Categories
Blog

Monaco Memo – A Jolt for Compliance: Part 5 – The Heat is On for Compliance

Today, we conclude our exploration of the Monaco Memo by considering what all this may mean for compliance professional going forward. Department of Justice (DOJ) officials have emphasized that the changes laid out in the Monaco Memo and the requirements around Chief Compliance Officer (CCO) Certification are to empower compliance professionals. Deputy Attorney General Lisa Monaco said in the speech (Monaco Speech) announcing the Monaco Doctrine, “Companies should feel empowered to do the right thing—to invest in compliance and culture, and to step up and own up when misconduct occurs. Companies that do so will welcome the announcements today. For those who don’t, however, our Department prosecutors will be empowered, too—to hold accountable those who don’t follow the law.”

This was refined by Assistant Attorney General Kenneth A. Polite, who said in a speech (Polite Speech) after the Monaco Doctrine was announced, “in March 2022, I announced that, for all Criminal Division corporate resolutions (including guilty pleas, deferred prosecution agreements, and non-prosecution agreements), we would consider requiring both the Chief Executive Officer and the Chief Compliance Officer (CCO) to sign a certification at the end of the term of the agreement. This document certifies that the company’s compliance program is reasonably designed, implemented to detect and prevent violations of the law, and is functioning effectively. These certifications are designed to give compliance officers an additional tool that enables them to raise and address compliance issues within a company or directly with the department early and clearly. These certifications underscore our message to corporations: investing in and supporting effective compliance programs and internal controls systems is smart business and the department will take notice.”

Finally, Principal Associate Deputy Attorney General Marshall Miller said in a speech (Miller Speech), also after the announcement of the Monaco Doctrine, “I will focus on the ways those policy changes incentivize corporate responsibility and promote individual accountability – by clarifying, rethinking and standardizing policies on voluntary self-disclosure and corporate cooperation. I’ll also address how Department prosecutors are assessing some of the most challenging corporate compliance issues of the day, such as how incentive compensation systems can promote — rather than inhibit — compliance and how companies should be managing data given the proliferation of personal devices and messaging platforms that can take key communications off-system in the blink of an eye.”

However, I think many of these changes will put additional pressures on compliance programs. The new requirements for self-disclosure move beyond those announced under the FCPA Corporate Enforcement Program. The Monaco Memo stated, “it is imperative that Department prosecutors gain access to all relevant, non­privileged facts about individual misconduct swiftly and without delay.” [emphasis supplied] This in turn, puts even more pressure on internal reporting, whether through a hotline, online reporting portal, or simply an employee speaking up to a manager. That pressure means triaging, efficiently elevating and effectively investigating and evaluating the evidence developed. The clock is ticking, and a compliance professional does not know what the DOJ might already know or if a whistleblower has reported to the Securities and Exchange Commission (SEC) or another federal department or agency.

But the pressure does not end when self-disclosure occurs. The DOJ wants speed above all else in the delivery of evidence which could be used in the prosecution of individuals. Miller stated, “In building cases against culpable individuals, we have heard one consistent message from our line attorneys: delay is the prosecutor’s enemy — it can lead to a lapse of statutes of limitation, dissipation of evidence, and fading of memories. The Department will expect cooperating companies to produce hot documents or evidence in real time. [emphasis supplied] And your clients can expect that their cooperation will be evaluated with timeliness as a principal factor. Undue or intentional delay in production of documents relating to individual culpability will result in reduction or denial of cooperation credit. Where misconduct has occurred, everyone involved — from prosecutors to outside counsel to corporate leadership — should be “on the clock,” operating with a true sense of urgency.”

This requirement changes the dynamics of an investigation. Every CCO and compliance professional in such a situation must now speed up not simply their investigation process and turning over documents but their remediation efforts going forward. Of course, remediation is still an equally important part of your overall way forward to receive credit under the FCPA Corporate Enforcement Policy. A root cause analysis is also still a key component as well.

Another area for heat for the compliance professional is the new requirements for clawbacks. In the Miller Speech, he stated, “What we expect now, in 2022, is that companies will have robust and regularly deployed clawback programs. All too often we see companies scramble to dust off and implement dormant policies once they are in the crosshairs of an investigation.”

Companies should take note: compensation clawback policies matter, and those policies should be deployed regularly. A paper policy not acted upon will not move the needle — it is really no better than having no policy at all.

To up the ante, the Deputy Attorney General has instructed the Criminal Division to examine how to provide incentives for companies to clawback compensation, with particular attention to shifting the burden of corporate financial penalties away from shareholders — who frequently play no role in misconduct — onto those who bear responsibility. In addition to this stick, Miller also noted the carrot the DOJ wants to see, noting, “compensation systems to promote compliance isn’t just about clawbacks. It’s also about rewarding compliance-promoting behavior. For years, companies have designed and fine-tuned sophisticated incentive compensation systems that reward behavior that enhances profits.” She concluded, “We’ll be evaluating whether corporations are making the same types of investments in adopting and calibrating compensation systems that reward employees who promote an ethical corporate culture and mitigate compliance risk.”

The final area where the heat is on is the type of conduct which leads to the FCPA violations. Three of the criteria for determining whether a monitor will be mandated to deal with the length or pervasiveness of the conduct and whether senior management was involved; was the violation caused by the “exploitation of an inadequate compliance program or system of internal controls”; and finally, if “compliance personnel were involved or were basically negligent in failing to “appropriately escalate or respond to red flags.””

Compliance professionals should use the Monaco Doctrine, Memo, and related speeches to explain to senior management to educate C-Suite and Board leadership why and how an investment in compliance can pay off. For compliance professionals your work became much more important.

Categories
FCPA Compliance Report

James Koukios on the Monaco Memo

In this special 5 part podcast series, I am taking a deep five into the Monaco Memo and analyzing it from a variety of angles. In this episode of the FCPA Compliance Report, I am joined by fan-fav James Koukios, a partner at MoFo. James is a former member of the FCPA Unit, and in this podcast, we take a deep dive into the Monaco Memo. Some of the highlights include:

  1. Issues involving individual accountability.
  2. Burden shifting on communications devices and timeliness of self-disclosing and reporting.
  3. How does the Monaco Memo lay out DOJ expectations?
  4. Monaco Memo at 30,000 ft and ground level…
  5. Tweaks to the Yates Memo formulation.
  6. New requirements to the FCPA Corporate Enforcement Policy
  7. Will the incentives be enough?

 Resources

James Koukios on MoFo

Tom 5-Part blog post series in the FCPA Compliance and Ethics Blog

  1. A Jolt for Compliance
  2. Timely Self-Disclosure
  3. Corporate Compliance Programs
  4. Monitors
  5. Polite Speech

Monaco Memo

Categories
Daily Compliance News

September 26, 2022 the Worse for Favre Edition

In today’s edition of Daily Compliance News:

  • It gets worse for Favre. (ESPN)
  • Former Honduran First Lady gets 14 years for corruption. (OCCRP)
  • Barclay’s sued over $17.6 bn ‘oops.’ (Reuters)
  • Sleaze continues at No. 10. (FT)
Categories
Sunday Book Review

September 25, 2022 the University of Toronto Press edition

In today’s edition of Sunday Book Review:

Making Pictorial Print by Joanne Shaddock

The Language of Trauma by John Zilcosky

Transgression and the Aesthetics of Ethics by Taran King

Communal Justice in Shakespeare’s England by Jessica Winston

Categories
Daily Compliance News

September 24, 2022 the Boeing Pays Yet Again Edition

In today’s edition of Daily Compliance News:

  • Ex-Chinese Justice Minister arrested for corruption. (BBC)
  • PCAOB puts a year-end deadline on Chinese auditing companies. (Law360)
  • Boeing pays $200MM to settle SEC claims. (NYT)
  • The Celtics coach was suspended. (WSJ)
Categories
Corruption, Crime and Compliance

Episode 247 – Corporate Culture Round Up

Corporate culture is all the rage now, meaning it is an often used topic to signal commitment, sensitivity to issues of employee concern, and awareness of governance trends. In practice, as we all know, culture is not just about words but about action. As the often repeated phrase goes — talk is cheap. In this Corporate Culture Roundup Episode, Michael Volkov examines some culture-related issues involving: Culture + Action Steps, Civility in the Workplace, and What Happens when HR and Compliance are Disconnected.

Categories
Because That's What Heroes Do

WandaVision, Episode 7 – Breaking Down the 4th Wall

In this podcast series, two complete MCU fans, Tom Fox, founder of the Compliance Podcast Network, and Megan Dougherty, co-founder of One Stone Creative, indulge in a passion for all things in the Marvel Cinematic Universe. We previously reviewed all the movies, and now we have a series on WandaVision. If you want to indulge in your love for the MCU with two fans passionate about all things MCU, this is the podcast series for you. For this offering, we continue with Episode 7, Breaking Down the 4th Wall.

Some of the highlights include:

Ø The story synopsis.

Ø What are the key plot points?

Ø What were some of our favorite cookies?

Next up in our series WandaVision, Episode 8 Previously On.

Categories
The Woody Report

The Solar Winds Decision

Welcome to The Woody Report, where Washington & Lee School of Law Associate Professor Karen Woody and host Tom Fox discuss issues on white-collar crime, compliance issues, international corruption, securities, and accounting fraud, and internal corporate investigations. From current events to topical issues to academic research and thought leadership, Karen Woody helps lead the discussion of these issues on the new and exciting podcast. In this episode, Tom and Karen explore the recently announced decision in the Solar Winds shareholder claim based upon the Caremark Doctrine. Some of the issues we explore include:

  1. Background facts and court rationale.
  2. What is ‘positive law’?
  3. Can any cyberbreach claim be the basis of a Caremark Claim?
  4. Why is victim v. perpetrator status critical in a Caremark Claim?
  5. What is the bad faith standard in Caremark Claims?
  6. What does this decision portend for Caremark Claims going forward?

Resources

Karen Woody on LinkedIn

Karen Woody at Washington & Lee, School of Law

Categories
Daily Compliance News

September 23, 2022 the FASB Shakeup Edition

In today’s edition of Daily Compliance News:

  • Why do courts award punitive damages? (Reuters)
  • Does FASB need a shakeup? (FT)
  • Fat Leonard was apprehended in Venezuela. (San Diego Tribune)
  • The carbon tracking platform comes to Salesforce. (WSJ)
Categories
Blog

Monaco Memo – A Jolt for Compliance: Part 4 – New Factors in Selecting Monitors

Today, we continue our exploration of the Monaco Memo by considering the sections relating to the evaluation of cooperation during the pendency of the investigation and the evaluation of a company’s compliance program at the conclusion of the resolution. These portions of the Monaco Memo should be studied intently by every compliance professional as they lay out what the Department of Justice (DOJ) will require to grant discounts under the FCPA Corporate Enforcement Policy. Today, I want to look at the provisions regarding monitors and monitorships. In many ways, they are some of the most interesting parts of the Monaco Memo.

The section on monitors and monitorships is broken down into three parts; (1) criteria for determining if a monitor is warranted; (2) criteria for selection of a monitor; and (3) monitor oversight. I am going to focus on the first prong, the criteria for determining if a monitor is warranted. You may recall the prior test to determine whether a monitor was warranted was last

articulated in the Benczkowski Memo. The test basically had an organization implement an effective compliance program and then test it. However, now there is a 10-factor test, which as Washington & Lee University, School of Law Professor Karen Woody says, greatly increases the temperature on corporations. The 10 factors are:

  1. Whether the corporation voluntarily self-disclosed the underlying misconduct in a manner that satisfies the particular DOJ component’s self-disclosure policy;
  2. Whether, at the time of the resolution and after a thorough risk assessment, the corporation has implemented an effective compliance program and sufficient internal controls to detect and prevent similar misconduct in the future;
  3. Whether, at the time of the resolution, the corporation has adequately tested its compliance program and internal controls to demonstrate that they would likely detect and prevent similar misconduct in the future;
  4. Whether the underlying criminal conduct was long-lasting or pervasive across the business organization or was approved, facilitated, or ignored by senior management, executives, or directors (including by means of a corporate culture that tolerated risky behavior or misconduct, or did not encourage open discussion and reporting of possible risks and concerns);
  5. Whether the underlying criminal conduct involved the exploitation of an inadequate compliance program or system of internal controls;
  6. Whether the underlying criminal conduct involved active participation of compliance personnel or the failure of compliance personnel to appropriately escalate or respond to red flags;
  7. Whether the corporation took adequate investigative or remedial measures to address the underlying criminal conduct, including, where appropriate, the termination of business relationships and practices that contributed to the criminal conduct, and discipline or termination of personnel involved, including with respect to those with supervisory, management, or oversight responsibilities for the misconduct;
  8. Whether, at the time of the resolution, the corporation’s risk profile has substantially changed, such that the risk of recurrence of the misconduct is minimal or nonexistent;
  9. Whether the corporation faces any unique risks or compliance challenges, including with respect to the particular region or business sector in which the corporation operates or the nature of the corporation’s customers; and
  10. Whether and to what extent the corporation is subject to oversight from industry regulators, or a monitor imposed by another domestic or foreign enforcement authority or regulator.

The old Benczkowski Memo test is found in factors 2 and 3. However, factor 1 is whether or not the company self-disclosed the incident(s) at issue. Moreover, factors 4-6 all related to conduct and actions when the illegal activity occurred, not after discovery and self-disclosure. Factor 4 relates to the length or pervasiveness of the conduct and whether senior management was involved. Factor 5 reviews “the exploitation of an inadequate compliance program or system of internal controls.” Factor 6, asks if compliance personnel were involved or were basically negligent in failing to “appropriately escalate or respond to red flags.” Factors 7-10 refine company actions post-reporting and do relate to actions after a company became aware such as investigations and remedial actions (factor 7), a reduction in the company’s risk profile (factor 8), or unique regulatory or business challenges (factors 9 and 10).

The Monaco Memo states, “prosecutors will not apply any general presumption against requiring an independent compliance monitor (“monitor”) as part of a corporate criminal resolution, nor will they apply any presumption in favor of imposing one.” The Monaco Memo also states, “Prosecutors should analyze and carefully assess the need for a monitor on a case­ by-case basis, using the following non-exhaustive list off actors when evaluating the necessity and potential benefits of a monitor.” Finally, the DOJ believes “compliance monitors can be an effective means of reducing the risk of further corporate misconduct and rectifying compliance lapses identified during a corporate criminal investigation.” This statement leads me to believe the DOJ is very concerned about corporate recidivism. Whatever the ultimate reasons are it does appear that, as Professor Woody noted, the heat is definitely turned up.

One thing did strike me about this list is that provides a clear roadmap for compliance professionals to use in proactive manner. You now know the precise factors the DOJ will review so you can look at them on an ongoing basis to (1) determine if your organization has issues which need to be addressed; (2) allows you to remediate before the government comes knocking or you have to self-disclose; and (3) if you use an independent third-party as a part of this proactive process, you can document compliance if you need to do so going forward if the government comes knocking independently of your self-reporting.

I hope you will join me for my next post to wrap up with some final thoughts.