Legist Resources Limited, Lagos, Nigeria Financial services advisory and assurance, governance, risk and compliance, regulatory governance and advisory info@legistresources.com
Home Financial Services Advisory and Assurance Governance, Risk and Compliance Regulatory Governance and Advisory Industries About Legist Resources Contact

Legist Resources Limited, Lagos, Nigeria. Write to us at info@legistresources.com.

Advisory for consequential decisions

Clear judgement where finance, risk and regulation meet.

Legist Resources works alongside boards, executive teams and control functions to strengthen governance, improve the quality of assurance and respond to regulatory expectations with confidence. We bring commercial understanding, disciplined analysis and a practical approach to implementation, so that the decisions made during an engagement continue to hold long after it has ended.

GovernanceDirection, authority and accountability
RiskExposure, appetite and resilience
RegulationObligations, change and evidence
AssuranceConfidence that can be demonstrated

What we do

Three capabilities that together give leaders one connected view of performance and control.

The most difficult issues that an organisation faces rarely sit neatly inside a single function. Financial performance is shaped by the quality of governance. Risk decisions are influenced by regulation. Regulatory obligations depend on controls, data and clear management accountability. Our advisory model brings these disciplines together so that clients can see the whole decision, understand what matters most and implement changes that are proportionate to the risk they are managing.

Financial Services Advisory and Assurance

We help financial institutions and finance leaders improve performance, strengthen the control environment, sharpen risk oversight and build lasting confidence in the information that supports material decisions.

View this capability

Governance, Risk and Compliance

We design governance and control environments that make accountability clear, make risk visible and translate policy into everyday operating practice that can be evidenced, sustained and improved over time.

View this capability

Regulatory Governance and Advisory

We support organisations as they interpret regulatory change, assess their readiness, strengthen governance and respond to supervisory concerns with disciplined remediation and clear executive ownership.

View this capability

How we work

Rigorous enough to withstand challenge. Practical enough to be used on Monday morning.

Our work begins with the decision that needs to improve, rather than with a generic methodology. We establish the evidence, clarify the risk, design a response that fits the organisation and remain close to implementation until the change has been demonstrated.

  • We start with the question that mattersThe mandate, the scope and the standard of evidence are agreed with the people who will ultimately own the outcome.
  • We separate symptoms from causesDocument review, data analysis, stakeholder perspectives and control evidence are combined to understand what is actually happening.
  • We design for the organisation in front of usGovernance, process, controls, data and people are addressed together, because they fail together when they are treated in isolation.
  • We convert advice into ownership and proofEvery recommendation carries an accountable owner, a realistic sequence and the evidence management will use to confirm progress.
Advisory team in discussion around a conference table Senior attention on every engagement
Working alongside management, not around itOur engagement teams sit with the people who own the outcome, so that recommendations are shaped by operational reality.

Diagnose

We define the issue precisely, assess the current state and build the fact base needed to make sound judgements about cause and consequence.

Design

We develop practical changes to governance, process, controls, data, operating arrangements and management routines that fit the organisation.

Implement

We translate the design into ownership, milestones, evidence requirements and the decision points at which management will confirm direction.

Assure

We assess whether the intended changes are operating in practice and whether the risks that remain are understood, accepted and monitored.

Engagement time Decision confidence Without a structured fact base QuestionWhat matters? EvidenceWhat is true? ActionWhat changes? ProofWhat is evidenced? Confidence rises as assumptions become evidence and evidence becomes owned action
Figure 1Illustrative model of how decision confidence develops across an engagement

Decision intelligence

Confidence should be earned through evidence, not assumed from seniority or volume of paper.

Leaders are often asked to sign off on matters where the underlying information is incomplete, contested or simply unfamiliar. Our role is to make the journey from question to proof explicit, so that every judgement made along the way can be explained, challenged and defended.

That discipline is valuable in ordinary times. It becomes essential when a board is being asked to attest to the effectiveness of controls, when a regulator has raised a concern, or when a transformation programme is moving faster than the governance that is supposed to oversee it.

Read about our principles
Strong governance is not an administrative layer wrapped around the business. It is the operating system through which strategy, risk and accountability become real.
A principle that runs through every Legist Resources engagement

Where we add value

We work where complexity is high, the stakes are real and confidence has to be demonstrated.

Our work is most valuable when leaders must weigh competing commercial, risk and regulatory considerations at the same time, particularly where the organisation needs a clear and credible view of where it stands today and a realistic route to where it needs to be.

Board and executive prioritiesWe help leadership teams convert broad concerns into a defined set of decisions, responsibilities and measurable actions.
Control and assurance prioritiesWe help control functions assess design, evidence effectiveness and concentrate attention on the issues with the greatest consequence.
Regulatory and remediation prioritiesWe help organisations interpret expectations, structure remediation and give management a reliable view of progress.
Transformation prioritiesWe help programmes keep governance, control and evidence in step with the pace of delivery.

Perspectives

Thinking that shapes the way we advise.

These short perspectives set out the way we think about recurring questions that boards, executives and control functions bring to us. They are intended to start a conversation rather than to close one.

Financial performance charts on a laptop screen
Financial services

Why management information so often fails the people who rely on it most

Reporting packs grow every year, yet executives frequently tell us that they trust the numbers less. We explain why volume is not the same as reliability, and how a small number of well governed measures can restore confidence.

Boardroom with a long table and city view
Governance

The difference between a control that exists and a control that works

A control can be documented, approved and reported as effective while quietly failing in practice. We set out the four conditions that have to be present before any control deserves the confidence placed in it.

Executive signing a formal document
Regulation

Closing an action is not the same as reducing the risk

Remediation programmes are often judged on the number of actions closed rather than the risk that has actually been removed. We describe how to structure closure criteria so that supervisors and boards can rely on them.

Industries

Sector context in the room before the solution is designed.

We serve organisations whose operating model depends on strong controls, reliable information, formal accountability and sustained regulatory trust, with particular depth in financial services and other regulated environments.

Banking and financial institutions

Balance sheet strength, operational resilience and supervisory confidence are closely connected, and so is the advice that supports them.

Insurance and risk carriers

Businesses built on long term risk selection require governance, reporting and regulatory readiness that mature alongside the portfolio.

Payments, fintech and digital finance

Rapid growth brings formal obligations. We help translate regulatory expectations into operating practices that scale with the business.

Bring us the issue that is difficult to frame, not only the one that is easy to scope.

A first conversation does not require a finished brief. Share the decision, the concern or the regulatory question, and we will help you find the most appropriate way forward.

Financial Services Advisory and Assurance

Strengthen performance, control and confidence across the financial institution.

We support financial institutions and finance leaders as they improve operating performance, strengthen governance and controls, and build a more dependable basis for executive, board and regulatory decisions.

Our focus We connect strategic priorities with the finance, risk, control, data and assurance disciplines that are required to execute them responsibly, so that growth and control advance together rather than at each other's expense.

Our perspective

Advice that connects the economics of the business with the quality of its control environment.

Financial institutions are expected to grow, transform and compete while maintaining strong governance, resilient operations and reporting that can be trusted. Those objectives cannot be managed independently of one another, and institutions that try to do so usually discover the connection at the least convenient moment.

We help clients diagnose performance and control issues, design stronger operating arrangements and establish the evidence that management, boards and other stakeholders need in order to place greater confidence in the outcome. Our teams are comfortable in the detail of a reconciliation and equally comfortable in a board discussion about strategy, because in our experience the two are rarely as far apart as they appear.

Finance professionals working in a modern open office
Finance, risk and business in one conversationThe strongest institutions hold a single, shared fact base across functions.

Capability portfolio

Eight areas where we help financial institutions perform and control with greater confidence.

Each capability can be engaged on its own. In practice, the most valuable work usually combines two or three, because the question a client brings is rarely confined to a single discipline.

FS 01

Strategy, performance and transformation

We help leadership teams translate strategic priorities into operating choices, performance measures, management routines and transformation plans that can be governed and executed. This includes business model review, cost and revenue diagnostics, target operating model design and the governance required to keep large programmes honest.

  • Strategic option appraisal and business case development that boards can interrogate
  • Performance management frameworks with measures that reflect economic reality
  • Transformation governance, benefits tracking and independent programme challenge
FS 02

Finance function and management information

We assess finance processes, management reporting, planning, controls and data flows so that the finance function can provide timely insight alongside dependable stewardship. We pay particular attention to the close process, the reconciliation environment and the quality of the reporting that reaches executives and the board.

  • Finance operating model, organisation design and capability assessment
  • Management information redesign built around decisions rather than data availability
  • Financial close, reconciliation and reporting control improvement
FS 03

Risk, capital and balance sheet governance

We support clearer risk appetite, governance, management information and decision processes around capital, liquidity, balance sheet exposures and other material financial risks. Our work helps management and the board understand where the balance sheet is exposed and whether the arrangements for managing that exposure are fit for purpose.

  • Risk appetite statements with thresholds, triggers and escalation that management can operate
  • Capital and liquidity governance, planning and stress testing oversight
  • Credit, market and treasury risk framework review
FS 04

Controls and assurance readiness

We review governance, processes, controls and evidence so that management can understand whether key risks are being addressed and where additional assurance or remediation is required. Where an institution is preparing for external scrutiny, we help it get ahead of the findings rather than react to them.

  • Internal control framework design, key control identification and control rationalisation
  • Control testing, effectiveness assessment and management attestation support
  • Readiness reviews ahead of audits, supervisory visits and regulatory submissions
FS 05

Reporting, data and decision integrity

We examine how critical data is sourced, transformed, governed and reported so that decision makers can understand the provenance, limitations and reliability of important information. Institutions increasingly depend on data that has passed through many hands, and confidence in the output requires confidence in the chain.

  • Data lineage, ownership and control mapping for regulatory and financial reporting
  • Model and calculation governance, including spreadsheet and end user computing controls
  • Data quality frameworks that connect measurement to accountability
FS 06

Change risk and implementation assurance

We help organisations govern major change by clarifying delivery risk, critical dependencies, control requirements, decision points and the evidence required to demonstrate that change is landing as intended. Our role is to give sponsors and steering committees an independent and candid view of whether the programme is truly where its status report says it is.

  • Independent programme assurance and stage gate reviews
  • Change control, cutover readiness and post implementation review
  • Benefits realisation and business readiness assessment
FS 07

Transaction, integration and separation support

We support institutions through acquisitions, disposals, partnerships and restructurings by examining the governance, control, reporting and regulatory implications that sit beneath the commercial terms. Value in a transaction is frequently won or lost in the quality of integration and in the discipline applied to the first hundred days.

  • Governance, control and compliance due diligence
  • Integration and separation planning for finance, risk and compliance functions
  • Post transaction control environment stabilisation
FS 08

Financial crime and conduct control review

We review the design and operation of controls that protect the institution and its customers from financial crime and poor conduct outcomes, including the governance that oversees them. Our emphasis is on whether the arrangements work in practice across products, channels and customer segments, and whether management receives information that allows it to act.

  • Anti money laundering and sanctions control framework review
  • Conduct risk, customer outcome and complaints governance assessment
  • Fraud control, escalation and investigation governance

Our assurance lens

Assurance should explain what can be relied upon, why it can be relied upon and what still requires management attention.

We approach assurance as a structured evaluation of evidence, accountability and control. The purpose is not to create more documentation. It is to help decision makers understand how much confidence they can reasonably place in an important process, report, programme or control environment.

  • We assess whether governance and decision rights are clear enough for the risk in question.
  • We examine whether key controls are appropriately designed and whether there is credible evidence that they operate as intended.
  • We consider the quality, provenance and limitations of the information that management relies upon.
  • We distinguish isolated weaknesses from systemic issues that call for broader remediation.
  • We translate findings into practical actions with clear ownership and a proportionate timetable.
Reliance Governance and oversight Control design and operation Evidence, data and records The degree of confidence a boardor regulator can reasonably place Decision rights, challenge,escalation and accountability Whether the control fits the riskand can be shown to have operated The provenance and quality ofwhat everything above rests on Reliance is built from the base upward
Figure 2The assurance pyramid: confidence at the top depends on the layers beneath it

How we engage

Four ways of working, shaped around the decision rather than a delivery template.

The scope of an engagement should be proportionate to the decision and the risk. We therefore offer several engagement models and are candid with clients about which one fits the situation in front of them.

Focused diagnostic

A short, intensive review that establishes the facts, sizes the issue and gives management a clear view of options, typically within a matter of weeks.

Assurance review

An independent evaluation of a control environment, programme, report or process, with findings graded by consequence and actions that management can own.

Design and implementation

A structured programme to redesign operating arrangements, controls or governance and to see the change through to demonstrated operation.

Retained advisory

Ongoing senior counsel to a chief executive, chief financial officer, chief risk officer or board committee as issues emerge through the year.

Two colleagues reviewing figures together at a desk
A shared fact base changes the conversationWhen finance, risk and the business agree on what is true, decisions become faster and easier to defend.

When clients call us

We are most useful when the issue crosses organisational boundaries.

The situations below tend to require an integrated financial, risk and control perspective rather than a narrow functional review. They are also the situations in which a partial answer can be more dangerous than no answer at all.

  • Management information is available, but leaders lack confidence in its completeness, consistency or relevance to the decision at hand.
  • A transformation programme is progressing, but governance and control requirements have not kept pace with delivery.
  • Risk, finance and business teams hold different views of the same exposure and the organisation needs a common fact base.
  • Control weaknesses have been identified repeatedly and management needs to understand the systemic cause rather than address each symptom separately.
  • The board or a regulator needs credible evidence that remediation is complete and will be sustained.
  • A transaction, restructuring or new product is moving faster than the control environment that will have to support it.

What good looks like

The outcomes we are asked to help deliver, and how we know when they have been reached.

We agree the definition of success at the start of every engagement, because a recommendation that cannot be measured is difficult to own and easy to forget.

Client objectiveWhat we help put in placeHow success is evidenced
Trusted management informationA defined set of decision measures with owners, data lineage, reconciliation controls and a reporting cadence that matches the rhythm of management decisions.Executives and the board can explain where each number comes from, what it excludes and how much weight it can bear.
A control environment that operatesKey controls mapped to risks and obligations, rationalised for duplication, with named owners, evidence standards and periodic testing.Control testing results, attestation support and a downward trend in repeat findings from internal and external reviewers.
Governed transformationStage gates, independent challenge, benefits tracking and control readiness criteria embedded in programme governance.Steering committees receive candid status information and control requirements are met before, not after, go live.
Balance sheet confidenceRisk appetite with thresholds and triggers, capital and liquidity governance, and management information that anticipates rather than reports.Decisions on capital, liquidity and exposure are taken by the right forum, with a documented rationale and defined escalation.
Regulatory readinessA clear line of sight from obligation to owner, control, evidence and oversight, with remediation structured around risk reduction.Supervisory engagement is calm, consistent and supported by a fact base the institution has already tested itself.

Strengthen the quality of the decisions, controls and evidence that matter most.

Tell us where confidence is lowest today. We will help you frame the question, size the issue and choose the engagement model that fits.

Governance, Risk and Compliance

Governance and control that people can understand, operate and evidence.

We help organisations clarify accountability, improve the visibility of risk, strengthen the design of controls and create compliance arrangements that are embedded in daily management rather than separated from it.

Our perspective Good governance, risk and compliance is not a collection of policies. It is a connected management system that links authority, risk, controls, information and evidence, and it is only as strong as the weakest of those links.

Operating model

Governance becomes effective when responsibility, information and escalation move together.

We design governance, risk and compliance arrangements around the decisions that the organisation must make and the risks that it must control. That means being precise about who owns a risk, which controls matter, what evidence is required and how information moves from the front line to management and on to the board.

The result should be a system that is proportionate to the organisation, understandable to the people who work within it and capable of demonstrating how important risks are managed in practice. When those conditions are met, governance stops feeling like an imposition and starts feeling like the way the business is run.

Discuss your governance model
Decisions and the risks they carry Governance Risk Compliance Controls Information Authority, committeesand accountability Appetite, assessmentand response Obligations, monitoring and conduct Design, ownershipand evidence Data, reportingand escalation
Figure 3The integrated management system: five disciplines organised around the decisions that matter

Core services

We help clients make governance, risk and compliance coherent across policy, process and behaviour.

Our work can address a single control issue or redesign the wider governance and risk architecture. In every case we concentrate on how the model will operate under real management pressure, when time is short and attention is divided.

Corporate governance and decision rights

We clarify board, committee and executive accountabilities, delegated authorities, reporting lines and escalation paths so that important decisions are taken by the right people, in the right forum, with the right information. This includes board effectiveness reviews, committee structure design, terms of reference and the calendar of decisions that keeps oversight ahead of events.

Enterprise and operational risk management

We support risk taxonomy, appetite, assessment, aggregation, ownership and reporting so that management can understand the organisation's exposure and make deliberate risk decisions. We help risk registers become instruments of management rather than archives, and we help risk appetite become something that changes behaviour rather than a statement that decorates a policy.

Policy and control frameworks

We rationalise policies, define control objectives, identify key controls and establish ownership and evidence standards that make the control environment more usable and more transparent. Fewer, clearer policies that people actually read are more protective than a library that nobody can navigate.

Compliance operating models

We help compliance functions define their mandate, responsibilities, monitoring approach, issue management and management information, while improving the interface between business ownership and independent oversight. The aim is a compliance function that is respected for its judgement and trusted for its evidence.

Risk monitoring and management information

We design indicators, reporting packs, thresholds and escalation routines that give management a more useful view of emerging issues, risk concentrations and control performance. Good risk reporting tells a leader what has changed, why it matters and what decision is now required.

Issue, incident and remediation governance

We establish consistent ways to classify issues, identify root causes, govern remediation, validate closure and report whether risk has actually reduced rather than simply whether actions are complete. This discipline is often the difference between an organisation that learns and one that repeats.

Conduct, ethics and accountability

We help clients connect codes of conduct, individual responsibilities, consequence management, escalation and oversight so that expected standards of behaviour are reflected in management practice. Culture is shaped far more by what leaders tolerate than by what they publish.

Third party and operational resilience governance

We help organisations define oversight, risk assessment, control and contingency requirements for critical suppliers, outsourced activities and operational dependencies. As more of the operating model sits outside the organisation, the governance of those relationships becomes a board level concern.

A stronger control environment

Control quality depends on purpose, ownership, operation and evidence, in that order.

A control can exist on paper and still fail in practice. We therefore assess the complete control chain, including the risk it addresses, the person who owns it, the information it relies upon and the evidence that demonstrates it has performed.

Purpose

The control has a clear objective that addresses a defined risk or obligation. If nobody can say which risk a control mitigates, it is either redundant or misunderstood.

Ownership

Responsibility is explicit and the owner has the authority, capability and information to act. Shared ownership is, in practice, an absence of ownership.

Operation

The control is practical, timely and integrated into the underlying business process, rather than a separate task that competes with the day job.

Evidence

Performance can be demonstrated through reliable records that support review, challenge and assurance without reconstructing history after the fact.

Board and committees: direction, oversight and challenge Business ownership Owns risk, operates controls, keeps evidence Risk and compliance Sets frameworks, monitors, challenges and reports Independent assurance Evaluates design and operation objectively Shared information, escalation routes and evidence standards across all three
Figure 4Accountability model: each line has a distinct job, and the board depends on all three

From framework to practice

Documentation is necessary, but it is never the end state.

Policies, risk registers and control libraries only matter when they shape behaviour and management decisions. We therefore design governance materials with the operating rhythm in mind, so that they are consulted, applied and updated as part of normal management.

  • Board and committee terms of reference are aligned to the decisions and oversight responsibilities that matter.
  • Risk appetite is translated into thresholds, triggers and management actions rather than remaining a high level statement.
  • Policies distinguish mandatory requirements from guidance and identify who is accountable for implementation.
  • Controls are mapped to risks and obligations so that gaps and duplication can be seen at a glance.
  • Management information is designed around decisions, emerging risk and action, not around the volume of available data.
  • Issues remain open until there is evidence that the underlying risk has been reduced to an acceptable level.

Maturity assessment

Where does your organisation sit today, and where does it need to be?

We use a simple maturity lens at the start of most engagements. It is deliberately plain, because its purpose is to create a shared and honest view among leaders rather than to produce a score.

DimensionEmergingEstablishedEmbedded
GovernanceDecisions are taken informally and authority is understood rather than documented.Committees, delegations and terms of reference exist and are broadly followed.Decision rights are clear, forums are effective and the board receives what it needs to challenge well.
RiskRisks are listed but rarely quantified, aggregated or connected to appetite.A taxonomy and appetite exist and risk assessment is periodic and consistent.Appetite drives thresholds and escalation, and emerging risk is discussed before it becomes an incident.
ControlsControls are documented unevenly and evidence is reconstructed when requested.Key controls are identified, owned and tested on a cycle.Controls are integrated into processes, evidence is produced as a by product of operation and findings decline over time.
ComplianceObligations are known to specialists but not mapped to processes and owners.An obligations register exists and monitoring is planned and reported.Compliance is owned by the business, monitored independently and evidenced without effort.
InformationReporting is voluminous, inconsistent and produced late.Reporting is standardised and timely with defined owners.Reporting is decision focused, forward looking and trusted by those who rely on it.

Make governance and risk management easier to operate and harder to misunderstand.

Whether the priority is a single control issue or the architecture of the whole management system, we would welcome the conversation.

Regulatory Governance and Advisory

Turn regulatory expectations into clear management choices and credible action.

We help regulated organisations interpret their obligations, assess impact, strengthen governance and structure remediation so that the regulatory response is grounded in evidence, proportionate to the risk and owned by the business.

Our role We connect regulatory interpretation with the operating model, controls, data and governance needed to demonstrate effective implementation, and we help clients speak to their supervisors with clarity and consistency.

Regulatory lifecycle

Regulatory change is a management discipline, not a document distribution exercise.

New rules and supervisory expectations create obligations, but they also create choices about governance, business process, controls, technology, data and customer outcomes. We help clients move from interpretation to accountable implementation in five connected stages.

Interpret

We clarify the requirement, the outcome the regulator intends, the scope of application and the areas where judgement will be required.

Assess

We identify the affected processes, products, controls, systems, data, policies and accountabilities, and we size the gap honestly.

Decide

We help management choose a proportionate response, define any risk acceptance explicitly and set priorities that reflect consequence.

Implement

We establish workstreams, milestones, governance, evidence standards and the decision forums that keep implementation moving.

Demonstrate

We support testing, validation and management reporting so that implementation can be evidenced with confidence to the board and the supervisor.

Advisory services

Support across regulatory change, governance, remediation and supervisory engagement.

Our regulatory work is designed to help clients create a defensible line of sight from the requirement to the response, the accountable owner and the evidence of implementation.

Regulatory interpretation and impact assessment

We analyse regulatory requirements and supervisory expectations, identify the areas where judgement is required and map the implications across governance, business processes, products, controls, data and systems, so that management can see the full shape of the change before committing to a response.

Regulatory governance and accountability

We help establish executive ownership, committee oversight, decision rights, reporting and escalation arrangements that support effective regulatory implementation and sustained compliance. Where individual accountability regimes apply, we help make responsibilities specific and evidenced.

Regulatory remediation and programme governance

We structure complex remediation around root causes, risk reduction, clear workstreams, evidence standards, management challenge and robust closure criteria, so that the programme reduces risk rather than merely consuming effort.

Readiness and gap assessment

We assess the current state against defined regulatory expectations, distinguish material gaps from documentation issues and prioritise the changes that management needs to make, giving leaders a realistic view of exposure before a supervisor forms one.

Regulatory reporting and management information

We help define data ownership, control, review and governance around regulatory submissions and management information so that reporting is timely, consistent and explainable, and so that errors are found by the institution before they are found by anyone else.

Supervisory response and evidence preparation

We support clients in organising fact bases, evidence, governance records, remediation narratives and management responses so that engagement with supervisors is clear, internally consistent and delivered with the calm that comes from preparation.

Regulatory remediation

Closing an action is not the same as reducing the risk.

Effective remediation addresses the underlying cause of an issue and establishes evidence that the new arrangement works. We help management distinguish activity from outcome, so that closure decisions are credible to the board and to the supervisor who will ultimately test them.

  • The issue statement explains the actual risk, the affected population and the consequence, rather than only the observed control failure.
  • Root cause analysis considers governance, process, data, systems, capability, incentives and management information wherever they are relevant.
  • Actions are designed to reduce the identified risk and are sequenced around dependencies and implementation constraints.
  • Closure criteria define the evidence required to demonstrate that the change is complete and operating effectively.
  • Residual risk is explicitly assessed and accepted by the appropriate authority where it cannot be eliminated.
  • Management reporting focuses on risk reduction, evidence quality and the decisions required, not only on milestone status.
0%25%50%75%100% Programme timeline Actions reported as closed Risk reduced with evidence based closure criteria Risk reduced when symptoms are treated in isolation The gap a supervisor will ask about
Figure 5Illustrative: why action closure and risk reduction must be reported separately

Regulatory governance architecture

Make accountability visible from the obligation to board oversight.

A robust regulatory model creates traceability. Leaders should be able to see which obligation applies, who owns it, how it is controlled, what evidence demonstrates compliance and how issues are escalated. The model below can be applied to a single regulation, a portfolio of obligations or a broader compliance transformation.

Regulatory source and obligation Interpretation and applicability Policy and process requirements Risk and control mapping Ownership, monitoring and evidence Governance, escalation and assurance Findings, incidents and supervisory feedback flow back to interpretation and are reflected across the chain A practical line of sight
Executive presenting to colleagues in a meeting room
Prepared, consistent and calmThe best supervisory conversations are the ones an institution has already had with itself.

Supervisory engagement

Regulators respond to organisations that understand their own position.

Supervisors form a view of an institution from the quality of its self assessment, the consistency of its narrative and the credibility of its evidence. We help clients approach that relationship with discipline, so that every submission, meeting and response reflects a fact base the organisation has already tested.

  • One narrative across the institutionBoard papers, management responses and remediation reporting tell the same story with the same numbers.
  • Evidence organised before it is requestedGovernance records, control evidence and decision logs are indexed against the obligations they support.
  • Issues raised by the institution firstSelf identification, candid grading and credible plans build the trust that makes future engagement easier.
  • Senior ownership that can be demonstratedAccountable executives can explain the risk, the response and the evidence in their own words.

Build a regulatory response that management can own and evidence.

Whether you are interpreting new requirements, preparing for a review or structuring remediation, we can help you frame the work so that it reduces risk and stands up to scrutiny.

Industries

Sector context matters when governance, risk and regulation shape the economics of the business.

We concentrate on environments where management must balance growth, resilience, stakeholder expectations and formal obligations, with particular depth in financial services and other regulated organisations.

How we apply sector knowledge We begin with the business model and the decisions that create value, and then connect those decisions to the risks, controls and regulatory expectations that surround them.

Priority sectors

We bring a risk and governance lens to sectors where confidence is critical.

Our service portfolio is particularly relevant to organisations whose operating model depends on strong controls, reliable information, formal accountability and sustained regulatory trust.

Banking and financial institutions

We support governance, risk, finance, control and regulatory priorities across institutions where balance sheet strength, operational resilience and supervisory confidence are closely connected.

  • Commercial and retail banks
  • Merchant and investment banks
  • Microfinance and development finance institutions
  • Asset managers and custodians

Insurance and risk carriers

We help organisations strengthen governance, risk oversight, controls, reporting and regulatory readiness across businesses built on long term risk selection and financial resilience.

  • Life and general insurers
  • Reinsurers and brokers
  • Health and specialist underwriters
  • Pension fund administrators and trustees

Payments, fintech and digital finance

We support rapidly changing businesses as they formalise governance, strengthen risk and compliance capabilities and translate regulatory expectations into scalable operating practices.

  • Payment service providers and switches
  • Digital lenders and wallets
  • Mobile money operators
  • Platforms entering regulated activity

Diversified and complex corporates

We help leadership teams improve governance, enterprise risk, internal controls, compliance and decision information where complexity has outgrown the existing management arrangements.

  • Conglomerates and holding structures
  • Energy, infrastructure and utilities
  • Telecommunications and technology
  • Consumer and industrial groups

Public and regulated institutions

We support organisations that must demonstrate accountability, transparent governance, disciplined risk management and reliable control in environments with significant public or stakeholder scrutiny.

  • Government agencies and parastatals
  • Regulators and supervisory bodies
  • Development institutions and donor funded programmes
  • Professional and membership bodies

Growth businesses entering formal regulation

We help organisations build the governance, control, compliance and management information foundations required as their scale, complexity and regulatory obligations increase.

  • Businesses preparing for licensing
  • Companies approaching listing or external investment
  • Founder led organisations professionalising governance
  • Subsidiaries of international groups

Cross sector themes

The rules differ from one industry to the next. The management questions are remarkably consistent.

Boards and executive teams in every sector face the same underlying challenge: how to make risk informed decisions with reliable information and clear accountability. These are the themes we encounter most often.

Governance under increasing complexity

As organisations grow, informal decision routes become less reliable. We help make authority, challenge and escalation explicit before the gaps become visible to others.

Growth without loss of control

We help clients embed proportionate governance and risk disciplines without making the operating model unnecessarily heavy or slow.

Reliable information for material decisions

We assess data, reporting and management information so that leaders understand what is reliable and where judgement is still required.

Emerging and concentrated risk

We help organisations see the connections between risks, identify concentrations and improve escalation before an issue becomes a crisis.

Regulatory change at operating level

We translate high level requirements into practical implications for process, ownership, controls, systems and evidence.

Confidence in remediation

We help management demonstrate that issues are properly resolved and that the underlying risk has been reduced rather than relabelled.

Financial services advisory and assurance Governance, risk and compliance Regulatory governance and advisory Banking and financial institutions Insurance and risk carriers Payments, fintech and digital finance Diversified and complex corporates Public and regulated institutions Growth businesses entering regulation Circle size indicates the typical depth of demand we see in each sector
Figure 6Where each capability is most frequently engaged, by sector

Our sector lens

We do not separate commercial performance from the governance required to sustain it.

A good recommendation has to work within the economics, the operating realities and the regulatory perimeter of the organisation. Our approach therefore tests advice against the business model, the risk profile, the control environment, the data and the capacity of management before it becomes a plan.

This matters most in regulated sectors, where an apparently efficient decision can create disproportionate conduct, prudential, operational or compliance risk if the surrounding governance is weak. It matters equally in growth businesses, where the cost of building governance too late is usually far greater than the cost of building it too early.

Tell us about your organisation

Our market

Rooted in Nigeria, attentive to regional and international expectations.

Legist Resources is headquartered in Lagos and works with organisations across Nigeria's financial and corporate landscape. We understand the local regulatory environment, the practical realities of operating within it and the expectations that international partners, investors and correspondent institutions bring to the relationship.

That combination allows us to help clients build governance and control arrangements that satisfy domestic supervisors while meeting the standards that global counterparties increasingly require. We are equally comfortable supporting a Nigerian institution expanding regionally and an international group establishing or strengthening its presence in Nigeria.

Lagos headquarteredClose to the institutions, regulators and markets we serve.
International standardsAdvice calibrated to what global counterparties and investors expect.
Regulated sector depthParticular experience across banking, insurance, payments and public institutions.
Long term relationshipsWe aim to be the adviser clients return to as their questions evolve.

Bring sector context into the room before the solution is designed.

Tell us about your organisation, its market and the decision in front of you, and we will shape our thinking around it.

About Legist Resources

Professional judgement, disciplined analysis and practical implementation.

Legist Resources Limited is a Nigerian professional services firm focused on financial services advisory and assurance, governance, risk and compliance, and regulatory governance and advisory.

Firm profile Legist Resources Limited was incorporated in Nigeria on 12 February 2020 under corporate registration number RC 1658284, and is headquartered in Lagos.

Who we are

A focused advisory firm for issues that require more than a standard answer.

We work with organisations that need to improve the quality of important decisions, strengthen governance and control, and respond credibly to regulatory expectations.

Our work is grounded in a simple principle: advice has value only when it can be understood, owned and implemented by the organisation that receives it. We therefore place equal emphasis on analysis and execution. We build clear fact bases, make judgements explicit, define practical accountabilities and create the evidence that leaders need in order to monitor progress with confidence.

We are deliberately multidisciplinary. Financial performance, risk, regulation, governance, controls and data interact constantly, particularly in financial services. By considering those relationships together, we help clients address root causes rather than produce a series of isolated fixes that quietly undo one another.

Adviser in a tailored suit preparing for a client meeting
Senior judgement, personally deliveredOur engagements are led by experienced professionals who remain involved from first conversation to final evidence.

Our principles

The standard of the work matters as much as the recommendation.

We aim to be rigorous without becoming theoretical, independent in judgement without becoming detached, and practical without reducing complex issues to simplistic answers.

Clarity

We make the question, the evidence, the assumptions, the judgement and the recommended action visible, so that decision makers can challenge the work intelligently.

Proportionality

We design governance and control around the scale and consequence of the risk, and we resist complexity that does not improve the outcome.

Ownership

We build solutions that management can operate. Responsibilities, decision rights and evidence requirements are defined from the very beginning.

Evidence

We distinguish assertion from proof. Recommendations and closure decisions are supported by evidence that is relevant to the risk and the outcome.

Colleagues collaborating over documents at a meeting table How we show up

Ways of working

Senior attention, clear thinking and a direct line from analysis to action.

  • We define the decision problem before expanding the scope, so that effort remains connected to the outcome that matters.
  • We work from evidence and make uncertainty explicit rather than disguising assumptions as facts.
  • We involve the people who will own the solution, because implementation quality depends on operational reality.
  • We produce materials that can support management action, board challenge and regulatory scrutiny, rather than reports designed only to close the engagement.
  • We treat confidentiality, professional judgement and responsible escalation as core disciplines of advisory work.
  • We tell clients what we think, including when it is not what they were hoping to hear, because that is the point of independent advice.

Our purpose

Help organisations make sound decisions, build credible control and create confidence where the stakes are high.

That purpose shapes how we approach strategy, assurance, governance, risk and regulation. The subject matter may change from one engagement to the next, but the discipline remains the same: understand the issue properly, make the judgement explicit and turn the conclusion into an operating reality.

Corporate information

Legal nameLegist Resources Limited
Country of incorporationFederal Republic of Nigeria
Date of incorporation12 February 2020
Corporate registrationRC 1658284
HeadquartersLagos, Nigeria
Service linesFinancial services advisory and assurance; governance, risk and compliance; regulatory governance and advisory
Enquiriesinfo@legistresources.com

Work with a firm that treats governance and implementation as part of the advice.

We would be glad to hear about the decision, the concern or the opportunity in front of you.

Contact

Tell us what needs to become clearer, stronger or more defensible.

A useful first conversation does not require a finished scope. Share the issue, the decision or the regulatory concern, and we will help you frame the most appropriate way forward.

Write to us info@legistresources.com
Legist Resources Limited, Lagos, Nigeria

Start a conversation

We welcome specific questions and early stage discussions alike.

You can contact us about a defined engagement, an emerging issue or a situation that has not yet been translated into a formal scope. Complete the form and we will prepare an email to Legist Resources in your usual mail application.

This website does not store form submissions. Selecting the button opens a prepared email addressed to Legist Resources in your default mail application.

How to reach us

HeadquartersLagos, Nigeria
Registered entityLegist Resources Limited, RC 1658284, incorporated in Nigeria
ResponseWe aim to acknowledge every enquiry promptly and to arrange an initial conversation at a time that suits you.
ConfidentialityPlease share enough to frame the issue, but avoid sending sensitive material before an appropriate engagement and confidentiality arrangement is in place.

Before you contact us

Questions we are often asked.

A short description of the issue, the decision that needs to be made, the relevant business area and any timing constraint is usually enough for an initial conversation. You do not need to prepare a detailed scope before contacting us. In many cases, helping you shape the scope is the most valuable part of the first discussion.

Yes. The same disciplines can be applied to a focused diagnostic, an assurance review, a governance redesign or a broader programme. The scope should be proportionate to the decision and the risk rather than to a standard delivery template, and we will be candid about which model fits your situation.

Financial services is a core area of focus, but the governance, risk, compliance and regulatory capabilities described on this website are equally relevant to other regulated institutions, public bodies and complex corporates. Our industries page describes the sectors where we most often work.

No. The term is used here for advisory reviews that assess governance, controls, evidence, reporting, remediation or programme delivery. Statutory audit and any other service reserved by law or professional regulation would require the applicable authorisation and professional standing before it could be offered.

That depends on the nature and urgency of the issue. Focused diagnostics and readiness reviews can usually be mobilised quickly once the scope and confidentiality arrangements are agreed. Larger design and implementation programmes benefit from a short planning phase so that governance and resourcing are right from the start.

We treat confidentiality as a core discipline of advisory work. Before any sensitive material is shared, we put an appropriate engagement and confidentiality arrangement in place, and we handle client information in line with the professional standards that clients in regulated sectors expect.