Categories
Daily Compliance News

Daily Compliance News: August 6, 2024 – The Texans Don’t Want Corruption Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee and listen to the Daily Compliance News. All from the Compliance Podcast Network.

Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

In today’s edition of Daily Compliance News:

  • Texans don’t want corruption in government.  (YahooNews)
  • Law firms should let associates unplug (good luck with that). (Reuters)
  • Banned AI chips coming into the US. (NYT)
  • Who makes the corporate rules? (FT)

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.

Categories
Blog

DOJ Whistleblower Pilot Program: Transforming the Compliance Landscape

In a world where corporate integrity and accountability are more crucial than ever, the Department of Justice (DOJ) ‘s Whistleblower Pilot Program announcement marks a pivotal moment for compliance professionals. This initiative promises to reshape how we approach whistleblowing, corporate misconduct, and organizational culture. Let’s dive into the details and implications of this program, focusing on how it impacts compliance officers, whistleblowers, and corporate governance.

Deputy Attorney General Lisa Monaco said of the Whistleblower Pilot Program, “With this program, we’re doubling down on a proven strategy to ferret out criminal activity that might otherwise go unreported. Law enforcement has long offered rewards to coax tipsters to report crimes — from the “Wanted” posters of the Old West to the reforms in Dodd-Frank that created whistleblower programs at the SEC and the CFTC.” However, she cautioned, “those programs — by their very nature — are limited in scope. They only cover misconduct within those agencies’ jurisdictions. The same is true for similar programs run by the IRS and FinCEN. And qui tam actions, which offer whistleblowing incentives, are available only for fraud against the government.” The DOJ “corporate enforcement program is rooted in using carrots and sticks. Today’s announcement builds on our other efforts to incentivize reporting of corporate misconduct to the government.” Part of those carrots is to reward those “under these disclosure programs — both our corporate voluntary self-disclosure programs and the whistleblower initiative we’re announcing today — you have to tell us something we didn’t already know. With few exceptions, you must be first in the door.”

The Whistleblower Pilot Program incentivizes individuals to report corporate misconduct directly to the authorities. It offers financial rewards similar to existing programs at agencies like the Securities and Exchange Commission (SEC). Under the Whistleblower Pilot Program, whistleblowers are now eligible for a financial award. The award may be up to 30% of the first $100 million in net proceeds forfeited and up to 5% of any net proceeds forfeited between $100 million and $500 million. This framework encourages individuals to come forward with information about corporate wrongdoing, particularly in areas such as the Foreign Extortion Prevention Act (FEPA) and the Foreign Corrupt Practices Act (FCPA).

From the whistleblower’s perspective, the Whistleblower Pilot Program provides a powerful incentive to report misconduct. The promise of financial rewards and legal protections can motivate individuals who might otherwise fear retaliation or lack confidence in their employer’s internal reporting mechanisms. The program is designed to cover various types of corporate crime, ensuring that potential whistleblowers have a direct channel to report wrongdoing, even when internal channels might fail.

For compliance officers, the Whistleblower Pilot Program introduces new dynamics into the compliance landscape. On the one hand, it underscores the importance of robust internal compliance programs that can effectively handle whistleblower reports. On the other hand, it creates potential challenges, as employees might need help to bypass internal reporting mechanisms in favor of direct reporting to the DOJ, mainly when financial incentives are involved. The Whistleblower Pilot Program raises an interesting dilemma for compliance officers and corporate management: How do you maintain a solid internal reporting culture when employees have a lucrative alternative in external reporting?

The answer lies in strengthening internal reporting mechanisms and fostering a culture of trust and transparency. Companies must ensure that their whistleblower hotlines and reporting channels are accessible, confidential, and effective. Employees should feel confident that their reports will be taken seriously and addressed promptly without fear of retaliation. It also reiterates that investing in anti-retaliation training and policies is crucial. Employees must know that the organization values their input and that speaking up will have no negative consequences. Training managers and supervisors to handle reports sensitively and ensuring that whistleblowers receive feedback on the status of their reports can reinforce this trust.

With the potential for whistleblowers to report externally, companies must act quickly and decisively when handling internal reports. The Whistleblower Pilot Program highlights the need for efficient triage and investigation processes to swiftly assess and address misconduct allegations. This requires clear protocols and collaboration among compliance, legal, and HR departments to ensure timely resolutions.

The Whistleblower Pilot Program also addresses the tension between whistleblower reports and voluntary self-disclosure by companies. The DOJ has adjusted its policies to allow companies to receive credit for voluntary self-disclosure, even if a whistleblower has already reported the matter to the authorities. However, this requires that companies disclose the misconduct within 120 days of the internal report. This adjustment emphasizes the importance of timely action and reinforces the value of self-reporting as part of an effective compliance program.

The recent SEC whistleblower award case is a cautionary tale for companies navigating this new landscape. In this case, a whistleblower who reported misconduct internally was ignored, leading them to report the issue to the SEC. The company eventually self-disclosed but lacked cooperation, highlighting the risks of inadequate internal handling of whistleblower reports. This scenario underscores the need for companies to take internal reports seriously and proactively investigate and address issues before they escalate externally.

The Whistleblower Pilot Program reinforces organizations’ need for a robust speak-up culture. Compliance officers play a crucial role in fostering this culture by promoting open communication, ensuring that employees understand the importance of reporting misconduct, and providing them with the tools and support they need to do so safely.

Compliance officers must also engage senior management and the board of directors to ensure alignment on the importance of a strong compliance culture. This includes advocating for the necessary resources and support to maintain effective reporting mechanisms and demonstrating the value of proactive compliance efforts in mitigating risks and enhancing corporate reputation.

Compliance officers must continuously assess and improve their programs in this evolving landscape. This includes staying informed about regulatory developments, analyzing whistleblower reports to identify trends and areas for improvement, and adapting strategies to address emerging risks and challenges. The Whistleblower Pilot Program marks a significant step in promoting corporate accountability and transparency. It presents challenges and opportunities for compliance professionals to strengthen internal programs and foster a culture of integrity. By prioritizing trust, transparency, and effective reporting mechanisms, companies can successfully navigate this new era, ensuring they are well-prepared to address misconduct and protect their reputations. As compliance officers, embracing these changes and championing a culture of accountability will be key to thriving in this dynamic environment.

Categories
Trekking Through Compliance

Trekking Through Compliance – Episode 65 – Compliance Lessons Learned Plato’s Stepchildren

In this episode of Trekking Through Compliance, we consider the episode Plato’s Stepchildren, which aired on November 12, 1968, and occurred on Star Date 5784.0

Story Synopsis

The episode begins with the USS Enterprise responding to a distress call from a planet populated by the Platonians, a group of telepathic humanoids who model their society in ancient Greece. Upon arriving, Captain Kirk, Mr. Spock, and Dr. McCoy discover that the Platonians possess extraordinary telekinetic powers, which they use to manipulate and control others for amusement.

The Platonians’ leader, Parmen, demands that Dr. McCoy stay on the planet to serve them indefinitely, citing his medical skills as invaluable. When McCoy refuses, Parmen uses his powers to torture Kirk and Spock, forcing them to perform humiliating acts for entertainment. The Platonians’ cruelty is driven by their belief in their superiority and the assumption that their powers make them invincible.

As the episode progresses, the crew devises a plan to level the playing field. They discover that the Platonians’ powers are derived from kironide in the planet’s food. By synthesizing a serum, they temporarily gain similar telekinetic abilities. This allows them to challenge Parmen’s control, ultimately leading to the Platonians’ defeat.

A significant moment in the episode is the forced kiss between Captain Kirk and Lieutenant Uhura, one of the first interracial kisses on American television. While orchestrated under duress, this scene is iconic for its social and cultural impact.

Ultimately, the Enterprise crew warns the Platonians to change their ways, illustrating themes of resistance against tyranny, the ethical use of power, and the importance of equality and consent. Plato’s Stepchildren remains a thought-provoking episode that tackles complex social issues within a science fiction context.

Commentary

The plot revolves around the Enterprise crew encountering sadistic psychokinetic Plutonians who use their powers to amuse themselves at the expense of their captives. The episode is notorious for featuring the first interracial kiss on American television, though the context reveals a much darker scenario. Key compliance themes discussed include power dynamics, the importance of speaking up, respect for diversity, consent, crisis management, and accountability. Fox provides valuable insights into fostering a strong compliance culture while warning viewers about the episode’s disturbing content.

Key Highlights

  • Story Synopsis
  • Disturbing Elements and Commentary
  • Compliance and Leadership Lessons

Resources

Excruciatingly Detailed Plot Summary by Eric W. Weisstein

MissionLogPodcast.com

Memory Alpha

Categories
Corruption, Crime and Compliance

Deep Dive into The SEC’s Settlement with R&R Donnelly on Cybersecurity Controls

How does the SEC’s recent settlement with R.R. Donnelly & Sons Company impact internal controls for cybersecurity incidents?

In this episode of Corruption, Crime, and Compliance, Michael Volkov discusses a significant decision by the SEC involving a $2.1 million settlement with RR Donnelly & Sons Company (RRD) related to a 2021 ransomware attack.

The SEC’s decision marks the first time it has applied its internal controls enforcement authority to cover cybersecurity policies and procedures, representing a substantial expansion of its enforcement reach.

The SEC criticized RRD for failing to prioritize the review of security alerts and implement an effective workflow for escalating such reports. This oversight led to delayed detection and response to the cyber attack, during which hackers exfiltrated 70 gigabytes of data, including personal and financial information tied to 29 clients.

You’ll hear him talk about:

  • The importance of robust internal controls to ensure prompt investigation and escalation of potential cybersecurity incidents.
  • The need for companies to allocate sufficient resources and personnel to monitor and respond to third-party security alerts.
  • The SEC’s critique of RRD’s internal incident response policies, particularly the lack of clear lines of responsibility and efficient workflows.
  • The dissenting opinions within the SEC regarding the broad application of internal controls to cybersecurity, highlight the need for specific guidance on reasonable cybersecurity controls.

Resources:

Michael Volkov on LinkedIn | Twitter

The Volkov Law Group

SEC settlement

Categories
FCPA Compliance Report

FCPA Compliance Report: The Boeing Plea Agreement – Culture is The Key

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast in compliance. We take things in a different direction today as Tom Fox reposts the recent webinar with Sam Silverstein and Mike Volkov, where we took a deep dive into the Boeing Plea Agreement, the Monitorship, and why culture is the key to a Boeing turnaround.

We explore the recent plea agreement filed by Boeing, the outrage among victims’ families over the proposed penalties, and the appointment of an independent compliance monitor. Key issues discussed include the necessity of a culture overhaul at Boeing, the implications of excluding court jurisdiction over the monitorship, and the role of the board in fostering a culture of compliance and safety. The discussion highlights the critical need to focus on values, accountability, and transparent processes to rebuild trust and ensure long-term organizational integrity.

Highlights of this episode:

  • Details of the Plea Agreement
  • Compliance Monitor Appointment and Transparency
  • The Importance of Culture
  • The Role of Compliance Monitors
  • Board Involvement and Accountability
  • Victims’ Families and Organizational Accountability

Resources:

Sam Silverstein

Mike Volkov

The Culture Audit

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.

Categories
Daily Compliance News

Daily Compliance News: August 5, 2024 – The Dept. of Misery Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee and listen to the Daily Compliance News. All from the Compliance Podcast Network.

Each day, we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.

In today’s edition of Daily Compliance News:

  • HR: the Department of Misery? (NYT)
  • Income inequality and corruption .  (The Economic Times)
  • Can a corporate vote overturn a court decision? (FT)
  • DOJ announces whistleblower incentive program. (WSJ)

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.

Categories
Compliance Tip of the Day

Compliance Tip of the Day: Compliance Gap Analysis for HR

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements.

Whether you’re a seasoned compliance professional or just starting your journey, our aim is to provide you with bite-sized, actionable tips to help you stay on top of your compliance game.

Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law.

Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today we discuss how compliance can perform a gap analysis for HR.

For more information on the Ethico ROI Calculator and a free White Paper on the ROI of Compliance, click here.

To check out The Compliance Handbook, 5th edition, click here.

Categories
Adventures in Compliance

Adventures in Compliance: The Last Bow Stories – Investigation Lessons from The Adventure of The Devil’s Foot

Welcome to a review of all the Sherlock Holmes stories collected in the work “His Last Bow.” This collection comprises eight detective stories written by Sir Arthur Conan Doyle from 1908 to 1917. The compilation spans some of the most intriguing cases and mysteries that Holmes and his loyal friend Dr. John Watson tackle.

Today, we take up “The Adventure of the Devil’s Foot,” which appeared in Strand Magazine in December 1910, as we consider investigative lessons for compliance professionals from this story.

The episode provides an analysis of Holmes and Watson’s investigation in Cornwall, involving a mysterious death and insanity in a local family. It draws parallels between Holmes’ investigative techniques and modern compliance investigations, offering seven key lessons, such as attention to detail, hypothesis testing, and effective communication. The episode also includes insights on improving compliance programs and encourages listeners to engage with and review more Sherlock Holmes stories.

Key Highlights:

  • Introduction to ‘His Last Bow’
  • Holmes and Watson in Cornwall
  • The Cornish Horror Unfolds
  • Holmes’ Investigation and Resolution
  • Investigative Lessons for Compliance

 Resources:

The New Annotated Sherlock Holmes

Sherlock Holmes FAQ

Connect with Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on Ethico and a free White Paper on top compliance issues in 2024, click here.

Categories
Blog

The Boeing Saga: Compliance, Accountability, and the Path Forward

When it comes to corporate accountability, few cases are as significant as the ongoing litigation involving Boeing. Since the 737 MAX safety scandal erupted in 2021, the company has been embroiled in a complex legal journey. In July, the Department of Justice (DOJ) filed a proposed Plea Agreement with Boeing in the District Court in Dallas, Texas, under Judge Reed O’Connor. This filing stems from the original Deferred Prosecution Agreement (DPA) in 2021, and it underscores some critical issues that every compliance professional should be acutely aware of.

Boeing has agreed to plead guilty to one count of conspiracy to commit fraud against the Federal Aviation Administration (FAA) and the airplane evaluation group. This plea involves Boeing paying a $243 million fine, predetermined in the 2021 DPA. However, the Plea Agreement does not conclude the matter; it introduces several critical facets that warrant detailed exploration.

A poignant and complex aspect of this case is the involvement of the families of victims from the Lion Air Flight 610 and Ethiopian Airlines Flight 302 crashes. Under their statutory rights, these families participate in the proceedings and seek restitution for their profound losses. The court will determine whether any restitution should be awarded, a process fraught with emotional and legal challenges. The families argue that the proposed penalties are insufficient and that Boeing should explicitly acknowledge its responsibility for the tragic events.

Central to this plea agreement is the appointment of a Compliance Monitor tasked with overseeing Boeing’s adherence to compliance and safety protocols over the next three years. This monitor will be selected through a process involving the DOJ and Boeing, with a noteworthy exclusion: the district court will have no oversight of the monitor’s activities. This exclusion raises significant concerns about transparency and accountability, echoing past controversies in similar cases, such as the environmental crime case involving Carnival Cruise Lines.

The Compliance Monitor’s role in this case is unusually expansive. Beyond traditional compliance responsibilities—such as policies, procedures, internal controls, and training—the monitor will address anti-fraud measures, safety, and quality assurance/control (QA/QC) issues. This broader remit is essential, given the systemic failures at Boeing that contributed to the 737 MAX disasters.

The DOJ’s findings highlight disturbing lapses in Boeing’s safety and quality records. Employees reported feeling pressured to prioritize productivity and financial performance over safety and quality, a cultural flaw at the heart of the compliance breaches. This pressure led to out-of-sequence work, poor record-keeping, and inadequate safety audits, all indicative of a deeper systemic problem.

Addressing these issues requires a comprehensive culture-focused approach. The Compliance monitor must enforce existing standards and foster a culture of integrity and transparency within Boeing. This involves ensuring that employees can report concerns without fear of retaliation and that safety protocols are rigorously followed and documented.

The families of the crash victims are not mere bystanders in this process. They have voiced strong Objections to the Plea Agreement, particularly its perceived leniency and the lack of direct accountability for senior executives. They argue that the agreement implicitly exonerates those responsible for the safety lapses, a concern that resonates with many compliance professionals who advocate for robust accountability at all levels of an organization.

The district court’s exclusion from supervising the compliance monitor is unprecedented and troubling. In previous cases, judicial oversight has been crucial in ensuring that monitorships lead to genuine remediation. The current arrangement’s lack of transparency—where the monitor’s identity and activities are kept under seal—further exacerbates these concerns. Transparency is a cornerstone of effective compliance and accountability, and its absence could undermine the entire process.

For Boeing to restore its reputation and regain public trust, it must go beyond the minimum requirements of the plea agreement. This involves a commitment to comprehensive remediation, encompassing cultural change, structural reforms, and rigorous safety and compliance standards enforcement.

The Compliance Monitor’s broader remit is a step in the right direction, but it must be accompanied by genuine transparency and accountability. This includes involving the victims’ families meaningfully through regular updates and consultations and ensuring their concerns are addressed substantively.

The Boeing case is a stark reminder of the critical importance of compliance, transparency, and accountability in the corporate world. It highlights the devastating consequences of systemic failures and the urgent need for robust oversight mechanisms. As compliance professionals, we must advocate for comprehensive and transparent processes that ensure compliance with legal standards and foster a culture of integrity and responsibility.

Ultimately, true remediation and accountability are in the best interests of all stakeholders—from the victims’ families seeking justice to the company itself, striving to rebuild its reputation and restore public trust. Boeing’s path forward is clear: It must commit to rigorous compliance, transparent practices, and a culture prioritizing safety and integrity above all else. Only then can it hope to move beyond the shadows of the 737 MAX scandal and emerge again as a leader in the aviation industry.

Categories
Trekking Through Compliance

Trekking Through Compliance – Episode 64 – Pattern Recognition Lessons from The Tholian Web

In this episode of Trekking Through Compliance, we consider the episode The Tholian, which aired on November 15, 1968, and occurred on Star Date 3842.3.

When the Enterprise attempts to ascertain the fate of the U.S.S. Defiant, which vanished 3 weeks ago, Spock reports strange sensor readings. They visually detect the Defiant, but sensors indicate it is not there. A landing party beams aboard, and when McCoy tries to touch one of the dead crew members, his hand passes right through him, revealing that the Defiant is starting to disintegrate. They all beam back to save Captain Kirk.

The weakening of the surrounding space fabric traps Kirk and the ship in a parallel universe. The appearance of two hostile Tholian ships disrupts the spatial interphase, which would have allowed Kirk to reenter his universe. Spock convinces the Tholians to wait until the interphase occurs, but the Enterprise cannot beam Kirk aboard. The Tholians then fire and damage the Enterprise.

In her cabin, Uhura sees a vision of Captain Kirk and reports to McCoy that he is alive. McCoy believes Uhura is going mad and confines her to sickbay. Scott then sees the same vision and rushes to the bridge, where everyone, including Spock, also sees it. The Enterprise can hold Kirk in the transporter beam at the next interphase and escape from the completed Tholian web by using the ship’s power to disrupt space-time.

Commentary

The episode follows the Enterprise crew as they investigate the fate of the USS Defiant and encounter the Tholian energy web. Key compliance lessons include identifying anomalies, contextual analysis, leveraging specialized expertise, adaptability, collaborative problem-solving, and proactive monitoring. The show also highlights exciting facts about the episode’s production and its place within Star Trek continuity.

Key Highlights

  • Key Plot Points and Developments
  • Fun Facts and Continuity Issues
  • Compliance Lessons from The Tholian Web

Resources

Excruciatingly Detailed Plot Summary by Eric W. Weisstein

MissionLogPodcast.com

Memory Alpha