Categories
31 Days to More Effective Compliance Programs

Big data and continuous improvement


Consider again the use of big data, this time to facilitate continuous improvement. Alistair Croll, in an eBook entitled “Planning for Big Data” published by O’Reilly Radar, informs this discussion of continuous improvement in a best practices compliance program. Croll believes that big data will allow continuous improvement through the “feedback economy.” This is a step beyond the information economy because you are using the information that you have generated and collected as a source of information to guide you going forward. Information itself is not the greatest advantage but using that information to prevent, detect and remediate in a compliance program going forward is.
The three prongs of any best practices compliance program are prevent, detect and remedy. Whether you consider the OODA loop or the big data supply chain feedback, this process, coupled with the data that is available to you should facilitate a more agile and directed compliance program. The feedback components allow you to make adjustments literally on the fly. If that does not meet the definition of continuous improvement, I do not know what does.
Three key takeaways:

  1. Use big data to continuously improve your compliance program.
  2. The OODA loop is an excellent way to think about using data to continuously improvement.
  3. Always remember the human element.
Categories
Compliance and Coronavirus

Fizza Khan on Financial Institution and Financial Services Compliance During the Coronavirus Crisis


Welcome to the newest addition to the Compliance Podcast Network, Compliance and Coronavirus. As the Voice of Compliance, I wanted to start a podcast which will help to bring both clarity and sanity to the compliance practitioner and compliance profession during this worldwide health and healthcare crisis. In this episode, I am joined by Fizza Khan, founder and CEO at Silver Regulatory Associates. We consider issues relating to financial institutions and the financial services industry during the time of the coronavirus health crisis.
Check out the Silver Regulator Associates website here.
This podcast is sponsored by SAI Global. To learn how you can protect your business operations and workforce during these uncertain times, visit saiglobal.com/risk for free resources, expert guidance, and industry-leading technology.

Categories
Innovation in Compliance

Second Chances for People and Electronics with John Shegerian


Tom Fox chats with John Shegerian, an entrepreneur who is passionate about serving up second chances. They talk about what motivates him, and how his company ERI helps organizations protect their data while protecting the environment.

Serving Second Chances
After the Rodney King riots in Los Angeles, John co-founded Homeboy Tortillas with Father Greg Boyle as an outreach program to employ gang-impacted youths. He recalls father Greg’s tagline, “Nothing stops a bullet faster than a job.” Their way of doing business became a phenomenon in post-riot Los Angeles, and eventually, thousands of young people were employed in many different industries, which changed their lives positively. John says, “I only wanted to do businesses that made the world a better place, that made an impact… it always had to have a bottom-line way beyond just profit… All the companies that I’m involved with, I always looked for people that are part of what has been historically marginalized parts of society… Our core mission is recycling electronics at ERI, but recycling lives is what we really do in giving people a second chance.”
Recycling Electronics
Tom comments that recycling is becoming more important in today’s technologically-based world. He asks John to describe the business of ERI. John says that ERI recycles old or discarded electronics. He calls it the dark little secret of the technological revolution since nobody considered what would happen to our old electronics: they just made great technology that made our lives better. As a result, old electronics were dumped in landfills and it became – and still remains – the fastest growing solid waste stream in the world.  Chemicals such as arsenic, beryllium and mercury leach into the ecosystem when electronics are dumped. This is very bad for people, for plants, for animals, and for the water supply, John says. “There’s no reason to throw the stuff in the landfills because you could keep it above ground. You could recycle them responsibly and everything can go for beneficial reuse,” John argues. “You could be zero waste.”
Protecting Data
John’s message to governments and corporations is that recycling their old electronics is good for their business, good for their privacy, and good for the environment. He explains how he helps companies assess their e-waste recycling risks. In today’s context of the Coronavirus, it’s more critical than ever to protect your data, John says. Bad actors seize opportunities like this crisis to take advantage. “If they got your old hardware they could pull your hard drives or other data containing materials, reverse engineer the information and have a heyday with regards to monetizing any data that’s contained in old hardware,” John points out.
A Giveaway For Listeners
John is giving a free copy of his book, 101 Tips From The Marketing Masters, to the first 10 listeners who reach out via email to book@themarketingmasters.com. He is also running a $0.99 promo on the Kindle edition on Amazon.
Resources
ERI
Email for a free copy of John’s book: book@themarketingmasters.com 
Buy on Amazon

Categories
Daily Compliance News

April 21, 2020-the Oil Below $1 edition


In today’s edition of Daily Compliance News:

  • Norwegian sovereign wealth fund rocked by COI scandal. (FT)
  • Andrew Hill sees parallels between COVID-19 and Deepwater Horizon. (FT)
  • Never in my lifetime-oil below $1bbl. (WSJ)
  • Will business travel return? (NYT)
Categories
31 Days to More Effective Compliance Programs

Keeping track of current events for continuous improvement


Keeping track of current events for continuous improvements a part of the mandates found in the 2019 Guidance. The DOJ clearly expects companies to update its risk assessment, policies, procedures and practices in light of changing circumstances. This means that if a third-party changes characteristics, so that it becomes subject to FCPA scrutiny, a company must be able to evaluate and react appropriately to such change.
For the compliance practitioner, the Hitachi SEC enforcement action provides a valuable reminder that the FCPA covers more than foreign government officials and officials of state-owned enterprises. Political parties are also covered so that if part of your corporate social responsibility includes payments to political party front groups, your company could get into FCPA hot water. Yet it also means you will need to keep abreast of just who your counter-parties are during the entire course of your commercial relationship. This means that keeping up with current events is a must and can facilitate continuous improvement.
Three key takeaways:

  1. The Hitachi FCPA enforcement action demonstrates the need to keep track of current events for continuous improvement.
  2. Many product and services providers in the compliance space provide ongoing monitoring for PEPs and SDNs.
  3. Make sure your partners are still who they say they are!
Categories
Daily Compliance News

April 20, 2020-the Deepwater Horizon edition


In today’s edition of Daily Compliance News:

  • Will beef be next? (WaPo)
  • Companies seek COVID-19 tests for employees. (WSJ)
  • Google wants to muzzle auditor. (WSJ)
  • Deepwater Horizon blew up 10 years ago. (Houston Chronicle)
Categories
FCPA Compliance Report

Pat Harned on ECI’s IMPACT 2020

In the Episode, I visit with Pat Harned, President of the Ethics & Compliance Initiative (ECI). We discuss ECI’s upcoming virtual conference IMPACT 2020. As the first major compliance annual conference to go virtual, ECI faced unique challenges to bring the top speakers and thought leaders to this event. Find out how they did so as Harned and Tom Fox discuss some of the highlights of this most unique event.
Some of the highlights include:

  • Keynotes speeches include Sally Yates, Anita Hill, David Rock and Jan Schwartz.
  • Earn up to 15 CEUs – Participate in, view and earn CEUs for every session, even those happening concurrently!
  • On-Demand Access – Watch and participate in exceptional keynotes and benchmarking sessions live as well as on-demand through the event library for up to one year.
  • Assess Your Program – Register for the event and you will be provided access to ECI’s High-Quality Program (HQP) Assessment. Take the survey and gauge the maturity of your E&C program prior to the event. This assessment is valued at $500 for individual users but is included in IMPACT registration!
  • Get Valuable Benchmarks – Throughout the conference we will be sharing metrics from the HQP and compare your results with your peers.

 Resources
It’s not too late to register for IMPACT 2020. Conference information and registration available here. For more information on ECI, click here.

Categories
Sunday Book Review

April 19, 2020, the Basketball edition

In today’s edition of Sunday Book Review:

Categories
Daily Compliance News

April 18, 2020-the Data Not Dates edition


In today’s edition of Daily Compliance News:

  • FATF chides South Korea for politicians laundering money. (WSJ)
  • Is opaqueness is a strong sign of underlying illegality? (JDSupra)
  • SEC hits ENI with $24.5MM fine for FCPA violations. (Stanford Law School)
  • NBA says opening will be guided by data, not dates. (Houston Chronicle)
Categories
31 Days to More Effective Compliance Programs

Monitoring for continuous improvement


Another mechanism for continuous improvement of your compliance program is through risk-based monitoring. Under the topic of Control Testing DOJ’s 2019 Guidance posed the following questions, Has the company reviewed and audited its compliance program in the area relating to the misconduct?  More generally, what testing of controls, collection and analysis of compliance data, and interviews of employees and third-parties does the company undertake?  How are the results reported and action items tracked?
Finally, the beauty of all these techniques articulated by Locwin is that they are tools that can make companies more efficient and, at the end of the day, more profitable. They also move compliance into the fabric and DNA of an organization or operationalize compliance. Her intonation to operationalize compliance speaks to the use of a wide variety of tools to input information, so you can continuously improve your compliance program. Risk-based monitoring is certainly one mechanism to obtain information and feed back into your compliance program in both the prevent and detect prongs.
 Three key takeaways:

  1. How do you monitor manifested risks?
  2. A risk-based monitoring approach allows you to see things in almost real-time.
  3. Management of risk can serve your compliance program in a variety of ways.