Here are security / risk‑management firms in Malaysia that specialise in risk assessment and related services (both international consultancies with local offices and local security consultancies). I’ve listed a short description and a source for each so you can follow up.

• Kroll — global investigations, intelligence, security risk, due diligence and compliance services; Kuala Lumpur office (investigations, compliance, risk advisory). (Kroll.com)

• Control Risks — international risk and strategic consulting firm offering political/security risk analysis, crisis & incident management, security assessments; operates in Malaysia (Kuala Lumpur). (malaysia.indeed.com)

• EY (Ernst & Young) Malaysia — large professional services firm offering risk advisory and cybersecurity/cyber risk assessments and security transformation services. Useful for enterprise risk, cyber and resilience programmes. (ey.com)

• Associated Risks Limited — regional security & risk management company with a Malaysia office offering risk management, crisis management, close protection, intelligence and related services. (associated-risks.com)

• Nemesis Security (Malaysia) — local security company providing security consultancy, physical security risk assessments, bespoke security management and training. Good for physical-site assessments and operational security needs. (nemesissecurity.com.my)

• TIRARC Solution PLT — Malaysian security consultancy offering physical security risk assessments, security operations reviews, policies and systems design. (tirarcsolution.com)

Notes and next steps

• The list mixes large global consultancies (suitable for enterprise, cross‑border, or regulatory matters) and Malaysia‑based providers (often better for operational/physical security work).
• If you’d like, I can: shortlist 3 firms matched to your sector (e.g., oil & gas, finance, retail), pull contact details and office addresses, or prepare sample scope-of-work language for a physical or corporate risk assessment. Which would you prefer?