Client Feedback
What clients
tell us afterward
Candid feedback from organisations we've worked with across Malaysia.
← Back to HomeReviews
Feedback from recent engagements
We engaged Duskberry for a compliance review ahead of a regulatory submission. The team understood what was relevant to our sector without needing extensive background from us. The remediation plan was structured in a way our internal team could actually act on.
The business continuity plan Duskberry produced for us is something we've actually referred to. The tabletop exercise surfaced a few gaps in our thinking that a written plan alone wouldn't have caught. Straightforward to work with — no over-selling, no unnecessary complexity.
We used the risk mapping service ahead of a strategic planning cycle. The visual landscape format worked well for our partners — it made risk conversations much more grounded. Suraya was easy to engage with and didn't try to position the findings as more alarming than they were.
We engaged Duskberry for a compliance review as we were preparing to expand into a regulated segment. The report was well-structured and the remediation roadmap gave us a clear sequence to work through. Delivered on time, exactly as scoped. Will use them again.
We'd tried to build a continuity plan internally and found it difficult to get leadership alignment on what actually counted as critical. Duskberry's process handled that through the workshop format — the priorities became much clearer. The final document was practical rather than ceremonial.
The risk landscape produced for our board gave us a common language for discussing exposure across divisions. The workshop was more valuable than expected — not just as a validation step, but as a conversation that shifted how some of our leadership team thought about risk ownership.
Case Studies
How engagements typically unfold
The Situation
A mid-sized asset management firm was preparing for a Bank Negara supervisory review. Internal compliance documentation had grown organically over five years and leadership had limited visibility into where the framework was strong and where it had gaps.
The Engagement
Duskberry conducted a compliance architecture review over four weeks. This included a documentation audit, interviews with compliance and operations staff, and a gap analysis against applicable guidelines. Findings were reviewed with leadership before the final report.
The Outcome
The compliance architecture report identified eleven structural gaps, of which three required attention before the review. The staged remediation plan allowed the team to address priority items within six weeks. The supervisory review proceeded without significant findings.
"The staged plan meant we weren't overwhelmed — we knew what to fix first and why. That framing was genuinely useful."
The Situation
A component manufacturer in Shah Alam experienced a supply chain disruption during the pandemic period and found they had no structured recovery protocol. By the time they engaged Duskberry, operations had normalised — but leadership wanted a proper plan before the next disruption.
The Engagement
The six-week engagement produced a business continuity plan covering three core disruption scenarios. Critical functions were mapped against recovery time objectives. A tabletop exercise involving the operations and logistics leads surfaced two areas where the draft plan needed revision.
The Outcome
The final plan was integrated into the company's annual operations review cycle. The tabletop exercise became a template the company uses internally. When a secondary supply disruption occurred eight months later, the plan was referenced and the response was notably more coordinated.
"Having done the tabletop exercise meant people knew what the plan said. It wasn't just a document that sat in a folder."
The Situation
A consulting and advisory firm with 85 staff was preparing for a strategic planning cycle. Partners wanted a structured view of the organisation's risk exposure to inform where to invest in resilience and where existing controls were sufficient.
The Engagement
The three-week risk landscape engagement covered operational, client relationship, regulatory, and reputational risk areas. A visual risk landscape was developed through stakeholder interviews and document review. The validation workshop allowed partners to challenge assumptions and refine risk ratings.
The Outcome
The risk landscape was presented at the annual partners' retreat and used to structure the risk section of the five-year strategy. One reputational risk area that had not surfaced in previous discussions became a dedicated agenda item — resulting in a new client engagement protocol.
"The visual format made the risk conversation happen rather than stall. That alone was worth the engagement."
Reach Us
Get in touch with Duskberry
Add your organisation to the list
Start with a conversation. No obligation, and we'll tell you honestly whether what we do suits your situation.
Start a Conversation