After 10 years with GLG, including my memorable visit to GLG Malaysia and meeting Ms. Karen Soh, the journey has truly been meaningful. I’ve gained invaluable insights, especially in compliance and governance, which have strengthened my work across various engagements.
DISCLAIMER - NIKZAFRI.BLOGSPOT.COM
In no event shall nikzafri.blogspot.com be liable for any damages whatsoever, including, without limitation, direct, special, indirect, consequential, or incidental damages, or damages for lost profits, loss of revenue, or loss of use, arising out of or related to the nikzafri.blogspot.com or the information contained in it, whether such damages arise in contract, negligence, tort, under statute, in equity, at law or otherwise.
A THOUGHT
It’s wonderful to revisit the past, though not every memory is nostalgic some can drain your spirit to live. I find the present while learning valuable lessons from the past (so they’re not repeated), and focus on the future gives me a sense of closure, ownership, even drives me to move forward, and feels truly empowering.
Perhaps it's time to recite this daily mantra - that "enough is enough" - "no more being a victim, I'm retaking control of myself and my life"
BIODATA - NIK ZAFRI

https://nikzafri.wixstudio.com/nikzafriv2
Kelantanese, Alumni of Sultan Ismail College Kelantan (SICA), Business Management/Administration, IT Competency Cert, Certified Written English Professional US. Has participated in many seminars/conferences (local/ international) in the capacity of trainer/lecturer and participant.
Affiliations :- Council/Network Member of Gerson Lehrman Group, Institute of Quality Malaysia, Auditor ISO 9000 IRCAUK, Auditor OHSMS (SIRIM and STS) /EMS ISO 14000 and Construction Quality Assessment System CONQUAS, CIDB (Now BCA) Singapore),
* Possesses almost 30 years of experience/hands-on in the multi-modern management & technical disciplines (systems & methodologies) such as Knowledge Management (Hi-Impact Management/ICT Solutions), Quality (TQM/ISO), Safety Health Environment, Civil & Building (Construction), Manufacturing, Motivation & Team Building, HR, Marketing/Branding, Business Process Reengineering, Economy/Stock Market, Contracts/Project Management, Finance & Banking, etc. He was employed to international bluechips involving in national/international megaprojects such as Balfour Beatty Construction/Knight Piesold & Partners UK, MMI Insurance Group Australia, Hazama Corporation (Hazamagumi) Japan (with Mitsubishi Corporation, JA Jones US, MMCE and Ho-Hup) and Sunway Construction Berhad (The Sunway Group of Companies). Among major projects undertaken : Pergau Hydro Electric Project, KLCC Petronas Twin Towers, LRT Tunnelling, KLIA, Petronas Refineries Melaka, Putrajaya Government Complex, Sistem Lingkaran Lebuhraya Kajang (SILK), Mex Highway, KLIA1, KLIA2 etc. Once serviced SMPD Management Consultants as Associate Consultant cum Lecturer for Diploma in Management, Institute of Supervisory Management UK/SMPD JV. Currently – Associate/Visiting Consultants/Facilitators, Advisors/Technical Experts for leading consulting firms (local and international), certification bodies including project management. To name a few – Noma SWO Consult, Amiosh Resources, Timur West Consultant Sdn. Bhd., TIJ Consultants Group (Malaysia and Singapore), QHSEL Consultancy Sdn. Bhd.
Among Nik Zafri’s clients : Adabi Consumer Industries Sdn. Bhd, (MRP II, Accounts/Credit Control) The HQ of Royal Customs and Excise Malaysia (ISO 9000), Veterinary Services Dept. Negeri Sembilan (ISO 9000), The Institution of Engineers Malaysia (Aspects of Project Management – KLCC construction), Corporate HQ of RHB (Peter Drucker's MBO/KRA), NEC Semiconductor - Klang Selangor (Productivity Management), Prime Minister’s Department Malaysia (ISO 9000), State Secretarial Office Negeri Sembilan (ISO 9000), Hidrological Department KL (ISO 9000), Asahi Kluang Johor(System Audit, Management/Supervisory Development), Tunku Mahmood (2) Primary School Kluang Johor (ISO 9000), Consortium PANZANA (HSSE 3rd Party Audit), Lecturer for Information Technology Training Centre (ITTC) – Authorised Training Center (ATC) – University of Technology Malaysia (UTM) Kluang Branch Johor, Kluang General Hospital Johor (Management/Supervision Development, Office Technology/Administration, ISO 9000 & Construction Management), Kahang Timur Secondary School Johor (ISO 9000), Sultan Abdul Jalil Secondary School Kluang Johor (Islamic Motivation and Team Building), Guocera Tiles Industries Kluang Johor (EMS ISO 14000), MNE Construction (M) Sdn. Bhd. Kota Tinggi Johor (ISO 9000 – Construction), UITM Shah Alam Selangor (Knowledge Management/Knowledge Based Economy /TQM), Telesystem Electronics/Digico Cable(ODM/OEM for Astro – ISO 9000), Sungai Long Industries Sdn. Bhd. (Bina Puri Group) - ISO 9000 Construction), Secura Security Printing Sdn. Bhd,(ISO 9000 – Security Printing) ROTOL AMS Bumi Sdn. Bhd & ROTOL Architectural Services Sdn. Bhd. (ROTOL Group) – ISO 9000 –Architecture, Bond M & E (KL) Sdn. Bhd. (ISO 9000 – Construction/M & E), Skyline Telco (M) Sdn. Bhd. (Knowledge Management),Technochase Sdn. Bhd JB (ISO 9000 – Construction), Institut Kefahaman Islam Malaysia (IKIM – ISO 9000 & Internal Audit Refresher), Shinryo/Steamline Consortium (Petronas/OGP Power Co-Generation Plant Melaka – Construction Management and Safety, Health, Environment), Hospital Universiti Kebangsaan Malaysia (Negotiation Skills), Association for Retired Intelligence Operatives of Malaysia (Cyber Security – Arpa/NSFUsenet, Cobit, Till, ISO/IEC ISMS 27000 for Law/Enforcement/Military), T.Yamaichi Corp. (M) Sdn. Bhd. (EMS ISO 14000) LSB Manufacturing Solutions Sdn. Bhd., (Lean Scoreboard (including a full development of System-Software-Application - MSC Malaysia & Six Sigma) PJZ Marine Services Sdn. Bhd., (Safety Management Systems and Internal Audit based on International Marine Organization Standards) UNITAR/UNTEC (Degree in Accountacy – Career Path/Roadmap) Cobrain Holdings Sdn. Bhd.(Managing Construction Safety & Health), Speaker for International Finance & Management Strategy (Closed Conference), Pembinaan Jaya Zira Sdn. Bhd. (ISO 9001:2008-Internal Audit for Construction Industry & Overview of version 2015), Straits Consulting Engineers Sdn. Bhd. (Full Integrated Management System – ISO 9000, OHSAS 18000 (ISO 45000) and EMS ISO 14000 for Civil/Structural/Geotechnical Consulting), Malaysia Management & Science University (MSU – (Managing Business in an Organization), Innoseven Sdn. Bhd. (KVMRT Line 1 MSPR8 – Awareness and Internal Audit (Construction), ISO 9001:2008 and 2015 overview for the Construction Industry), Kemakmuran Sdn. Bhd. (KVMRT Line 1 - Signages/Wayfinding - Project Quality Plan and Construction Method Statement ), Lembaga Tabung Haji - Flood ERP, WNA Consultants - DID/JPS -Flood Risk Assessment and Management Plan - Prelim, Conceptual Design, Interim and Final Report etc., Tunnel Fire Safety - Fire Risk Assessment Report - Design Fire Scenario), Safety, Health and Environmental Management Plans leading construction/property companies/corporations in Malaysia, Timur West Consultant : Business Methodology and System, Information Security Management Systems (ISMS) ISO/IEC 27001:2013 for Majlis Bandaraya Petaling Jaya ISMS/Audit/Risk/ITP Technical Team, MPDT Capital Berhad - ISO 9001: 2015 - Consultancy, Construction, Project Rehabilitation, Desalination (first one in Malaysia to receive certification on trades such as Reverse Osmosis Seawater Desalination and Project Recovery/Rehabilitation), ABAC Centre of Excellence UK (ABMS ISO 37001) Joint Assessment (Technical Expert)
He is also rediscovering long time passions in Artificial Intelligence, ICT and National Security, Urban Intelligence/Smart Cities, Environmental Social and Governance, Solar Energy, Data Centers - BESS, Tiers etc. and how these are being applied.
* Has appeared for 10 consecutive series in “Good Morning Malaysia RTM TV1’ Corporate Talk Segment discussing on ISO 9000/14000 in various industries. For ICT, his inputs garnered from his expertise have successfully led to development of work-process e-enabling systems in the environments of intranet, portal and interactive web design especially for the construction and manufacturing. Some of the end products have won various competitions of innovativeness, quality, continual-improvements and construction industry award at national level. He has also in advisory capacity – involved in development and moderation of websites, portals and e-profiles for mainly corporate and private sectors, public figures etc. He is also one of the recipients for MOSTE Innovation for RFID use in Electronic Toll Collection in Malaysia.
Note :
Wednesday, December 03, 2025
A DECADE OF JOURNEY WITH GERSON LEHRMAN GROUP
Sunday, July 20, 2025
Monday, June 30, 2025
Corruption and Bribery in the Construction Industry: Why It Fails, and What Must Be Done - by Nik Zafri
Introduction
The construction industry, often regarded as the backbone of economic development, is paradoxically one of the sectors most vulnerable to corruption and bribery. Despite various policies, codes of conduct, and public declarations of integrity, corruption often persists, undermining project quality, safety, timelines, and public trust. But why does corruption continue to fester, and why do conventional methods often fail to curb it?
A) Why Corruption and Bribery Persist in Construction
1. Complex Supply Chains and Multiple Layers
Construction projects involve numerous stakeholders, clients, consultants, contractors, subcontractors, suppliers, and regulators. This multilayered structure creates opportunities for bribes and kickbacks at many points, from procurement and tender evaluations to approvals and inspections.
2. Large Capital Involvement
Projects involve significant sums of money, making them attractive targets for unethical behaviour. A small percentage of a multi-million-dollar contract in the form of a bribe may seem negligible to perpetrators but can have massive consequences on project outcomes.
3. Lack of Transparency
Poor documentation, verbal agreements, and vague decision-making criteria allow corrupt practices to go unnoticed. Many construction companies lack robust systems for recording or tracking transactions in a transparent and auditable way.
4. Culture of Silence and Normalization
In some organizations or regions, bribery is seen as a "cost of doing business." When corruption becomes normalized, reporting mechanisms become weak, and whistleblowers are reluctant to come forward for fear of retaliation or career sabotage.
5. Ineffective Enforcement and Monitoring
Internal audits or ethics committees often lack the independence, authority, or resources to investigate wrongdoing thoroughly. Additionally, some investigations are symbolic rather than substantive, giving the appearance of action without impact.
B) Why It Doesn’t Work in the Long Run
Corruption and bribery may offer short-term gains, but they inevitably compromise:
Corruption is not sustainable. Eventually, it corrodes the ethical foundation of the organization, leads to internal disputes, and attracts regulatory scrutiny. In many cases, companies suffer long-term reputational and financial damage.
- It introduces a structured approach to identifying bribery risks,
- It enhances governance, accountability, and control,
- It increases investor and client confidence,
- It protects the organization from legal consequences by demonstrating due diligence.
- Geographical and political exposure,
- Project scale and budget size,
- Third-party and subcontractor involvement,
- Previous incidents or audit findings
- To prioritize resources and controls where risks are highest,
- To inform policies, procurement strategies, and contract terms,
- To prepare preventive measures before issues arise
- Conducted regularly (at least annually or when entering a new market/project),
- Reviewed during key project lifecycle phases (design, procurement, execution, closing),
- Aligned with ISO 37001 and enterprise risk management (ERM) frameworks
- Internal Audits: Conducted periodically to assess adherence to anti-bribery controls,
- External Audits: Annual or bi-annual reviews by certification bodies,
- Compliance Reviews: Spot checks, data analysis, and third-party interviews.
- What went wrong
- Why it happened
- Where the system, process, or culture failed
- Cracked floor tiles, unstable door frames,
- Overruns in both time and cost,
- Regulatory red flags due to inconsistent records,
- Auditor-General’s Office flagged the discrepancy,
- Public outcry led to suspension of the project,
- Contractor blacklisted; government agency reputation damaged
- Internal audit found no written approvals,
- Project Director was reassigned pending investigation,
- Clients demanded full refund and compliance audit
- Supervisor resigned and anonymously reported it,
- After media exposure, the project was delayed 8 months,
- The contractor was sued for negligence after a small fire broke out during testing
- Whistleblower reported it to the certification body,
- ISO certification was suspended,
- Clients froze all pending payments until re-audit
- Junior engineer leaked documents to media,
- Several public clients cut ties,
- Key staff left, citing toxic leadership and legal risks
- Building owners filed lawsuits,
- Company settled with RM4 million payout,
- Insurance provider declined coverage due to internal failure
- The whistleblower filed a complaint with MACC,
- The company was investigated and fined,
- ABMS certification was denied for “failure to uphold whistleblower protection”
- Vendor contract cancelled,
- Procurement team reshuffled,
- Company committed to e-tendering platform rollout
- Internal whistleblower triggered a surprise audit,
- Certification body withdrew ISO status,
- Client dropped the firm from shortlist for a major rail project
- Staff confidence and client trust increased,
- No bribery cases reported in 3 years,
- Successfully won government contracts due to enhanced reputation
- Without systems, corruption thrives,
- Without culture, systems fail,
- With both, trust and performance grow.
Saturday, June 14, 2025
Building Resilience Through Business Continuity and Integrity Management (BCIM)
In today’s volatile world, organizations are increasingly vulnerable to disruptions that threaten their operations, reputation, and financial standing. From cyberattacks and natural disasters to regulatory crackdowns and global pandemics, businesses must proactively prepare to face the unexpected. This is where Business Continuity and Integrity Management (BCIM) comes into play – a strategic framework designed to sustain operations and protect ethical integrity in the face of adversity.
1.0 Understanding BCIM
Business Continuity and Integrity Management (BCIM) is an integrated approach combining Business Continuity Management (BCM) and Integrity Management, including elements like anti-corruption practices, compliance, and organizational ethics. While BCM focuses on operational resilience, Integrity Management ensures that recovery and continuity are upheld with ethical accountability.
2.0 The Case for Integration
Traditionally, business continuity and integrity initiatives were managed in silos. However, recent disruptions have shown that unethical conduct during crises can severely damage trust and reputation. For instance, cutting corners during supply shortages or manipulating data during audits can unravel an organization’s standing faster than the disruption itself. Thus, integrating BCM and Integrity Management isn't just best practice – it's a necessity.
3.0 Core Components of BCIM
- Risk and Impact Assessment - Identifying critical operations, their vulnerabilities, and the potential ethical implications during recovery,
- Continuity Planning - Developing comprehensive recovery strategies that include transparent decision-making processes, accountability, and stakeholder communication.
4.0 Compliance and Ethics
Embedding frameworks like ISO 37001 (Anti-Bribery), ISO 37301 (Compliance Management), ISO 22301 (BCM), and Environmental, Social, and Governance (ESG) principles ensures systematic alignment and responsible governance.
5.0 Training and Awareness
Regular training sessions not only prepare employees to act swiftly but also reinforce a culture of integrity, especially during emergencies.
6.0 Testing and Evaluation
Periodic tabletop exercises and scenario testing should include both continuity and ethical decision-making stress tests.
7.0 Benefits of BCIM
- Operational Resilience: Faster and structured recovery.
- Reputation Management: Trust is maintained even during crisis.
- Regulatory Compliance: Stronger positioning during audits and legal scrutiny.
- Cultural Strength: Promotes ethical behavior as a core value.
8.0 Moving Forward
As business environments grow more complex and interconnected, the fusion of continuity and integrity functions is no longer optional.
Organizations that invest in BCIM are not only better prepared to face crises but also to emerge from them stronger, more transparent, and more trusted.
BCIM is not just about survival - it's about sustainable resilience. In an age of unpredictability, it provides the moral compass and operational roadmap every responsible organization needs.






