DFI
One register across the institution and the portfolio.
A development finance institution or fund manager answers to a board, to investors or shareholders, to lenders through covenants, and often to a capital markets regulator as well. Each asks a slightly different question about the same control environment. eGRC lets you answer all of them from one register.
Supervisory bodies institutions in this sector report to
- CMA Capital Markets Authority · Kenya
- SEC Securities and Exchange Commission · Nigeria
- FSCA Financial Sector Conduct Authority · South Africa
- CMA Capital Markets Authority · Uganda
eGRC does not ship a fixed rulebook. Your obligations register is built from the licences, statutes and supervisory guidance that apply to you, in whichever markets you are supervised — including groups reporting to more than one.
PRESSURE
What makes this hard in your sector.
Written from what we are shown when we sit down with organisations like yours. If none of it is true for you, this is probably not the right product for you yet.
-
Institutional risk and portfolio risk are managed apart
The operational risk register describes the institution. Investment risk describes the portfolio. The board is asked to form one view of both from two documents that share no scoring.
-
Covenants are tracked in the finance team's spreadsheet
Lender covenants, donor conditions and investor side letters carry hard obligations with dates. They are usually held by one person, outside the risk framework entirely.
-
Investor and rating due diligence asks for evidence, not assertions
An investor review or a rating exercise wants to see the control, the test, the date and the result. Assembling that after the request arrives is the expensive way to do it.
-
Environmental and social requirements sit in a separate system
E&S risk management is often mature and completely disconnected from the enterprise register, so the same investee appears in two unrelated risk views.
OUTCOME
What changes once the register is in one place.
These are the things clients in this sector set up first.
- Institutional and portfolio risk on one register with consistent scoring and a single owner per risk
- Lender covenants, donor conditions and investor commitments held as obligations with owners, dates and evidence
- Control testing evidence ready before an investor, lender or rating review asks for it
- Consolidated reporting across entities, funds or country offices, with roll-up to a group view
- Environmental and social requirements carried in the same framework as everything else
- An audit trail that stands up in an external review without a document-gathering exercise first
MODULES
The modules that carry most of the weight here.
Every tier includes the register and the audit trail. These are the ones this sector leans on hardest.
- RISK
Risk register
You keep one register, and it is always the current one.
- CTRL
Control library
You can show which control reduces which risk, and whether it worked.
- OBLG
Compliance obligations
You hold one list of what you owe your regulator, and who owes it.
- ISSU
Issues and actions
You track every finding to closure in one place, whoever raised it.
- ASSR
Assurance reporting
You build the committee pack from the register, not from memory.
- TRAIL
Audit trail
You can prove what the register said on any date, and who changed it.
- AI
AI assistance
You get a first draft, and you keep the decision.
See it set up across a portfolio.
Tell us how many entities, funds or country offices you are consolidating and what your lenders and investors ask for. The demo will show the roll-up, not a single register.