This podcast series features Rodney A. Grandon, Managing Director at Affiliated Monitors, Inc., with a five-part series on Suspension and Debarment. During a 27-year career with the US military and government, Grandon served as the Air Force’s Suspending and Debarring Official as well as a wide variety of other functions which gives him subject matter expertise into issues surrounding this topic.
This series includes:
Introduction to Suspension and Debarment
Suspension and debarment are not civil or criminal matters resulting in a penalty being imposed on a particular party. Suspension and Debarment is an administrative matter. In a civil or criminal matter, the Department of Justice takes the lead in those actions which are contested litigated matters, with civil and criminal rules around evidence and procedure. While suspension and debarment have evidentiary and procedural considerations, they are much more informal. Grandon noted the rules basically say they should be as informal as it as is practicable under the circumstances.
What is the difference between Suspension and Debarment?
Interestingly many of the benefits of a company in working with a monitor come from A suspension is used when there is an immediate need. It is a temporary measure; there is a twelve-month limit, which can be extended for another six months. A debarment is for a specific term but is generally not longer than three years. Grandon emphasized the temporary nature of a suspension while debarment is seen as more permanent, even with the limit of the term.
What is the convergence between Suspension & Debarment and the FCPA?
Debarment may be based on actions so serious or compelling that it affects the present responsibility of the contractor or subcontractor. Grandon noted, “there is some fairly broad language as to what the basis for a suspension and debarment can be.” This means that in the context of anti-corruption laws, it can be the basis of a suspension or debarment, further meaning that under the FCPA, the conduct to incur a violation does not require actual bribery or corruption.
What is a present responsibility determination?
Present responsibility has become sort of a buzzword. It’s the underlying basis for action involving excluding a party from the federal marketplace through suspension or department.” Unfortunately, the phrase itself is not defined anywhere in the regulatory structure. This means its determination comes “down to the discretion of the federal officials who have been empowered to exercise the suspension and debarment authority.
Remedies and Compliance in Suspension and Debarment
Grandon said that the defense community largely led the process of putting together an effective ethics and compliance programs. “There were defense industry initiatives where the contractors get together and talk about what it takes to promote ethics and compliance and the defense industry been doing this for years.” This led Grandon to find, that non-governmental commercial industries were not as far along as defense industries.
For more information on Affiliated Monitors, visit their website at www.affiliatedmonitors.com.
Author: admin
Most CCOs and compliance practitioners understand the need for continuous monitoring. Whether it be as a part of your overall monitoring of third-parties, employees, or to test the overall effectiveness of internal controls and compliance, continuous monitoring is clearly a part of a best practices compliance program. Further, while most compliance practitioners are aware of the tools which can be applied for continuous monitoring, they may not be as aware of how to engage in the process. Put another way, how do you develop a methodology for building a continuous controls monitoring process that yields sustainable, repeatable results?
Joe Oringel, co-founder and principal at Visual Risk IQ uses a five-step process. The steps are: 1) brainstorm, 2) acquire and map data, 3) write queries, 4) analyze and report, and 5) refine and sustain. If you can establish your extraction and mapping rules, using common data models within your organization, you can use them to generate risk and performance checks going forward. Finally, through thoughtful use of continuous monitoring parameters, you can create metrics that you can internally benchmark your compliance regime against over time to show to any regulators who might come knocking.
Three key takeaways:
- Create a process to monitor your controls.
- Use a compliance SME to work with your internal controls specialist to develop queries from the compliance perspective.
- Finally, do not forget the feedback loop nature of the process by integrating your results going forward.
In this five-part series, Mike Volkov and Tom Fox consider COVID-19 from a variety of angles and perspectives; from the Board of Directors, the CCO, the ethical company, new laws and regulations, crisis management and leadership. In this first episode, we consider the why compliance and ethics are even more important during coronavirus health crisis and what it may all mean going forward. Highlights from the podcast include:
- Businesses must lead from the top.
- Ethical decision making must be the guidepost for all decisions.
- Who are all the stakeholders which need to be considered?
- There are a variety of stakeholders which must be considered but health and safety should be the Number 1 consideration.
- Should employees be the No. 1 consideration?
- How will Gen Z view your company’s actions?
Resources
Mike Volkov-Ethical Business Decisions in the COVID-19 Crisis
Tom Fox–Company Responses
In the Episode, I visit with Karen Woody, Assistant Professor of Law. Her areas of expertise include, Securities Law, Financial Regulation and White-Collar Crime. We visit about the recent Supreme Court argument in the Lui case and how it might (or might not) impact the SEC’s ability to seek profit disgorgement for fraudsters.
Some of the highlights include:
- What is profit disgorgement? Is it different from restitution?
- How has the SEC used this doctrine in the past?
- How did the Kokesh decision open the way for the Lui appeal?
- How does the Lui case attack this doctrine?
- What question was before the Supreme Court?
- What were the parties arguments?
- From the Court’s questioning, what can be gleaned?
- Will the Court really allow convicted fraudsters to keep their ill-gotten gains by doing away with profit disgorgement?
This podcast series features Don Stern, Managing Director, Corporate Monitors and Consulting Services at Affiliated Monitors, Inc. on working with monitors. At the end of this series you will have a much broader appreciation on the benefits of an independent monitor, how monitors work and how the different types of monitorships can benefit a wide variety of businesses, transactions and business relationships.
This series includes:
Fears and Concerns in Working with Monitors
There can be a wide variety of concerns for those considering or being required to work with a monitor, both from the corporate perspective and individual employees. From the corporate perspective, the concerns can include the costs of a monitorship and that impact on the bottom line; opening up books the books to an outsider and interference with business operations. These are acerbated by a fear the monitor does not understand the business of the organization or even how business in done in the real world.
Impact Monitors Can Have for an Organization
Interestingly many of the benefits of a company in working with a monitor come from answering the employees fears and concerns. Many employees are intimidated by attorneys and some even fell guilty about themselves and their work even though they have done nothing wrong. Often employees do not feel like them can trust the company, particularly if the company does not employ the Fair Process Doctrine or institutional justice as a core value of the organization.
How Monitors Do Their Jobs
Stern explained that there are variety of tasks and roles a monitor uses when engaging in an independent monitorship. A monitor should understand type of approaches they will take to make an organization more compliant, starting with understanding the work plan. Many times, the monitor must push the organization along by getting buy-in and building consensus. Finally, there should be an awareness of helping the company being compliant in the future.
Regulators Using Monitors
At its most basic level, an independent monitor is a way for the government to extend its reach. Both in terms of lengthening out the time that you have true government oversight and in terms through many of the techniques we discussed earlier: focus group meetings, review documents, talking senior and middle management. It is a very cost-effective way for federal, state and even local governments to extend out their reach. This cost-effectiveness is driven home by that fact that the cost is not borne by the governmental entity or the regulators. The cost is borne by the entity involved.
Attorneys Using Monitors
Using an independent monitor in a pro-active manner which demonstrates how serious the company is about compliance. It can also be a way to demonstrate any illegal conduct may simply have been an outlier and does not reflect the values, culture and the way the company generally does business. This can provide quite a positive story to present to prosecutors, particularly under the new FCPA Corporate Enforcement Policy.
For more information on Affiliated Monitors, visit their website at www.affiliatedmonitors.com.
In today’s edition of Sunday Book Review:
- Dave Brubeck-A Life in Time by Phillip Clark
- Music by Max Steiner by Steven C. Smith
- All I Ever Wanted by Karen Valentine
- One Two Three Four-The Beatles in Time by Craig Brown
Next, we consider how the internal audit (IA) function can be used to facilitate more effective continuous improvement. According to the Institute of Internal Auditors’ own definition, internal audit is “an independent, objective assurance and consulting activity designed to add value and improve an organization’s operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.”
Some of the key compliance activities of IA are to maintain its independence; to conduct auditing activity of awareness and adherence to policies, procedures, internal controls and corporate governance, including those relating to legal, compliance and ethics risks; to ensure there is follow up of recommendations made in IA reports, including those relating to compliance and ethics risks, including to track and report on management follow up; assist and collaborate on internal investigations, including having IA provide audit expertise in dealing with internal controls and financial data; assist in both design and auditing of internal controls and follow up as required. Clearly this is a function which is and should be integrated into compliance.
For its part, the compliance function can leverage IA resources and professionals on audit techniques and analysis of internal controls and such integration extends the corporate compliance influence through the company’s IA network. Finally, it allows the corporate compliance function to be made aware of relevant concerns uncovered during audits, so compliance is more fully able to participate in recommendations and follow up.
Three key takeaways:
- Internal audit can be used to provide continuous improvement to and for compliance.
- Internal audit can also fill a gatekeeper role in your compliance regime.
- Compliance should leverage IA resources and professionals, on audit techniques and analysis of internal controls.
Over the month of April, I will consider the risk management of third-parties in an operationalized compliance program. As every compliance practitioner is aware, third-parties still present the highest risk under the FCPA. You must assess whether the company has a business rationale for needing the third party in the transaction, and the risks posed by third-parties, including their reputations and relationships, if any, with foreign government officials. You should ensure that contract terms with third parties specifically describe the services to be performed, the third party is actually performing the work, and that its compensation is commensurate with the work being provided in that industry and geographical region. Finally you must engage in ongoing monitoring of the third-party relationships, through updated due diligence, training, audits, and/or annual compliance certifications by the third party.
In this introduction, I visit with Alexander Cotoia, a Regulatory and Compliance Attorney at the Volkov Law Group to consider how recent FCPA enforcement actions point towards the use cases for a robust third-party risk management system. In 2022, the overwhelming majority of FCPA related enforcement actions involved third parties and required organizations to reprioritize third party risk management. In this episode, we consider case studies involving ABB Limited, GOL Airlines and Oracle which all demonstrated the importance of understanding bribery and corruption schemes, making voluntary disclosures, and reassessing third party risk management.
3 Key Takeaways
1. How can organizations reprioritize third-party risk management as a core compliance function?
2. What strategies can organizations use to avoid FCPA violations and maximize cooperation credit?
3.How can organizations effectively assess the risks posed by potential business partners?
Check out The Compliance Handbook, 3rd edition here