Twelve sites, four vendors, nobody who can list them.
That is the normal state of a Malaysian group's web estate. We map every property and every control point across the group, then run them under one governed arrangement with a named owner per site.
Procurement-ready documentation · MSA and DPA on request · invoiced to a Malaysian entity in MYR
Illustrative. Amber marks a property with no named internal owner or no reachable vendor.
8
control points mapped per property
12,000
ringgit, where an estate review starts
1
named owner recorded per site
0
accounts registered to us instead of you
What group web estates look like
The risk is not one bad site. It is not knowing how many you have.
Campaign microsites outlive the campaign. A subsidiary buys hosting on a director's personal card. The agency that built the investor-relations section stops answering. None of it appears on an IT asset register.
Risk 01
Properties nobody owns
A microsite from a 2022 campaign still resolves, still runs an unpatched CMS, and still carries your brand. Nobody is budgeted to look at it.
Risk 02
Personal cards and personal emails
Domains and hosting bought by staff who have since left. Renewal fails silently, and recovery requires a person who no longer works for you.
Risk 03
No consolidated view for audit
When internal audit or a listing requirement asks for the web asset register, somebody spends two weeks building one from memory.
Engagements
Three ways in, all fixed-quoted.
No day rates, no time-and-materials, no hourly billing. Per-site care is priced from the public ladder so your finance team can reconcile it against the website.
Estate review
Find out what the group actually owns.
From RM12,000
fixed, by property count · 3–4 weeks
- ✓ Every property discovered and listed
- ✓ 8 control points mapped per site
- ✓ Named owner assigned or flagged missing
- ✓ Risk register in your audit format
- ✓ Consolidated cost of the current estate
Governed care
One arrangement across the whole estate.
From RM13,000/mo
monthly system improvement · excluding SST
- ✓ Standard care on every property
- ✓ One monthly report for the group
- ✓ Named owner and escalation path per site
- ✓ Quarterly governance review
- ✓ Everything registered to your entities
Platform programme
Systems, not sites.
From RM30,000
phased, fixed-quoted per phase
- ✓ Data model and integration architecture
- ✓ Payments, e-invoicing, internal tooling
- ✓ Staging, pipeline and rollback
- ✓ Documentation written for handover
- ✓ Monthly improvement available after release
Website care starts at RM450/month. Monthly System Improvement starts from RM13,000/month, excluding SST. Published, not negotiated in a room.
How a governed arrangement runs
Discovery, then documentation, then routine.
The first four weeks are the whole value. After that it should be boring, which is the point.
Weeks 1–2
Discovery
DNS, registrar and certificate records across the group. We usually find properties nobody mentioned.
Weeks 2–3
Control mapping
Eight points per property, traced to a named account holder and a named internal owner.
Week 4
Register delivered
A risk register in your audit format, plus a consolidated cost of the current estate.
Ongoing
Governed care
One monthly report for the group, quarterly review, escalation path per site.
What procurement gets
- ✓ Master services agreement and data processing agreement
- ✓ Named escalation path with response commitments
- ✓ Consolidated monthly invoice, MYR, Malaysian entity
- ✓ Web asset register in your audit format
- ✓ All accounts registered to your entities, evidenced
- ✓ Documented handover pack, kept current
Where we are the wrong supplier
- — 24/7 follow-the-sun support — emergencies are 9am–9pm MYT
- — A named delivery team of five, because there is one operator
- — Brand campaigns, paid media or creative production
- — ISO 27001 certification, which we do not hold and will not claim
Questions procurement asks
Can one operator serve a group estate?
For care and governance across a dozen properties, yes — the throughput cap is one request in flight, so the constraint is explicit rather than hidden. If you need parallel delivery on a deadline, we are the wrong supplier and will say so at the briefing.
Do you carry professional indemnity insurance?
Ask at the briefing and we will give you the current position in writing rather than a marketing answer. We will not claim coverage or certifications we do not hold.
Can you work under our MSA?
Usually. Send it with the briefing request. The one clause we always negotiate is any term that puts domains, repositories or hosting in the supplier's name — that is the whole premise of the business.
What happens at the end of a term?
Nothing needs handing over, because nothing was ever ours. We remove access, hand you the current register and documentation pack, and there is no offboarding fee.
Start with a list of what you own.
The estate review produces one, from RM12,000 depending on property count. Credited against the first six months of a governed arrangement.