Rampart
GRC, run as one system, all year.
A standard programme that maps every obligation you have, closes the gaps, and keeps your governance, risk and compliance current, so you are ready for any regulator, lender or investor who asks.
Every regulator, lender and investor will eventually ask the same questions. Rampart makes sure you already have the answers, filed, current and signed off.
Three pillars. One standard.
Every Rampart client gets the same tested framework, scaled to the size and regulation of the business.
Run the company properly.
- Board and committee charters
- Board calendar, papers and minutes
- Statutory registers and CAC filings
- Shareholder agreements and delegated authorities
- Conflicts, related-party and whistleblowing policies
- Alignment with the Nigerian Code of Corporate Governance 2018 where it applies
See problems before they land.
- Risk framework and appetite statement
- Risk register with owners and key risk indicators
- Third-party and vendor due diligence
- Business continuity and incident response
- Contract and licence risk: expiries and change of control
Meet every obligation, on time.
- Obligations register mapped to your regulators
- Data protection under the NDPA 2023 and GAID 2025: NDPC registration, privacy notices, records, DPIAs and breach response
- Annual data protection compliance audit returns
- Licences, permits and renewals tracked
- Sector regulator returns where you are regulated
A standard cycle, every year.
The same five stages for every client, so you always know what happens next and what you will receive.
Baseline
We map every obligation, test what is in place and give you a scored GRC baseline report. Weeks 1–4.
Remediate
Priority gaps closed first: filings brought current, policies adopted, registers built. Months 2–3.
Run
We manage the compliance calendar, prepare filings and returns, and flag regulatory changes as they land.
Report
Your board gets a clear GRC report: status, incidents, upcoming obligations and decisions needed.
Renew
Each year we re-score, refresh your policies and give you a diligence-ready pack.
Example compliance calendar
Illustrative. Your calendar is built from your own obligations register, using your actual filing dates.
Eight standard deliverables.
The same set for every client, refreshed every year.
GRC baseline report
Where you stand, scored across all three pillars.
Obligations register
Every law, regulator and filing that applies to you.
Compliance calendar
Every deadline for the year, owned and tracked.
Risk register
Top risks, owners, indicators and actions.
Policy library
Board-approved policies, kept current.
Data protection pack
NDPA 2023 documents, records and audit return.
Board GRC report
A short, regular report your board can act on.
Diligence-ready pack
What a lender or investor will ask for, ready to share.
Swipe to see more →
Three levels of cover.
Same framework, same deliverables, scaled to your size and regulation. Fees are agreed after a consultation.
| What’s included | EssentialsGrowing businesses getting the basics right. | ProfessionalMid-market companies preparing for investors and lenders. | EnterpriseRegulated, listed and multi-entity groups. |
|---|---|---|---|
| GRC baseline assessment and score | |||
| Obligations register and compliance calendar | |||
| Corporate filings and statutory registers | |||
| Data protection under the NDPA 2023 | Core documents and annual audit return | Full programme | Full programme, with DPO support |
| Governance policy library | Starter set | Full library | Full library, tailored to your regulators |
| Risk register and key risk indicators | — | ||
| Third-party due diligence | — | ||
| Board GRC report | Twice a year | Quarterly | Quarterly, with committee support |
| Regulatory change alerts | |||
| Sector regulator returns (CBN, SEC, NCC, NAICOM and others) | — | — | |
| Incident response support | Guidance | Priority | |
| Investor and lender diligence support | — | ||
| GRC lead | Shared | Named lead | Dedicated team |
Where do you stand? Find out in two minutes.
Ten questions across governance, risk and compliance. Your answers stay on this page.
GRC and legal processes delivered
2023 obligations built into every plan
team that also runs your deals, so compliance never stalls one
Legal work within Rampart is delivered through a licensed legal practitioner. Rampart does not replace your statutory auditors or company secretary where the law requires them; we work alongside them.
Make compliance the reason a deal closes.
Book a consultation to scope your obligations and find the right level of cover. We respond within 24 hours.