MarketsIndiaUAE & DubaiUK & EuropeSoonCanada & AmericasSoon
The BDI LookoutCareersSchedule a demo
Blocks spelling RISK next to a magnifying glass. Photo: Sasun Bughdaryan / Unsplash
Practice 02

Risk, Compliance & Regulatory

We find control gaps before they are exploited, and help you show regulators and auditors that your programme works.

Discuss a matter What we do
Our approach

A compliance programme earns trust when it can be evidenced. We map where fraud and misconduct can happen in your processes, test the controls against how work is really done, keep your licences and approvals current, and build the policies, training and reporting that let a board see the programme working.

When clients call us

  • 01Entry into a new market or business line
  • 02New plants, units or terminals to approve
  • 03Fast growth in vendors and distributors
  • 04Audit committee concerns
  • 05A new law, a listing or a fund-raise
  • 06A regulator's inspection
What we do

10 services, one accountable team.

Fraud risk, internal controls, third-party risk, anti-bribery, POSH, regulatory compliance and the ClearPath Approvals Desk.

Fraud risk assessment

A process-by-process map of fraud scenarios, their likelihood and the strength of each control.

How it works

Internal controls review

Testing of procure-to-pay, order-to-cash, inventory and payroll controls against how work is really done.

How it works

Third-party and vendor risk

Risk-tiered screening and ongoing monitoring of suppliers, distributors, agents and contractors.

How it works

Anti-bribery and anti-corruption

Programme design and testing against the Prevention of Corruption Act, the US FCPA and the UK Bribery Act.

How it works

POSH and workplace conduct

Internal Committee support, independent inquiries and training under the POSH Act, 2013.

How it works

Regulatory compliance advisory

Vigil mechanism under Companies Act s.177, SEBI LODR, and DPDP Act 2023 readiness.

How it works

UCPMP compliance and HCP spend assurance

Testing of every rupee spent on healthcare professionals against UCPMP 2024, with evidence for the annual self-declaration.

How it works

Antitrust and dawn-raid readiness

Protocols, a trained response team, device guidance and mock raids for a Competition Commission or agency search.

How it works

SOP and policy design

Plain-language procedures for vendor onboarding, gifts and hospitality or investigations, mapped to risks and approval levels.

How it works
New

ClearPath Approvals Desk

A single window for every licence, consent and clearance a business needs to build, expand and run plants, units and terminals.

How it works
Each service, explained

When you need it, what we do and what you receive.

Every engagement is scoped in writing before work begins. These are the services clients most often combine.

02.01

Fraud risk assessment

A process-by-process map of fraud scenarios, their likelihood and the strength of each control.

When you need it

You need to know where fraud could happen across your processes, and how strong the controls really are.

What we do

  • Process walkthroughs with business owners
  • A fraud-scenario library mapped to each process
  • Likelihood and impact rating for each scenario
  • Control mapping and gap analysis

What you receive

A fraud risk register and heat map, with a prioritised remediation plan.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.02

Internal controls review

Testing of procure-to-pay, order-to-cash, inventory and payroll controls against how work is really done.

When you need it

Controls look sound on paper, but losses, audit findings or rapid growth suggest they are not working.

What we do

  • Testing of procure-to-pay, order-to-cash, inventory and payroll controls
  • Data analytics on full populations, not samples
  • Segregation-of-duties and system-access review
  • Root-cause analysis of every exception

What you receive

Tested control findings with owners, priorities and practical fixes.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.03

Third-party and vendor risk

Risk-tiered screening and ongoing monitoring of suppliers, distributors, agents and contractors.

When you need it

Your supplier, distributor and agent base is growing faster than your ability to check it.

What we do

  • Risk-tiering of the whole third-party population
  • Screening proportionate to each tier
  • Contract clauses, declarations and certifications
  • Ongoing monitoring and re-screening

What you receive

A risk-tiered third-party programme you can run and evidence.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.04

Anti-bribery and anti-corruption

Programme design and testing against the Prevention of Corruption Act, the US FCPA and the UK Bribery Act.

When you need it

You operate where bribery risk is high, or are subject to Indian, US or UK anti-corruption law.

What we do

  • Risk assessment of government touchpoints and intermediaries
  • Policies, gifts and hospitality rules, and third-party due diligence
  • Testing of high-risk payments and expenses
  • Training and annual certification

What you receive

An anti-bribery programme that can be demonstrated to regulators, auditors and partners.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.05

POSH and workplace conduct

Internal Committee support, independent inquiries and training under the POSH Act, 2013.

When you need it

You need an effective Internal Committee, an independent inquiry or assurance of POSH Act compliance.

What we do

  • Constitution and training of the Internal Committee
  • External-member support and independent inquiries
  • Awareness sessions for employees and managers
  • Annual reporting under the POSH Act, 2013

What you receive

A compliant, trusted POSH process, and inquiries that hold up on appeal.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.06

Regulatory compliance advisory

Vigil mechanism under Companies Act s.177, SEBI LODR, and DPDP Act 2023 readiness.

When you need it

A new law, a listing or a regulator's question requires you to demonstrate compliance.

What we do

  • Vigil mechanism under Companies Act s.177 and SEBI LODR
  • DPDP Act 2023 readiness: notices, consent, safeguards and breach response
  • Compliance calendars and owner mapping
  • Board and audit committee reporting

What you receive

A compliance framework with named owners, evidence and regular reporting.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.07

UCPMP compliance and HCP spend assurance

Testing of every rupee spent on healthcare professionals against UCPMP 2024, with evidence for the annual self-declaration.

Full service page

When you need it

Your pharmaceutical business must evidence that its spending on healthcare professionals complies with UCPMP 2024.

What we do

  • Camp expense reviews and live monitoring of CME events
  • HCP fees tested for need and fair market value
  • Samples and brand reminders reconciled to the Code's limits
  • Field-force expense audits and continuous red-flag analytics
  • Event agencies, distributors and consultants risk-rated
  • Evidence pack for the executive head's annual self-declaration
  • For US operations: Sunshine Act (Open Payments) reporting assurance

What you receive

Assurance, and evidence, that HCP spend complies with the Code, and with the Sunshine Act where you sell in the US.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.08

Antitrust and dawn-raid readiness

Protocols, a trained response team, device guidance and mock raids for a Competition Commission or agency search.

When you need it

You operate in a concentrated market, or a regulator is examining your sector.

What we do

  • Competition-law risk review of sales, pricing and trade-association contact
  • Dawn-raid protocol and a trained response team
  • Device and document guidance for employees
  • Mock raids and debriefs

What you receive

A team that knows exactly what to do in the first hour of a search.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.09

SOP and policy design

Plain-language procedures for vendor onboarding, gifts and hospitality or investigations, mapped to risks and approval levels.

When you need it

Procedures are unwritten, outdated or quietly ignored.

What we do

  • Plain-language SOPs mapped to the risks they control
  • Approval matrices and delegation of authority
  • Gifts and hospitality, conflicts and investigation policies
  • Roll-out, training and acknowledgement

What you receive

Procedures people actually follow, each linked to the risk it controls.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
02.10

ClearPath Approvals DeskNew

A single window for every licence, consent and clearance a business needs to build, expand and run plants, units and terminals.

Full service page

When you need it

New plants, units or terminals are being added, and approvals risk holding up commissioning or lapsing in operation.

What we do

  • Map every approval each site needs, with owners and due dates
  • Prepare and file applications on state and national portals
  • Follow up with regulators until each approval is granted
  • Track conditions and raise renewals before they lapse

What you receive

One desk and one live tracker for every approval, with an audit-ready trail for the board and regulators.

This is a summary of the service. For a deeper understanding of how it would work for your organisation, please reach out to us.

Talk to a BDI partner
New · ClearPath Approvals Desk

One desk for every plant approval.

A single window for every licence, consent and clearance needed to build, expand and run plants, units and terminals, with a live tracker and renewal alerts at 90, 60 and 30 days.

  • Site and land, mining, environment, build and commission, operate and renew
  • Filings through state single-window portals and the National Single Window System
  • Conditions monitored and evidence stored for audits
Explore ClearPath
Method

How we move a compliance programme forward

  1. 01ReactiveIssues are handled case by case.
  2. 02DefinedPolicies and owners are in place.
  3. 03EmbeddedControls are built into daily work.
  4. 04MonitoredTesting, analytics and helpline data show what is happening.
  5. 05AssuredBoard-level evidence that the programme works.
Practice leadership

The people who will lead your matter.

BDI

To be announced soon

Founder, Promoter & Chief Executive Officer, BDI & Brand Defence Academy

Mukesh Madanlal Gadge, Founder, Promoter & Managing Director, BDI & Brand Defence Academy

Mukesh Madanlal Gadge

Founder, Promoter & Managing Director, BDI & Brand Defence Academy

Where this practice works hardest

Sectors we serve.

From The BDI Lookout

Further reading.

Fibre optic cables in a network switch. Photo: Kirill Sh / Unsplash
Article5 min read

The DPDP Rules are law. The 18-month countdown has started.

Most obligations under India's data-protection regime apply from May 2027. Organisations that start with an inventory of their data now will not be scrambling then.

Assortment of pills and capsules. Photo: Jorge Campos / Unsplash
Article6 min read

UCPMP 2024: building the evidence behind the self-declaration

The executive head signs the declaration. The evidence behind it has to come from testing every rupee spent on healthcare professionals.

Burj Khalifa above a highway interchange in Dubai. Photo: David Rodrigo / Unsplash
Article5 min read

The UAE's new AML law: what changes for groups trading through Dubai

Federal Decree-Law No. 10 of 2025 widens scope, lowers evidential thresholds and raises penalties. Re-exporters, traders and family-owned groups should look again at their counterparties.

Platforms behind this practice

The technology that keeps the record.

Each of these services can run on a BDI governance platform, so evidence, deadlines and outcomes sit in one place.

PlatformServices it supportsLink
Whistle SentinelPOSH and workplace conductAnti-bribery and anti-corruptionExplore
PactinexThird-party and vendor riskAnti-bribery and anti-corruptionExplore
FraudSentinel360Fraud risk assessmentInternal controls reviewExplore
Start a confidential conversation

Tell us what you are seeing. We will tell you how we would find out.

Start a confidential conversation Meet our people