The Royal Commission of Inquiry's report on Tabung Haji, released in late July, has sparked urgent demands from governance experts for sweeping institutional reforms aimed at preventing the kind of financial mismanagement that weakened Southeast Asia's largest Islamic pilgrimage fund between 2014 and 2020. The 25 recommendations contained within the inquiry findings have become the subject of parliamentary debate, but academics argue the document represents merely the starting point for a much deeper transformation of how the institution manages risk and makes strategic decisions affecting millions of Malaysian Muslim depositors.

Professor Datuk Dr Norman Mohd Saleh from Universiti Kebangsaan Malaysia's Faculty of Economics and Management emphasises that the present governance architecture at Tabung Haji must fundamentally shift from a system where risk committees function as passive advisors to one where their warnings carry binding weight in boardroom deliberations. Under current standard operating procedures, critical alerts from the Audit Committee and Risk Management Committee frequently remain mere suggestions that senior management can dismiss without consequence. This structural weakness has allowed what experts term "management override" practices, whereby executives bypass safeguards designed to protect the institution's massive investment portfolio and reserve funds.

The crux of the problem lies in the asymmetry of power between those raising red flags and those making final investment decisions. Tabung Haji's Board of Directors currently retains unfettered discretion to approve transactions regardless of warnings from its risk and audit functions. Professors argue this arrangement is incompatible with the fiduciary obligations the institution owes to depositors, particularly given that Tabung Haji operates outside the normal corporate accountability mechanisms. Unlike publicly listed companies that submit to annual general meetings where shareholders can interrogate management decisions, Tabung Haji answers to a narrower constituency, making internal oversight mechanisms even more critical.

Prof Saleh further contends that Tabung Haji requires external supervisory engagement from Bank Negara Malaysia, specifically to assess liquidity risks and capital adequacy as the institution manages increasingly complex and high-value investment portfolios. This proposal would bring the haj fund under the banking regulator's purview, introducing a layer of technical expertise and independent scrutiny currently absent from the institution's oversight ecosystem. Such an arrangement would align Tabung Haji's supervision with international best practices for financial institutions managing substantial public savings.

The appointment process for Tabung Haji's leadership represents another critical vulnerability identified by governance specialists. Currently, the Nomination and Remuneration Committee selects board members and executives, but experts warn this process frequently reflects political considerations rather than merit-based criteria grounded in transparent integrity standards. The absence of political insulation has historically enabled patronage appointments and allowed individuals lacking requisite financial expertise to occupy positions requiring sophisticated understanding of investment risk. Reformers advocate establishing rigid selection matrices that prioritise technical qualifications, professional track records, and freedom from conflicts of interest over political affiliation or connections.

Associate Professor Dr Mohd Hafizuddin Syah Bangaan Abdullah, another UKM Finance specialist, proposes that Tabung Haji adopt a proactive rather than reactive risk culture. Rather than examining decisions after implementation to assess compliance with policies, the institution should establish clear investment tolerance limits, demand independent risk assessments, conduct stress testing scenarios, and prepare documented exit strategies before any major transaction receives board approval. This forward-looking methodology would require the institution to identify potential vulnerabilities and financial shocks that could threaten depositor interests before committing capital.

Crucially, Dr Bangaan Abdullah advocates separating the Risk Management Committee from the Audit Committee, arguing that complex financial institutions cannot adequately serve both functions through a single body. Risk management demands forward-looking foresight and scenario analysis, while audit functions emphasise post-facto compliance verification. These represent fundamentally different intellectual frameworks, and attempting to combine them dilutes both functions. Furthermore, he recommends establishing a "red-flag escalation mechanism" whereby any breach of risk tolerance, identification of material gaps, or detection of conflicts of interest automatically triggers board review rather than proceeding through normal approval channels. Such measures would prevent senior managers from concealing problematic decisions within routine administrative processes.

The governance experts unanimously endorse the RCI's recommendation that active politicians should be prohibited from serving as Tabung Haji chairpersons or board members. Political appointments inevitably create conflicts between the institution's fiduciary obligations to depositors and political interests, particularly when governments face budget pressures or when leaders require financial resources to support political objectives. The haj fund's substantial investment portfolio and liquid reserves make it a tempting target for political actors seeking to deploy capital for policy purposes unrelated to maximising returns for pilgrims' savings accounts. Professionalising the board through skills-based recruitment would eliminate this structural vulnerability.

Executive compensation structures require equally rigorous reformation. Dr Bangaan Abdullah proposes linking management bonuses to long-term performance metrics adjusted for risk factors, rather than short-term investment returns that incentivise excessive risk-taking. Critically, he advocates establishing "clawback mechanisms" enabling the institution to recover incentive payments if executives received bonuses based on financial information later proven inaccurate or unsustainable. Such provisions create personal financial consequences for senior managers who mislead boards regarding investment performance or risk profiles, thereby aligning individual compensation incentives with institutional prudence.

The institutional culture shift required extends to governance committees' regular monitoring duties. Board members must rigorously track three interconnected indicators: audited financial position accuracy, quality of reporting compliance with Malaysian Financial Reporting Standards, and comprehensive disclosure of related-party transactions. Related-party dealings represent particular vulnerability areas where board members or executives may benefit personally from Tabung Haji decisions, creating incentives to conceal conflicts or structure arrangements benefiting themselves rather than depositors. Enhanced transparency regarding such transactions would enable effective scrutiny and deter self-interested decision-making.

The RCI's findings illuminate how governance weaknesses can accumulate into systemic institutional failure even at organisations managing resources designated for sacred religious purposes. The recommendations, now under parliamentary consideration, provide a roadmap for transformation, but implementation success depends on genuine political commitment to insulate Tabung Haji from patronage pressures. For Malaysian Muslims and regional observers concerned about Islamic financial institution governance, the Tabung Haji case demonstrates that robust structures, independent oversight, and merit-based leadership represent non-negotiable foundations for trustworthy stewardship of communal assets.