🟢 Now accepting new clients  ·  Free 2-hour assessment available  ·  Book your slot →
GCRA
Guyana Compliance
& Risk Advisors
Est. 2021 · Linden, Guyana
📅 Book free assessment 💬 WhatsApp us now
📱 +1 (973) 866-7456 ✉️ nehemia@guyanacra.com
12 questions answered

Common questions about compliance in Guyana

Everything you need to know before booking your free assessment. Still have questions? WhatsApp Nehemia directly.

💬 Ask Nehemia directly
How long does a compliance audit take? +

A free compliance assessment takes approximately 2 hours — either in person at your office or via Zoom. After the assessment your written gap report is delivered within 24 hours. Full remediation work typically takes 2 to 6 weeks depending on the number and complexity of gaps identified. Emergency engagements can be completed in under 1 week.

What happens if my company fails a compliance audit? +

A failed compliance audit can result in your contract being suspended, removal from vendor lists, or disqualification from future tenders. We specialise in emergency remediation for companies that have received compliance warnings — we have helped companies go from failing to fully compliant in as little as 3 weeks. Contact us immediately if you have received a compliance notice.

Do you work with small companies or only large contractors? +

We work with Guyanese oil sector contractors of all sizes — from sole traders and small family businesses to medium-sized companies with 100+ staff. Compliance requirements apply to every vendor regardless of size and small companies are often the ones most at risk. Our packages start from G$1,045,000.

Can you help us register on the ExxonMobil supplier portal? +

Yes — vendor portal registration support is included in our Vendor Qualification Audit service. We have helped Guyanese companies successfully register on the ExxonMobil, Hess, SBM Offshore, Schlumberger, and Halliburton supplier portals. We fix all documentation gaps and submit your application in the format oil companies expect.

What is the difference between the Standard and Complete packages? +

The Standard package includes full compliance assessment, complete gap remediation, all policy documents written for you, a staff briefing, and 30 days support. The Complete package adds ISO 27001 preparation, a pre-certification audit, executive board presentation, 90 days support, and the option to continue with monthly monitoring.

How much does monthly compliance monitoring cost? +

Monthly monitoring starts from G$627,000 per month (G$627,000 GYD) depending on company size and compliance areas covered. This includes monthly compliance checks, policy and document updates, certification renewal management, quarterly internal audit reports, and on-call advisory support. Clients on monthly monitoring are always audit-ready.

Are you 100% Guyanese owned? +

Yes. Guyana Compliance & Risk Advisors is 100% Guyanese owned and operated. We are registered on the Central Local Business Directory and hold a valid Local Content Certificate. Our founder Nehemia Shury holds a BS in Cybersecurity and an MBA and is based in Linden, Upper Berbice, Guyana.

Is the free assessment really free with no obligation? +

Yes — completely free with no obligation. The free assessment takes 2 hours and you receive a written gap report showing exactly where your compliance stands. There is no pressure to proceed further. We believe in earning your business through the quality of our work — not through pressure tactics.

Do you also audit gold mining companies? +

Yes — we offer 5 gold sector compliance services covering GGMC regulatory compliance, EPA environmental audits, mercury and Minamata Convention compliance, LBMA responsible gold certification preparation, and Responsible Gold Mining Principles audits. See our gold and mining page for full details.

Still have questions?
Call, WhatsApp, or book a free 30 minute call with Nehemia directly
📅 Book a free call 💬 WhatsApp us
What certifications does Nehemia hold and why do they matter? +

Nehemia holds 15 professional certifications including CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), ISO 27001 Lead Auditor, PMP (Project Management Professional), CompTIA Security+, CySA+, PenTest+, Network+, A+, ITIL Foundation, and LPI Linux Essentials — plus four CompTIA professional designations (CSIS, CIOS, CSAP, CNVP). He also holds a BS in Cybersecurity and Information Assurance and an MBA. These are the same certifications held by compliance auditors at the oil companies themselves. When you hire GCRA you are hiring someone who knows the standards from the inside.

Can GCRA help us if we are a small business with limited resources? +

Yes — in fact small businesses are who need GCRA most. Large companies have compliance departments. Small Guyanese contractors are competing against them with one or two administrative staff. GCRA levels that playing field. We have helped businesses with as few as 5 staff members get fully compliant and qualify for oil sector contracts. Our packages start from G$1,045,000 and the free assessment is always the first step regardless of your company size.

How is GCRA different from a lawyer or accountant? +

Lawyers focus on legal documents and contracts. Accountants focus on financial statements and tax. GCRA specialises specifically in the compliance requirements of oil and gold sector vendor programmes — cybersecurity, HSE, Local Content Act, financial controls, vendor qualification, and operational standards. We write the policies oil companies need to see, train your staff, organise your documentation, and prepare you for the actual vendor audit. This is a specialised service that lawyers and accountants do not provide.