This is the third article in a series on listing readiness for Bursa Malaysia. The Malaysia IPO Readiness Checklist covers the full vertical preparation sequence, from eligibility thresholds through due diligence and prospectus filing. The Main Market vs ACE Market vs LEAP Market comparison maps the structural differences across all three boards. This article focuses on one dimension of that preparation: governance readiness, meaning the board structures, committee mandates, and disclosure obligations that the Securities Commission Malaysia (SC) and Bursa Malaysia require companies to have in place before, not after, the listing application is submitted.
Editorial content. Not legal, regulatory, or compliance advice.
Governance as a Pre-Condition, Not a Post-Listing Task
The regulatory sequence in Malaysia works in the opposite direction to the common assumption. Both the SC Equity Guidelines (R7-2024) and the Bursa Malaysia Main Market Listing Requirements set governance pre-conditions that must be satisfied before the SC submission is accepted. A company that arrives at the principal adviser engagement with a governance-deficient board faces delays, not waivers.
Bursa Malaysia requires that audit committees, nomination committees, and remuneration committees be established and operational at the time of listing. The principal adviser, during due diligence, assesses whether proposed directors meet fit-and-proper standards and whether board composition satisfies minimum independence requirements. Gaps identified during due diligence add weeks or months to the submission timeline.
Governance preparation runs on a parallel track to financial and legal preparation. The sections below map the specific requirements and the observed timing pattern for each.
MCCG 2021: The Operative Governance Code
The Malaysian Code on Corporate Governance 2021 (MCCG 2021), published by the Securities Commission Malaysia in April 2021, is the operative governance code for all public-listed companies (PLCs) on Bursa Malaysia as of the date of this guide.
This guide was prepared against the Malaysian Code on Corporate Governance 2021, the current operative code as of May 2026. The SC issued a Discussion Paper for a potential MCCG 2026 revision in December 2025; reader feedback closed in February 2026 and the revised code had not been published as of May 2026. Readers in late 2026 or beyond should verify the current operative version with the SC before relying on specific provisions cited here.
The MCCG 2021 is the fifth edition of the code. It operates through an “apply or explain an alternative” mechanism: listed companies must either apply each Practice or explain in their annual report what alternative arrangement achieves the same outcome. A company that cannot credibly explain an alternative is expected to apply the Practice. The code is not optional by virtue of offering an explanation path.
The MCCG 2021 organises requirements into Practices (the apply-or-explain standard) and Step Up practices (voluntary enhanced practices beyond the mandatory floor). For IPO candidates, the Practices carry immediate weight: the first post-listing annual report requires a MCCG 2021 compliance statement. Companies that list with structural governance gaps cannot easily close them in time for their first reporting cycle.
Three themes in MCCG 2021 carry the most weight for IPO preparation: board structure and independence, audit oversight, and sustainability governance.
Board Composition Requirements
The Bursa Malaysia Main Market Listing Requirements set the minimum composition floor. The MCCG 2021 Practices layer expectations on top of that floor. Both apply from the date of listing; the principal adviser assesses compliance during the pre-submission due diligence phase.
Minimum independence requirement. Under Bursa Main Market Listing Requirements, the board must include at least two independent directors, or at least one-third of the board as independent directors, whichever is higher. MCCG 2021 Practice 5.2 recommends majority independence for large companies, going beyond the Bursa minimum. For Main Market listings targeting institutional investors, majority board independence has become a market expectation even where it remains a recommendation.
Independence definition. An independent director exercises independent judgment and has no material relationship with the company, its related corporations, or its substantial shareholders. A former executive, significant customer or supplier, substantial shareholder, or professional service provider within a specified period does not qualify as independent, even if appointed in good faith.
Tenure limits and two-tier voting. MCCG 2021 Practice 4.2 introduces a two-tier shareholder voting mechanism for independent directors who have served more than nine consecutive years. Continuation requires an ordinary resolution from all shareholders and a separate ordinary resolution from minority shareholders excluding substantial shareholders. MCCG 2021 targets a maximum of 12 years; beyond 12 years, the director may continue only as non-independent.
For IPO candidates, the tenure clock matters. A director who has served eight years before listing will cross the nine-year threshold in the first post-listing year, triggering a two-tier vote at the first annual general meeting. This is assessed at the board recruitment stage, not at the meeting itself.
Gender diversity. MCCG 2021 Practice 4.5 requires all PLCs to achieve at least 30% women directors. The 2021 revision extended this requirement from large companies only to all PLCs on Bursa. This applies from the date of listing. A board that lists with zero women directors, or with women directors representing less than 30% of board seats, will have a MCCG 2021 compliance gap to explain in its first annual report.
Chairman. MCCG 2021 Practice 3.1 provides that the chairman of the board should be an independent director. Practice 3.3 states that the chairman should not serve on the audit committee or the remuneration committee. The chairman and the chief executive officer should be separate persons; the roles should not be combined.
For ACE Market and LEAP Market companies, the Bursa ACE Market and LEAP Market Listing Requirements set their own board composition floors, which are generally consistent with the Main Market minimum but with lighter continuing obligations post-listing. The MCCG 2021 applies to all PLCs regardless of board; the composition standards above apply across all three boards from the date of listing. The Main Market vs ACE Market vs LEAP Market comparison sets out the board governance differences between boards in more detail.
The Audit Committee Mandate
The audit committee is the most structurally significant governance body for IPO candidates. It is the committee that reviews the Accountant’s Report and the audited historical financials that form the basis of the prospectus. A company that forms its audit committee simultaneously with the SC submission cannot credibly demonstrate that the committee has reviewed the financial information with independence.
Minimum composition under Bursa LR. The Bursa Main Market Listing Requirements (Appendix 9C) require the audit committee to have at least three members, all of whom must be non-executive directors, with a majority being independent directors. At least one member must be a member of the Malaysian Institute of Accountants (MIA), or must hold a degree, diploma, or professional qualification that requires the passing of examinations in accounting or finance, or must have at least three years of experience as a preparer or auditor of financial accounts.
MCCG 2021 Practices for the audit committee. Practice 9.2 of MCCG 2021 requires the audit committee to meet at least four times per year. Practice 9.3 requires formal terms of reference. Practice 9.5 requires the audit committee chair to be an independent director who is not the board chairman.
Cooling-off period for former audit partners. MCCG 2021 Practice 9.5 requires a former key audit partner of the company’s external auditor to observe a cooling-off period of at least three years before appointment to the audit committee. Companies whose proposed audit committee members include former audit partners must verify the three-year window is satisfied.
Internal audit function. MCCG 2021 Practice 11.2 requires PLCs to establish an internal audit function, either in-house or outsourced. For pre-IPO companies, the pattern observed is to establish the internal audit function 6-12 months before listing. This allows the function to complete at least one internal audit cycle, producing a report that the audit committee can review and that the prospectus drafting team can reference as evidence of established governance controls. A company that establishes its internal audit function in the week before submission has not demonstrated established governance.
Nomination and Remuneration Committees
Bursa Main Market Listing Requirements require the nomination committee and the remuneration committee to be established and operational by the date of listing.
Nomination committee. MCCG 2021 Practice 5.6 assigns the NC responsibility for identifying, evaluating, and recommending candidates for board appointment, and for assessing director effectiveness. The NC must be chaired by an independent director, with a majority of independent members. The pre-IPO role is substantive: the NC reviews the board skills matrix, identifies expertise gaps, and recruits independent directors to fill them. The NC’s first formal board composition recommendation typically precedes the SC application by 3-6 months.
Remuneration committee. MCCG 2021 Practice 7.1 assigns the RC responsibility for director remuneration policy and individual packages. The RC chair must be an independent director. Each director’s remuneration package must be disclosed in the annual report alongside the remuneration policy.
Related-Party Transactions: The Governance Disclosure Burden
Related-party transactions (RPTs) between the applicant company and its directors, major shareholders, or their connected persons represent the most documentation-intensive governance area in Malaysian IPO preparation.
SC Equity Guidelines R7-2024 prospectus disclosure. The SC Equity Guidelines require the prospectus to contain a full description of all material RPTs during the track record period. For each RPT, the prospectus must disclose: the nature of the relationship between the parties, the value of the transaction, whether it was conducted at arm’s length, and the basis on which arm’s-length terms were determined. Transactions between the applicant and a director-controlled entity, a major shareholder-controlled entity, or a family member of a director or major shareholder all fall within scope.
Post-listing continuing obligation under Bursa LR. Bursa Main Market Listing Requirements (Chapter 10) set the continuing RPT governance obligation. Any recurrent RPT (a recurring transaction with a related party, such as a management fee or a procurement arrangement) above the prescribed materiality threshold requires a shareholder mandate. The mandate is obtained at the annual general meeting by way of an ordinary resolution passed by disinterested shareholders. Shareholders who are parties to or connected with the RPT must abstain from voting.
Pre-IPO cleanup pattern. The standard process involves three stages: inventory (map all RPTs across the track record period using historical financial records and data room documentation); assess and unwind (identify non-essential RPTs, including inter-company loans from major shareholders, below-market lease arrangements with director-connected entities, and management fee arrangements that transfer value to controlling shareholders, and unwind them before submission); document remaining RPTs (for continuing RPTs that cannot be unwound, establish contemporaneous arm’s-length pricing evidence, prepare the post-listing shareholder mandate framework, and include full prospectus disclosure).
Companies with extensive pre-IPO RPT histories that lack contemporaneous arm’s-length documentation typically face the largest delays in due diligence. The time cost of retrospective documentation and its review by legal counsel is significant. The Malaysia Company Search Guide covers how to verify the SSM registration details of related-party entities, which is a standard step in the RPT inventory process.
Conflict-of-interest policy. MCCG 2021 Practice 8.3 requires PLCs to adopt a formal conflict-of-interest policy governing how board members declare and recuse from deliberations where they have a material interest. The policy must be in place before listing. Directors who are also substantial shareholders or who have material interests in RPT counterparties must declare those interests and abstain from board deliberations on the relevant transactions.
ESG and Sustainability Disclosure Expectations
Sustainability governance is now part of the mandatory disclosure framework for Bursa PLCs, not a voluntary reporting initiative.
MCCG 2021 Practice 10.2. PLCs must disclose in their annual report how the board oversees ESG risks and opportunities, including climate-related risk. This is a MCCG 2021 Practice applying from the first reporting cycle post-listing. All Bursa PLCs must also publish a sustainability statement in the annual report describing the governance mechanisms for managing material economic, environmental, and social risks. The Bursa Corporate Governance Guide (4th edition) sets out the reporting structure.
IFRS S1 and S2 mandatory adoption timeline. Bursa Malaysia has mandated the adoption of IFRS S1 (General Requirements for Disclosure of Sustainability-related Financial Information) and IFRS S2 (Climate-related Disclosures) for listed companies in a phased schedule. Main Market companies with market capitalisation at or above MYR 2 billion (approximately USD 430 million at MYR 4.65 per USD) as at 31 December 2024 are Group 1 and must adopt IFRS S1 and S2 for annual periods beginning 1 January 2025. Remaining Main Market companies (Group 2) adopt from 1 January 2026. ACE Market companies (Group 3) adopt from 1 January 2027.
For a company targeting Main Market listing with a post-listing market capitalisation above MYR 2 billion, the first annual report will require IFRS S2 disclosure, including Scope 1 and Scope 2 greenhouse gas emissions data. Establishing a credible GHG measurement baseline typically takes 12-18 months from the point of data collection. Companies in this category that have not started their measurement baseline by the time they submit their SC application will face an immediate compliance cost in their first reporting year.
For companies targeting ACE Market listing, the IFRS S1 and S2 obligation takes effect from 1 January 2027. The governance structure (board oversight of ESG, sustainability statement) still applies from day 1 of listing; only the climate-specific IFRS disclosure has a deferred effective date.
Director Fit-and-Proper Requirements
The SC Equity Guidelines R7-2024 and the Bursa Main Market Listing Requirements set fit-and-proper criteria for proposed directors and senior management. The criteria cover: no conviction for fraud, theft, or dishonesty; no adverse civil judgment involving fraud or breach of fiduciary duty; not an undischarged bankrupt; no adverse regulatory action (SC, Bursa, or equivalent foreign regulator) within the preceding period; not a director of a company wound up compulsorily by creditors within a specified period.
The CFO or finance director must hold a recognised professional accounting qualification or meet equivalent experience criteria under Bursa LR. The CFO must be appointed at least six months before the SC submission date, providing time to review and take responsibility for the historical financial statements in the prospectus. The six-month requirement is frequently underestimated: companies that plan the CFO appointment as a concurrent step with the SC submission are typically already in breach of this condition.
All proposed directors complete a fit-and-proper self-declaration as part of the initial due diligence package. Any adverse records require either resolution before submission or explicit prospectus disclosure. Records discovered after listing have material consequences for the principal adviser’s liability.
The Governance Readiness Timeline
The following pattern is drawn from the regulatory sequence set by MCCG 2021, the Bursa Main Market Listing Requirements, and the SC Equity Guidelines R7-2024, cross-referenced with the preparation patterns disclosed in public prospectuses and practitioner guides.
24 to 18 months before SC submission. Companies that meet their eligibility thresholds typically begin a governance gap assessment at this stage. The assessment covers board composition against the MCCG 2021 Practice floors, the RPT inventory and documentation status, whether a fit-and-proper review has been conducted for all proposed directors, and whether the internal audit function exists. The gap assessment output becomes the remediation roadmap for the 18-month preparation window.
18 to 12 months before submission. Independent director recruitment typically commences. The audit committee, nomination committee, and remuneration committee charters are drafted and adopted. The conflict-of-interest policy and board charter are adopted. The RPT cleanup process begins, including identification of RPTs to unwind and documentation of continuing RPTs.
12 to 6 months before submission. All three board committees hold inaugural formal meetings. The internal audit function completes its first audit cycle and presents findings to the audit committee. The CFO is appointed if not already in role. The sustainability governance framework is established: the board assigns ESG oversight responsibility, and the sustainability reporting baseline measurement begins. Companies targeting Main Market listings above the MYR 2 billion market capitalisation threshold at this stage initiate IFRS S2 baseline data collection.
6 to 3 months before submission. The audit committee reviews the Accountant’s Report and the audited historical financial statements for the track record period. RPT documentation is complete and reviewed by legal counsel. Director fit-and-proper declarations are filed with the principal adviser. The board skills matrix is finalised and the board composition locked. Any remaining board gaps, particularly gender diversity if below 30% women directors, are addressed.
3 months to submission. Prospectus governance disclosures are drafted: director profiles, RPT tables, committee composition and terms of reference, independence statements for each proposed independent director, and the MCCG 2021 compliance statement structure. The governance disclosures are reviewed by the principal adviser and legal counsel as part of the prospectus verification process.
What the Governance Review Actually Assesses
The principal adviser’s governance due diligence assesses whether the proposed structures are operational, not merely formally adopted. Audit committee minutes that show substantive engagement with financial risk carry more weight than minutes that record “the financial statements were noted.” A conflict-of-interest policy that is signed by all directors and referenced in specific board deliberations demonstrates the policy is applied, not filed.
The SC and Bursa assess the same substantive signals when reviewing the listing application. Governance deficiencies surface as additional information requests, prospectus amendments, and submission delays. The pattern observed from public listings is that governance issues account for a material share of the gap between principal adviser engagement and SC submission, in companies that treat governance as a documentation task rather than an operational one.
Editorial content. Not legal, regulatory, or compliance advice.