard way.

Generic auditors

Work from a checklist

A control is ticked when the document exists.

Dal's ex-CMA inspectors

Worked inside the CMA's inspection process

A control passes when it holds up under regulatory review.

Proof

What clients say

Dal proved to be a great partner in enhancing our GRC functions. The success of our initial risk project demonstrated their value so clearly that we engaged them for a full-scale implementation across all GRC domains. To us, Dal isn't just a vendor, they're a strategic partner in navigating the capital markets regulatory environment.

AA
Abdulaziz Alsayyari
CEO, Sukuk Capital
GRC client

We couldn't be happier with Dal's support. They helped us navigate risk and regulatory requirements with clarity and simplicity. Their deep expertise and actionable insights were immediately implementable. What truly sets them apart is their genuine partnership, acting as a real extension of our team.

MA
Majed Al-Ruwaie
Head of Compliance, MEFIC
GRC client
Move Confidently

Meet Our Experts

Meet our advisory bench of ex-CMA professionals and capital market professionals, all on your side.
Image of Muhammed Alhije
Mohammed Alhije, CFA
 Market Risk & Investment Expert
Former Head of the Market Stability Risk Unit at the Capital Market Authority and former Investment Expert at the General Organization for Social Insurance (GOSI). He Holds a Bachelor's degree in Actuarial Science from King Fahd University of Petroleum and Minerals and is a CFA Charterholder.
Image of Noaf Alsolai
Nawaf Alsolai
GRC, Internal & External Audit Expert
Expert of Internal Audit, and former expert in Compliance of Capital Market Institutions at the Capital Market Authority’s Capital Adequacy Unit. As a former external auditor at KPMG and worked at Saudi Industrial Devolopments Funds (SIDF), he holds several professional certifications in audit and compliance, including CMA 2, GRCP, and GRCA.
Ibrahim bin Nafjan
Ibrahim bin Nafjan
GRC, Licensing, and Inspection Expert
Former team leader in the inspection of capital market institutions, with 15 years of experience at CMA and its operations. Specialized in compliance, licensing, GRC, and inspection. Former team leader at the CMA licensing. Holds professional certifications: CCO, GRCP, ICWIM, and CME-2.
Malek Alkawas
Malek Alkawas
GRC & Internal Audit Expert
A financial market GRC and internal audit expert with 24 years of experience. Former Head of Risk Management at Alistithmar Capital, Yaqeen Capital, and Saudi Fransi Capital. Former Head of Internal Audit at Al Rajhi Capital. He holds the Certified Anti-Money Laundering Specialist (CAMS) certification.
Image of Abdur Rahman Almazyad
Abdulrahman Almazyad
GRC and Licensing Expert
Former Banking License Supervisor at SAMA with 7+ years of experience in licensing and regulatory supervision. Skilled in license approvals, compliance oversight, and regulatory alignment. Holds an MBA from University of Dallas, and professional certifications Certified Compliance Officer (CCO).
A image placeholder for the client.
Manal Kubrawi
AML & Compliance Expert
Over 17 years of experience as an ex-CMA expert and former Head of Compliance, AML, & CTF at Alistithmar Capital. At the CMA, her experience spanned investment funds, compliance, and offerings. She holds the Certified Compliance Officer (CCO) and ICCO (International Compliance) certifications.
A image placeholder for the client.
Dima Alhurib
Senior IPO Readiness Specialist
Former investment banking and private equity professional who has extensive experience preparing and qualifying several companies for listing on the public Saudi financial market. She holds a bachelor's degree in Finance and Investment from Imam Muhammad ibn Saud Islamic University.
A image placeholder for the client.
Jehad Alsuwayyid
Licensing Project Manager
Experience establishing and managing set up for numerous financial institution & FinTech licensing clients. He holds a Bachelor's degree in Actuarial Science and Financial Mathematics from King Fahd University of Petroleum and Minerals. He is also Certified in CME-1 and CME-2.
Image of Jehad Alsuwayyid
Ammar Bukhamseen
Accounting and Finance Expert
Accounting and finance professional with proven experience at CMS MENA, Deloitte, and Dar Al Arkan. Skilled in accounting, auditing, and business analysis. Holds a Bachelor’s degree in Finance from KFUPM and has successfully completed Part 2 of the Certified Management Accountant (CMA) certification.
FAQ

GRC & Internal Audit FAQs

What CCOs and boards ask before an engagement.

Does Dal's internal audit ensure Article 62 compliance?
+
Our reviews are aligned to Article 62 of the Market Institutions Regulations, and findings come with a corrective action plan so gaps get closed, not just documented.
How often do I need an internal audit?
+
Article 62 requires a review at least once every three years, though many firms run them more often, especially ahead of an IPO or after a leadership change.
Can institutions outside capital markets use this service?
+
This service is built primarily for CMA-regulated capital market institutions based on our expertise with GRC and Internal Audit functions with respect to CMIs. If you're regulated elsewhere, talk to us, we can advise on fit.
What's the difference between a one-time engagement and ongoing audit support?
+
A one-time engagement runs 3 to 6 months and closes out with a report. Ongoing support is ongoing and quarterly-reported, better suited to firms that want continuous visibility rather than a periodic check-in.

Find the gaps before the inspector does.

A free consultation with a former CMA inspector, on your controls, your cycle, and what to fix first.