Categories
Innovation in Compliance

Risk Management and Corporate ESG with Dan Zitting


 
Dan Zitting, previously Chief Product Officer, now holds the title of CEO at Galvanize, a software company that helps its clients achieve their goals and objectives. He is also now the Chief Product Officer of Diligence. Tom Fox welcomes him back to this week’s show to take a look back at the GRC professional’s role in corporate ESG and risk management. 
 

 
GRC On The Frontline
A company’s defenses have to be in the remit of their GRC professional, not left up to the CSO. Dan remarks that while there is engagement by GRC professionals in minimizing company cyber risk, more needs to be done. GRC professionals have to ask themselves if they are managing cyber risk in ways that are helpful to the company’s CSOs, by providing tools and resources to support them. “There’s still work to be done in making sure that everything we’re doing from a policy, controls, and compliance standpoint is actually adding value for the CSO and helping them deploy their programs, as opposed to just feeling like they’re being checked on by the police to see if they’re doing it right,” Dan tells Tom. 
 
ESG and Investment
Investor dollars are fueling the growth and expansion of ESG and aren’t only coming from investment funds anymore. Private equity firms and banks are getting involved. If someone wants to borrow money, insurance companies assess ESG risk as part of their overall risk management strategy. “If companies want to access capital, they need to have an ESG program in place,” Tom remarks.
 
A Role To Play
The best way, Dan suggests, to get GRC professionals to understand the ownership roles they have to play in ESG, is by creating a center of excellence for ESG. By creating this center, and making ESG a business objective, you can then split the responsibilities across the organization. “Splitting the responsibilities across those different lines of defense for those different functions in a way where somebody…can get a combined view of how effective we think we are from an ESG standpoint, should be the goal,” Dan adds. 
 
The Importance of Real-Time Reporting
Real-time reporting is the G in ESG. Being able to give an accurate picture of risk to a company’s board is intrinsic to ESG, and is vital to acting on those risks efficiently. “Risk professionals too often are asking ‘Why don’t I have real-time information,’ instead of actually being the one out creating it and bringing in the technical skill necessary to be able to analyze data fast enough to get real-time insight,” Dan expresses. Governance in the present and future needs to move at a pace faster than it has in the past, in order to report on risks. Being able to point out to the board when governance is failing, so that measures can be implemented, is also extremely important. 
 
Resources
Dan Zitting | LinkedIn | Twitter 
Galvanize
Diligence
 

Categories
Daily Compliance News

March 22, 2022 the Institutional Corruption Edition


In today’s edition of Daily Compliance News:

  • Crypto an unlikely route for sanctions evasion. (WSJ)
  • Lebanese central bank chief charged with corruption.  (WSJ)
  • Met still ‘institutionally corrupt’? (BBC)
  • Wells Fargo sued for red-lining. (Bloomberg)
Categories
Compliance Kitchen

White House fact sheet on March 8 Executive Order


White House fact sheet on March 8 Executive Order banning Russian energy imports; OFAC sanctions Duma members; CBP issued implementing guidance on Russian imports.

Categories
The ESG Report

The Role of Tax in ESG with Tracy Howell


 
Operating in a tax-efficient manner is a wise business move for a multitude of reasons. It’s time to start the conversation about the benefits of a relationship between tax and ESG, especially in multinational organizations. That’s what Tom Fox and Tracy Howell are discussing in this episode of The ESG Report. 
 

 
How Tax and ESG Intersect
Tracy tells Tom, “There are external forces pulling tax into the ‘S’ and ‘G’ of ESG.” In the social sector, different jurisdictions have different tax rates and laws, and as companies begin to operate in a tax-efficient manner, their activities will gravitate towards lower tax regimes. Tracy adds, “You’ve got forces trying to push the concept of ‘fair share’ rather than compliance with tax laws of different jurisdictions.” Governance-wise, it’s becoming more common for companies to be required to talk about their compliance tax audits. 
 
The Role of Tax in a Company
With the growing pressures on ESG transparency, there’s a push to standardize reporting and scorecarding of companies based on their tax transparency. This would include things like the reporting of an organization’s effective tax rate. 
 
Tax and ESG in Multinational Organizations 
Institutional investors play a major role in impacting the activities of a multinational company. When making investment decisions, these entities heavily incorporate ESG scorecards with tax transparency, further emphasizing the need for a relationship between the two sectors. 
 
RESOURCES 
Tom Fox’s email
Tracy Howell | Email | LinkedIn
 

Categories
FCPA Compliance Report

Michael Beber on the Current State of SPACs

In this episode of the FCPA Compliance Report, I am joined by Exiger Board Chair Michael Beber. He returns to the podcast to talk about the current state of Special Purpose Acquisition Corporations (SPACs).Highlights in include:

·      SPACs in 2021 by the numbers.

·      Uses and misuses of SPACs.

·      Money being invested in SPACs.

·      Why SPACs can still be such a powerful tool.

·      What will be the SPAC market like going forward?

Resources

Exiger

Categories
Daily Compliance News

March 21, 2022 the CCO Liability Edition


In today’s edition of Daily Compliance News:

Categories
Blog

Using Agile for Compliance Innovation

Driving innovation in your compliance program is still seen as one of the most difficult challenges for every Chief Compliance Officer (CCO) or compliance professional. I was therefore intrigued by a recent article in the Harvard Business Review (HBR), entitled Purposeful Business the Agile Way by Darrell Rigby, Sarah Elk and Steve Berez, which discussed how business leaders can “transform a profit-maximizing system into a purpose-driven one without jeopardizing the future of their businesses and their own careers.”
Interestingly, the authors came to their approach due to the post pandemic great resignation, which they posit business leaders have no clue as to why there is such employee action and equally importantly how to adapt to it, stating, “For decades managers trusted influential economists who promised that if businesses maximized profits, an invisible hand would generate greater benefits for all society. That isn’t happening the way they said it would.” Yet business executives went overboard on creating value for shareholders as their only focus. The authors believe that such a myopic approach robs other “stakeholders of value.” That has certainly been the case for businesses treatment of employees. The authors conclude, “One recent manifestation: Record numbers of people are quitting their jobs, and others are hitting picket lines to demonstrate a growing conviction that life is too short to waste on demoralizing work. Concern about social inequities and environmental damage is escalating. The system is out of balance, and the situation is getting worse.”
Business executives stand at the turning point. They can continue down a destructive path or adapt. However, the problem is that most business leaders are afraid to change, afraid to create multiple stakeholders, as opposed to focusing solely on shareholders and do not want to listen to their employees. The authors believe, “agile ways of working can help, turning squishy debates about corporate purpose into real actions and results.” It provided to me numerous tangible ideas about how to drive innovation in the compliance arena. I have adapted the authors ideas for a corporate compliance program. The authors posit several concrete steps you can take, which every CCO and compliance professional should consider for their compliance regime.
Create a Microcosm
The authors suggest an approach not unlike Design Thinking. Here are some of their suggestions.

  • Assemble a multidisciplinary team, including experts outside your silo.
  • Develop deep empathy for users, exploring their goals and frustrations.
  • Examine the current system to identify the causes of those frustrations.
  • Envision a more purposeful system.
  • Describe changes that might improve the system.
  • Prioritize and sequence them.
  • Test potential improvements.
  • Adapt to unexpected effects and side effects.
  • Scale up solutions that enrich the lives of stakeholders affordably.

Every CCO should be comfortable with these suggestions and steps.
Continuous Monitoring Leading to Continuous Improvement
Compliance, like business purpose, should not be viewed as a mechanical watch. In 2008, I heard then Deputy Attorney General (DAG) Lanny Breuer say that a best practices compliance program needed to be nimble and agile. Obviously, continuous monitoring and continuous improvement are mandated parts of a best practices compliance program in 2022. Where the authors expand on this basic component for any compliance program is around five questions you should ask about your compliance innovation.
These include: Does your compliance initiative support your strategic objectives and create important benefits for the stakeholders who have the most impact on the success of your business? Will multiple stakeholders actively support your compliance initiative? Will your investment in this compliance initiative create greater value for a wide variety of stakeholders, more “than would simply writing a check to a more economical innovator?” Finally, your compliance initiative should “test specific hypotheses and mitigate adverse side effects before scaling up the project.”
Do the Right Thing
Setting financial targets is one way of goal setting. However, as the authors note, “Agile helps flip that approach, focusing first on creating value for stakeholders and then on earning adequate profits in the process. Instead of asking, How can we improve profitability without damaging customer and employee satisfaction? they ask, How can we enrich the lives” of various stakeholder’s and employees?
In the 2020 Update to the Evaluation of Corporate Compliance Programs, the Department of Justice (DOJ) made clear that CCOs and the corporate compliance functions were the holders of institutional justice and institutional fairness in a company. In other words, you already have the obligation. Therefore, doing the right thing for both employees and other stakeholders is not something new for compliance professionals.
Prioritize Collaboration
If there is one thing compliance must do it is collaborate. Compliance generally does not have a hammer it can bring down but must lead through influence and working with others. Moreover, engagement with a wide variety of stakeholders in your company is a much better way to get something down as those stakeholders involved will be invested in the outcome if the are involved in its creation.
In the world of agile, the authors report, “A central reason for the success of agile ways of working is that they prioritize teamwork over individual performance. Research by the Standish Group, which has studied the success of IT projects since 1994, shows that agile teams improve software innovation by more than 60%, on average, and by 100% when the innovation is large and complex. Two-thirds of agile teams across a wide range of business functions report better cross-functional alignment, and 60% register higher team morale, according to the State of Agile Report by Digital.ai, a company focused on digital transformations.”
The bottom line is that by embracing these agile concepts, a CCO has a much better chance of implementing innovative change in their compliance program.

Categories
Sunday Book Review

March 20, 2022 the Spy Novelist edition


In today’s edition of Sunday Book Review:
·      The Spy and the Traitor by Ben McIntyre
·      Damascus Station by David McCloskey
·       A Gentleman in Moscow by Amor Towles
·       The Great Terror by Robert Conquest
Resources
What’s on a Spy Novelists Bookshelf by Suzanne Ouelette
Top 80 Book Review Podcasts

Categories
Popcorn and Compliance

MCU Series – Guardians of the Galaxy 2


In this podcast series, two complete MCU fans, Tom Fox, founder of the Compliance Podcast Network and Megan Dougherty, co-founder of One Stone Creative indulge in passion for all things in the Marvel Cinematic Universe by re-watching each movie and then podcasting on every movie in the MCU. If you want to indulge in your love for the MCU with two fans who are passionate about all things MCU, this is the podcast series for you. For this offering, we consider Guardians of the Galaxy 2.
Some of the highlights include:
Ø  The story synopsis.
Ø  What are the key plot points?
Ø  What were some of our favorite cookies?
Ø  How does this movie fit into the overall MCU?
Ø  How is this movie an homage to prior non-MCU movies?
Next up in our series the Avengers-Age of Ultron.

Categories
Daily Compliance News

March 19, 2022 the USAA Fined Edition


In today’s edition of Daily Compliance News:

  • USAA fined over AML deficiencies. (WSJ)
  • Ex-Boeing pilot goes to trial over MAX 737 crashes.  (WSJ)
  • Humphreys settles GSK lawsuit over investigation. (Times of London)
  • Ex-Honduran first lady convicted of corruption. (LATimes)