Categories
Jamming with Jason

Failure is Not an Option Mindset with Evgeny “Jay” Likhoded


I had the privilege to sit down with Jay Likhoded, the CEO of Clausematch, on #jammingwithjason and talk about how he and his company are changing the world of compliance, and if that’s not your jam, don’t worry, this #podcast episode has nothing to do with compliance.
Revolutionary people who change the world learn that failure is not an option. They learn how to be resourceful, grateful, and follow their passion… which is exactly what Jay has done.
He also has a story that so many live and shows what is possible with persistence. When young, passion and dreams are put aside so we can be practical, responsible adults, find ourselves in a job or profession that doesn’t light us up and know there are ways you can positively change the world. You have an idea, share it, get excited, and then figure out how to manifest it.
The fact that you are reading this means there is something in this episode you need to hear today.
Evgeny Likhoded is the Founder and CEO of Clausematch, which helps regulated organizations to operate safely and bring compliant products to the market. Having worked with the legal and compliance professionals in financial services and energy, Evgeny sought to improve how companies can understand and meet their compliance obligations and ensure that compliance is embedded into their business. He founded Clausematch in 2012.
And here’s a link to the Forbes article Jay mentioned during the episode: https://www.forbes.com/sites/oliversmith/2018/04/23/europes-top-vc-backed-a-banker-turned-entrepreneur-who-nearly-went-bankrupt-three-times/?sh=48d668729166
FOR FULL SHOW NOTES AND LINKS, VISIT:

E275 Failure is Not an Option Mindset with Evgeny “Jay” Likhoded


For more information on the great work Jay and his team are doing with ClauseMatch, visit https://www.clausematch.com/.
LIKED THE PODCAST?
If you’re the kind of person, who likes to help others, share this with your friends and family. If you found value, the will too. Please leave a review [https://itunes.apple.com/us/podcast/jamming-with-jason-mefford/id1456660699] on Apple Podcasts to reach more people.
Join my Facebook group: https://www.facebook.com/groups/beinguniquely
OTHER RESOURCES YOU MAY ENJOY:
My YouTube channel [https://www.youtube.com/c/jasonleemefford] and make sure to subscribe
My Facebook page [https://www.facebook.com/jammingwithjasonmefford]
My LinkedIn page [https://www.linkedin.com/in/jasonmefford/]
My website [https://jasonmefford.com]
STAY UP TO DATE WITH NEW CONTENT:
It can be difficult to find information on social media and the internet, but you get treated like a VIP and have one convenient list of new content delivered to your inbox each week when you subscribe to Jason’s VIP Lounge at: https://jasonmefford.com/vip/ plus that way, you can communicate with me through email.

Categories
Putin's Oil Heist

Putin’s Oil Heist Episode 2: The Arrest


In the early 2000s, Bruce Misamore moved to Moscow to work for Mikhail Khodorkovsky at Yukos. Yukos was growing rapidly, but Russian President Vladimir Putin wasn’t pleased with the growing influence of Westerners at Russian companies. Putin saw threats to his power everywhere, and the government passed legislation limiting foreign investment. Misamore found himself in the middle of a hurricane. Join Loren Steffy and Bruce Misamore for the second episode of Putin’s Oil Heist.

Learn About:

  • How Putin ousted Yeltsin supporters from their positions in a return to a less democratic Russia.
  • The speed of growth Yukos experienced, and how the owners and investors in the company began to think about diversifying economically and geographically. The company wanted to expand, and the fastest way to grow an oil company is to buy or merge with others.
  • The drawbacks in merging with another Russian oil company. Bruce talks about the challenges in making representations to the New York Stock Exchange, and how he believed it would be impossible to provide the necessary transparency if Yukos acquired another Russian company.
  • The straw that broke the camel’s back when it came to Khodorkovsky and Putin’s relationship. The Americanization of Yukos had gone too far.
  • What it was like for the employees at Yukos when Khodorkovsky was arrested—and what it meant for Russia’s economic future.

 
Resources
Loren Steffy on LinkedIn
Stoney Creek Publishing
 

Categories
The Hill Country Podcast

John Aceti on Profiles in Leadership


Welcome to The Hill Country Podcast. The Texas Hill Country is one of the most beautiful places on earth. In this podcast, Hill Country resident Tom Fox visits with the people and organizations that make this the most unique areas of Texas. Join Tom as he explores the people, places and their activities of the Texas Hill Country. In this episode, I visit John Aceti, author of 7 books about people and places in the Hill County. We discuss John’s most recent book Profiles in Leadership. Highlights include:
·       John’s storytelling skill.
·       His endless curiosity.
·       The leadership styles of 18 persons he interviewed for the book.
·       What are their leadership philosophies?
·       What strategies did they use to succeed in their individual career fields?
·       What’s next for John.
Resources
Profiles in Leadership on Amazon

Categories
Great Women in Compliance

Alison Taylor-Everything She Says is Gold

Welcome to the Great Women in Compliance Podcast, co-hosted by Lisa Fine and Mary Shirley.

Alison Taylor is one of Mary’s favorite thought leaders. After last appearing on the show in 2020 with Lisa, we invited Alison back to hear about her latest project, a book you’ll hear about and her latest musings on ESG including challenges for companies and what Alison is predicting about the future of ESG – you won’t want to miss it!

We ask Alison who she would give an ethical award to up until this point in 2022 and we think you’ll be in agreement with her thoughts on this leader who has exemplified tone from the top.

 The GWIC team sends their thanks for all of the well wishes received for their milestone 150th episode last week.

The Great Women in Compliance Podcast is on the Compliance Podcast Network with a selection of other Compliance related offerings to listen in to. If you are enjoying this episode, please rate it on your preferred podcast player to help other likeminded Ethics and Compliance professionals find it. You can also find the GWIC podcast on Corporate Compliance Insights where Lisa and Mary have a landing page with additional information about them and the story of the podcast. Corporate Compliance Insights is a much appreciated sponsor and supporter of GWIC, including affiliate organization CCI Press publishing the related book; “Sending the Elevator Back Down, What We’ve Learned from Great Women in Compliance” (CCI Press, 2020).

You can subscribe to the Great Women in Compliance podcast on any podcast player by searching for it and we welcome new subscribers to our podcast.

Join the Great Women in Compliance community on LinkedIn here.

Categories
Compliance Into the Weeds

Compliance Lessons from the Army

Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. In this episode, we take a deep dive into the recently released GAO report on failures in the US Army SHARP program, largely around policies and procedures, with a dash of culture thrown in.  Highlights include:

·      Why has SHARP failed?

·      What is the role of policies and procedures in compliance? What about culture?

·      How can assess your own internal training and communications?

·      What are the 3 questions every compliance professional should ask?

·      What are the lessons for the civilian compliance world?

·      Where does the Army go from here?

Resources

Matt in Radical Compliance

Categories
Daily Compliance News

June 8, 2022 the Gupta Brothers Arrested Edition


In today’s edition of Daily Compliance News:

  • Vietnamese minister sacked in corruption scandal. (Bloomberg)
  • Gupta Brothers arrested in Dubai. (WSJ)
  • ABC programs blockchain and crypto. (Kroll)
  • Wells Fargo halts fraudulent hiring program. (NYT)
Categories
Blog

Recidivist Tenaris FCPA Resolution

Yet another Foreign Corrupt Practices Act (FCPA) recidivist was announced last week as the Securities and Exchange Commission (SEC) announced that Tenaris SA would pay more than $78 million to resolve charges of FCPA violations in connection with a bribery scheme involving its Brazilian subsidiary. Back in 2011, Tenaris entered into a Non-Prosecution Agreement  (NPA) with the Department of Justice (DOJ) and a Deferred Prosecution Agreement (DPA) with the SEC as a result of alleged bribes the company paid to obtain business from a state-owned entity in Uzbekistan. Interestingly even though the company had received sanction from both the DOJ and SEC, there was nothing in the Cease and Desist Order (Order) which indicated that Ternaris self-disclosed this additional FCPA violation nor anything to indicate why it was not uncovered until many years after the bribery scheme was implemented and executed.
Background
According to the SEC Press Release, “the resolution with Tenaris is the result of an alleged bribe scheme involving agents and employees of its Brazilian subsidiary to obtain and retain business from the Brazil state-owned entity Petrobras. Specifically, the order finds that between 2008 and 2013, approximately $10.4 million in bribes was paid to a Brazilian government official in connection with the bidding process at Petrobras. The bribes were funded on behalf of Tenaris’ Brazilian subsidiary by companies affiliated with Tenaris’ controlling shareholder.”
Charles Cain, Chief of the SEC Enforcement Division’s FCPA Unit, said of the resolution, “Tenaris failed for many years to implement sufficient internal accounting controls throughout its business operations despite known corruptions risks. This failure created the environment in which bribes were facilitated through a constellation of companies associated with its controlling shareholder.”
The Bribery Scheme
The bribery scheme was created to create a business opportunity for Tenaris’ operating subsidiary in Brazil, Confab Industrial S.A. (Confab). The bribery scheme was created with a corrupt Petrobras official who “would use his authority to influence Petrobras to forgo an international tender process for certain contracts for pipes and tubes, thereby favoring Confab, by continuing its status as the only domestic supplier, and allowing direct negotiations with it. Confab would benefit through the elimination of international competitors which may have submitted lower bids and forced Confab to lower its price, if not lose the contract altogether.” In exchange the corrupt Petrobras official received “approximately 0.5% of Confab’s revenue from these contracts” which amounted to some $10 million in illegal payments.
The bribery scheme was effectuated through the formation of Uruguayan-domiciled shell company and creation of a  bank account in its name, where bribery payments were deposited. During the relevant period, the bribes were paid into Uruguayan Company’s bank account for the benefit of Government Official. The funding for the bribes came from another Tenaris affiliated company, San Faustin SA, which had bank accounts in the US and elsewhere which funded the bribe. To hide the payments in the Tenaris books and records, fake contracts were executed between Uruguayan Company and the shell company in which payments were made to the Uruguayan Company “for purported past and future consultancy and advisory services that Uruguayan Company performed.” All of this was done with the knowledge of “a senior Confab employee about the bribe scheme including about the timing of bribe payments being deposited into the Uruguayan Company bank account.”
Thoughts
This matter really is a head scratcher. The first thing that jumps out is the time of the bribery scheme, which was 2008-2013. This overlaps the time frame from the 2011 NPA and DPA, which was for conduct from 2007-2010. Although the conduct at issues in those resolutions was centered on bribery and corruption in Central Asia and not Brazil and South America. It is more than difficult to understand how this bribery scheme was not uncovered when the company went through an allegedly comprehensive FCPA investigation for those resolutions.
Even more troubling is that the company continued engaging in bribery and corruption right through the signing of those settlements and the reporting periods set out in both; for two years under both the DPA and NPA. Under both agreements, Tenaris was to turn over evidence of any additional FCPA violations. Obviously Tenaris did not uncover the additional illegal actions, it certainly appears they did not look very diligently either.
Perhaps one answer is found in the undertakings section of the Order which states “During a two-year term as set forth below, Respondent shall report to the Commission staff periodically, at no less than six-month intervals, the status of its remediation and implementation of compliance measures related to the effectiveness of the anti-corruption policies, procedures, practices, internal accounting controls, recordkeeping, and financing reporting processes particularly as to preventing the use of unaccounted funds for illicit purposes to benefit Tenaris, including the use of funds available to Tenaris’ officers, directors, employees and/or agents as a result of their dual affiliation with Tenaris and San Faustin and related entities.” [emphasis supplied]
This sounds suspiciously like a slush fund was operating which allowed Tenaris’ officers, directors, employees and/or agents to make payments across different (but related) entities. Such payments could be easy to disguise and hard to trace. This might be a reason why Tenaris itself did not uncover the illegal payments and why it did not self-disclose to the SEC. This is also something that every Chief Compliance Officer (CCO) needs be on the lookout for your organization.
Tenaris is required to provide two separate follow-up reviews to the SEC. These reviews are to incorporate “comments provided by the Commission staff on the previous report, to further monitor and assess whether the policies and procedures of Respondent are reasonably designed to detect and prevent violations of the FCPA and other applicable anti-corruption laws (the Follow-up Reports).” Additionally, Tenaris is required to “undertake a final review to further monitor and assess the operation of its FCPA and anti-corruption compliance program and whether Respondent’s policies and procedures are reasonably designed to detect and prevent violations of the FCPA and other applicable anti-corruption laws.”  One can only hope Tenaris will be more thorough under this requirement in the Order than it was under the prior NPA or DPA.
Where did the information which led to this recidivist Order derive? Obviously Brazilian prosecutors is one good guess. Another clue is found in the SEC Press Release which stated, “The SEC appreciates the assistance of the Superintendencia del Mercado de Valores (SMV) in Panama, the Brazilian Federal Prosecution Service, and the Procura della Repubblica presso il Tribunale di Milano, Italy.” Panama makes sense as a home of one of the Ternaris family of shell companies.  but note the inclusion of prosecutors from Italy as well.
We can only hope that Tenaris does not become the first three time recipient of a FCPA enforcement action.

Categories
The Compliance Life

Joya Willams-From Legal Secretary to Compliance

The Compliance Life details the journey to and in the role of a Chief Compliance Officer. How does one come to sit in the CCO chair? What are some of the skills a CCO needs to success navigate the compliance waters in any company? What are some of the top challenges CCOs have faced and how did they meet them? These questions and many others will be explored in this new podcast series. Over four episodes each month on The Compliance Life, I visit with one current or former CCO to explore their journey to the CCO chair. This month, I take things in a different direction as I host my first non-CCO compliance professional, Joya Williams and detail her journey in compliance. In Episode 1, we take a look at Joya’s career leading to compliance.

Joya started her work life as a legal secretary, working in the Houston legal community for many years. She moved into the corporate world, taking a corporate paralegal position inhouse with the Baker Hughes compliance function. At Baker Hughes, entered Center for Advanced Legal Studies paralegal program and attended classes at night to obtain her Associates Degree in Paralegal Studies.  Afterwards, she obtained her paralegal certification. She found her passion and it was compliance.

Resources
Joya William LinkedIn Profile

Categories
Everything Compliance - Shout Outs and Rants

Everything Compliance-Shout Outs and Rants from Episode 101


Welcome to the fan favorite Shout Outs and Rants. In this episode we have them from Episode 101.

1. Karen Woody shouts out the US National and state parks systems which provide much needed green spaces for Americans.

2. Matt Kelly has a dual shout out and rant. He shouts out to the Boston Celtics for having the greatest NBA Finals-Game 1 comeback to win the game. He rants about the DOJ failing to post the speech by AAG Kenneth Polite where he announced the new requirement for CCO certification.

3. Jonathan Marks also has a dual shout out and rant. He shouts out to the Philadelphia Phillies for firing manager Joe Girardi and rants about Glencore’s Press Release about their updated compliance which he rants “says nothing”.

4. Tom Fox reads out the names of the students and teachers who were killed in the recent massacre in Uvalde,  TX.

5. Jonathan Armstrong has two shout outs. First to the Queen’s Platinum Jubilee and Sir Andy Murray for speaking out against the murder of school children. Murray is a survivor of a similar event in Scotland.

Categories
Innovation in Compliance

Third-Party Risk Management Industry with Brad Hibbert


 
Brad Hibbert is the Chief Strategy Officer and Chief Operations Officer at Prevalent Inc., a company specializing in eliminating security and compliance exposures tied to third-party vendors and suppliers. Tom Fox welcomes Brad back to this week’s show to explore and discuss a study Prevalent recently released entitled, “The 2022 Third-Party Risk Management Industry Study”. 
 

 
Third-Party Risk Management Industry Survey 
Brad reveals that Prevalent Inc. has been working on the “Third-Party Risk Management Survey” for approximately three years. To gather data on the subject, they send the survey to thousands of professionals who are focused on third-party risk management, and who also have a background in security. When the results come in they are categorized, analyzed, and observed for any trends. Tom asks Brad what was the overall assessment of third-party risk management he determined from the survey. “I think third-party risk management is certainly getting more awareness within companies and within executive teams within companies,” Brad replied. He also noticed that both IT and non-IT risks are major concerns for the respondents. 
 
Key Observations About the State of Third-Party Management Risk Today
Tom asks Brad to further analyze and discuss the key findings of the survey. These are the key observations:

  • “Organizations are paying more attention to non-IT security risks but not enough.” Brad explains that programs involved in investigating IT threats are starting to acknowledge the non-IT threats as well. He says “It is no longer just about IT vendors, so organizations are trying to get a broader visibility across that broader supply chain of IT vendors and non-IT vendors, and they’re also trying to get a broader visibility of the types of risks that they’re looking at.” Brad sees this as a positive trend in the third-party risk management industry.
  • “Third-party risk management may (finally!) be getting more strategic.” Tom knows that IT professionals and compliance professionals understand the gravity of third-party risk but wonders if higher-level executives see it the same way – this is an issue to be dealt with strategically, he points out. Brad explains that 31% of respondents indicated that they were impacted by a third-party data breach. These incidents will cause entire organizations to raise awareness of third-party risk and take it seriously. He remarks, “People from security, people from procurement, people from contract, legal and compliance are trying to understand how they can get a holistic view of this concern around vendor risk to minimize it throughout that vendor life cycle.” 
  • “Manual methods for assessing third parties persist but dissatisfaction runs high.” Unfortunately, most companies are still solely fixated on their IT main vendors and security risks, and they believe that they can simply use manual methods like emails and spreadsheets. However, as your third-party risk management grows, you can no longer successfully use those methods as they “do not examine the risks and remediate those risks with the vendors efficiently.”
  • “Organizations are concerned with increasingly damaging third-party security incidents but are using disparate tools to detect, investigate and resolve exposures.” Brad says “High profile impactful data breaches are certainly raising awareness of the problem and it’s causing more organizations to monitor third parties for these types of data breaches.” However, the number of successful breaches over the pandemic suggests that organizations are not using established tools to fight the threats. 
  • “Organizations are waiting over two weeks for third-party incident resolution.” Brad explains that most companies do not have a third-party breach response process in case of an emergency, so it takes a while for companies to identify the issue and begin the process of mediating those risks.
  • “Third-party risk audits are getting more complex and time-consuming.” Brad states, “42% of respondents state that they are audited yearly for their third parties and when they are audited, respondents are indicating it takes between a week and one month to procure evidence to meet that regulatory audit.” From that data, it was determined that audits are costly and time-consuming because most companies are trying to run grandiose third-risk management programs on less adequate systems.
  • “Third-party risk management discipline falters as vendor relationships progress.” From the survey, it was determined that as vendor relationships progress, the power imbalance between vendor and organization switches, leaving all the organization’s data and information exposed to the vendor, increasing the chances of data breaches. 

 
Resources 
Brad Hibbert | LinkedIn | Twitter
Prevalent Inc. | Third-Party Risk Management Study