Categories
Great Women in Compliance

Amy Schuh on Kind vs. Nice: How to Build a Compliance Function

Welcome to the Great Women in Compliance Podcast, co-hosted by Lisa Fine and Mary Shirley and to the new GWIC year. Many of us, especially women, think about the importance of being nice and kind, but have you thought about the differences between those two concepts?  And is it a problem to be nice at work?  In this episode, Lisa speaks with Amy Schuh, a partner at Morgan Lewis, talks about the distinction – and how being nice works only when things are going well, and being kind also includes being genuine, supporting your team and is critical to building a successful compliance function.

In particular, she talks about an article  Reasons to stop being nice at work (fastcompany.com) which is incredibly thought provoking.

Amy sees her career path as a “jungle gym,” where she has moved between law firms to legal and compliance roles in large companies, and has successfully avoided monitors.  She shares her experiences in both, and how they have influenced her current work and how she built her career.

Lisa and Amy also talk about how they connect and build trust in relationships, and how to build and retain strong teams, particularly with the concept of fairness to employees.  Spoiler alert: treating everyone equally isn’t the same as being fair.  That concept is included in Hiring Wisdom: Top 10 Ways to Guarantee Your Best People Will Quit – TLNT.

The ”homework” that Lisa did to speak with Amy in those two articles are now a part of Lisa’s library…which also includes Mary Shirley’s Corporate Compliance Insights monthly column.

The Great Women in Compliance Podcast is on the Compliance Podcast Network with a selection of other Compliance related offerings to listen in to.  If you are enjoying this episode, please rate it on your preferred podcast player to help other likeminded Ethics and Compliance professionals find it.  If you have a moment to leave a review at the same time, Mary and Lisa would be so grateful.  You can also find the GWIC podcast on Corporate Compliance Insights where Lisa and Mary have a landing page with additional information about them and the story of the podcast.  Corporate Compliance Insights is a much-appreciated sponsor and supporter of GWIC, including affiliate organization CCI Press publishing the related book; “Sending the Elevator Back Down, What We’ve Learned from Great Women in Compliance” (CCI Press, 2020).

If you enjoyed the book, the GWIC team would be very grateful if you would consider rating it on Goodreads and Amazon and leaving a short review.  Don’t forget to send the elevator back down by passing on your copy to someone who you think might enjoy reading it when you’re done, or if you can’t bear parting with your copy, consider it as a holiday or appreciation gift for someone in Compliance who deserves a treat.

You can subscribe to the Great Women in Compliance podcast on any podcast player by searching for it and we welcome new subscribers to our podcast.

Join the Great Women in Compliance community on LinkedIn here.

Categories
Sunday Book Review

January 15, 2023 – The Top Business Books to Read in 2023 Edition

In the Sunday Book Review, I consider books that interest the compliance professional, the business executive, or anyone curious. It could be books about business, compliance, history, leadership, current events, or anything else that might interest me. In today’s edition of the Sunday Book Review, we consider some of the top business books which every compliance professional should read in 2023:

·       How to Win Friends and Influence People by Dale Carnegie

·        Influence, New and Expanded: The Psychology of Persuasion by Robert Cialdini

·       The Compound Effect: Jumpstart Your Income, Your Life, Your Success by Darren Hardy

·        Tools of Titans: The Tactics, Routines, and Habits of Billionaires, Icons, and World-Class Performers by Tim Ferriss

Resource

The Best Business Books to Read in 2023 By Hal Kitzmiller

Categories
Sunday Book Review

January 8, 2023 – The Top AI and Machine Learning Books for 2023 Edition

In the Sunday Book Review, I consider books that interest the compliance professional, the business executive, or anyone curious. It could be books about business, compliance, history, leadership, current events, or anything else that might interest me. In today’s edition of the Sunday Book Review, we consider some of the top AI and machine learning books that every compliance professional should read in 2023:

·       Future Ready: The Four Pathways to Capturing Digital Value by Stephanie L. Woerner, Peter Weill, and Ina M. Sebastian

·        Digitalization of Financial Services in the Age of Cloud by Jamil Mina, Armin Warda, Rafael Marins, and Russ Miles

·       Power and Prediction: The Disruptive Economics of Artificial Intelligence by Ajay Agrawal, Joshua Gans, and Avi Goldfarb

·        Practicing Trustworthy Machine Learning by Yada Pruksachatkun, Matthew Mcateer, and Subhabrata Majumdar

Resource

The Enterpriser’s Project- 10 must-read tech books for 2023

Categories
Great Women in Compliance

Karina Vollmer – Making Friends and Influencing People

Welcome to the Great Women in Compliance Podcast, co-hosted by Lisa Fine and Mary Shirley.

One of the most critical aspects of the role of a Compliance Officer is establishing the reputation of the function as being one which is approachable and reliable.  One of the colleagues Mary has admired the most in being successful in this respect, is Karina Vollmer.  The two worked together at Tata Communications in Singapore and take a walk down memory lane to share some thoughts from the past that allow introverts like Mary to learn from extroverts like Karina.

 Karina is originally from Indonesia and takes the opportunity to share with the GWIC audience some of the unique cultural aspects of the country that may impact the role of global compliance officers in multi-national corporations.

As a mother of two and a Chief Compliance Officer, Karina has a lot going on.  Her discussion builds on an earlier podcast episode with Sue Scott (Great Women in Compliance episode #173) where she addresses the common issue of mum/mom guilt.

 The Great Women in Compliance Podcast is on the Compliance Podcast Network with a selection of other Compliance related offerings to listen in to.  If you are enjoying this episode, please rate it on your preferred podcast player to help other likeminded Ethics and Compliance professionals find it.  If you have a moment to leave a review at the same time, Mary and Lisa would be so grateful.  You can also find the GWIC podcast on Corporate Compliance Insights where Lisa and Mary have a landing page with additional information about them and the story of the podcast.  Corporate Compliance Insights is a much-appreciated sponsor and supporter of GWIC, including affiliate organization CCI Press publishing the related book; “Sending the Elevator Back Down, What We’ve Learned from Great Women in Compliance” (CCI Press, 2020).

If you enjoyed the book, the GWIC team would be very grateful if you would consider rating it on Goodreads and Amazon and leaving a short review.  Don’t forget to send the elevator back down by passing on your copy to someone who you think might enjoy reading it when you’re done, or if you can’t bear parting with your copy, consider it as a holiday or appreciation gift for someone in Compliance who deserves a treat.

You can subscribe to the Great Women in Compliance podcast on any podcast player by searching for it and we welcome new subscribers to our podcast.

Join the Great Women in Compliance community on LinkedIn here.

Categories
Great Women in Compliance

Jacki Cheslow – Bringing Life to a Compliance Program

Welcome to the Great Women in Compliance Podcast, co-hosted by Lisa Fine and Mary Shirley.

One of the best things about the longevity of the GWIC podcast is that Mary and Lisa get to build some of their own ideas and traditions.  Some are things like “bonus episodes” – a great idea by Mary, the #GWICies, and one of Lisa’s, which is to do her last podcast interview of the year with someone who is not only a leader in the E&C community due to her expertise, but also someone who is always a mentor and support to so many people (including Lisa).

This year, Lisa is speaking with Jacki Cheslow, who was on the podcast a few years back and since then has moved from a large corporate organization, Avis/Budget, to the Institute of Electrical and Electronic Engineers – the IEEE, which is the world’s largest non-profit technical organization.

Jackie talks about her experience with IEEE as a mission-driven organization, which is to develop technology to benefit humanity, and how that influences her role.  She also talks about starting out at IEEE and needed to learn a whole new area, sanctions, which then became even more important than she would have anticipated.

Jacki also shares how she had a bit of imposter syndrome when she started at IEEE,  She provides  valuable insight in how to change one’s mindset from a fixed mindset to a growth mindset and how that can also change one’s view that they are given the opportunity to learn new things as recognition of one’s potential and being open to learning.

The Great Women in Compliance Podcast is on the Compliance Podcast Network with a selection of other Compliance related offerings to listen in to.  If you are enjoying this episode, please rate it on your preferred podcast player to help other likeminded Ethics and Compliance professionals find it.  If you have a moment to leave a review at the same time, Mary and Lisa would be so grateful.  You can also find the GWIC podcast on Corporate Compliance Insights where Lisa and Mary have a landing page with additional information about them and the story of the podcast.  Corporate Compliance Insights is a much-appreciated sponsor and supporter of GWIC, including affiliate organization CCI Press publishing the related book; “Sending the Elevator Back Down, What We’ve Learned from Great Women in Compliance” (CCI Press, 2020).

If you enjoyed the book, the GWIC team would be very grateful if you would consider rating it on Goodreads and Amazon and leaving a short review.  Don’t forget to send the elevator back down by passing on your copy to someone who you think might enjoy reading it when you’re done, or if you can’t bear parting with your copy, consider it as a holiday or appreciation gift for someone in Compliance who deserves a treat.

You can subscribe to the Great Women in Compliance podcast on any podcast player by searching for it and we welcome new subscribers to our podcast.

Join the Great Women in Compliance community on LinkedIn here.

Categories
Blog

ABB FCPA Resolution: Part 5 – A Win for Compliance

We conclude our exploration of the latest resolution of a Foreign Corruption Practices Act (FCPA) violation involving the Swiss construction giant, ABB Ltd. There have been several reference documents used this week and they include the Securities and Exchange Commission Complaint (SEC Order); the Department of Justice (DOJ) Press Release. Plea Agreement (ABB Plea Agreement) and Deferred Prosecution Agreement(DPA), the ABB South Africa Plea Agreement and Criminal Information, the ABB Management Services Plea Agreement and Criminal Information.

Over this blog post series, we have been exploring these key questions: How did ABB obtain such a superior resolution? And, as a three-time FCPA violator, how did the company avoid a monitor? Today, we celebrate how this most unusual FCPA enforcement action is a huge victory for compliance.

How did ABB obtain such a superior resolution?

There appears to be three components to ABB’s avoidance of a monitor. It all began with ABB’s attempt to self-disclose. Please note this attempt was not successful as the South African press broke the story of ABB’s bribery and corruption between the time ABB called to set up meeting and actually sat down with the DOJ. Yet the DOJ was impressed enough with ABB’s intent or at least desire to self-disclose that it spent a considerable amount of ink in the resolution documents detailing how ABB got close but missed timely self-disclosing.

Yet this putative failure at self-disclosure laid the groundwork for everything that followed, eventually leading to the stunning result. As the DOJ stated in the DPA, “in evaluating the appropriate disposition of this matter-including the appropriate form of the resolution-considered evidence that, within a very short time of leaning of the misconduct, the Company contacted the Fraud Section and scheduled a meeting to discuss matters under investigation by the Fraud Section and the Company. The Company did not specifically identify the South Africa misconduct in that meeting request, but it disclosed the South Africa misconduct during the scheduled meeting, subsequently presented evidence to the Offices that it intended to disclose the misconduct related to South Africa during the scheduled meeting and did not know of any imminent media reports when the meeting was scheduled.”

The second component is the above-noted discussion about ABB’s near self-disclosure. While it could have amounted to an own goal, given the lengthy DOJ discussion in the settlement documents, it appears the DOJ received ABB’s near miss more favorably. The second point is something every Chief Compliance Officer (CCO) and outside counsel need to understand; that being truly extraordinary.

Matt Kelly identified the one piece of information which took what is now this standard recitation of extraordinary cooperation to a truly high level of ‘extraordinary’. In a blog post, Kelly pointed out that in the SEC Order, it stated, “ABB’s cooperation included real-time sharing of facts learned during its own internal investigation.” This meant “ABB was sharing information with regulators as quickly as it found those facts, without necessarily knowing how such admissions might affect its overall case and settlement chances.” He then opined, “When you don’t know the full extent of your sins and the punishment to follow, but you cooperate with regulators anyway — that’s an impressive commitment to the culture of compliance that the Justice Department wants to see.”

Next were the actions by ABB in their remediation. The Plea Agreement reported that ABB “engaged in extensive remedial measures, including hiring experienced compliance personnel and, following a root-cause analysis of the conduct described in the Statement of Facts, investing significant additional resources in compliance testing and monitoring throughout the organization; implementing targeted training programs, as well as on-site supplementary case-study sessions; conducting continuing monitoring and testing to assess engagement with new training measures; restructuring of reporting by internal project teams to ensure compliance oversight; and promptly disciplining employees involved in the misconduct.” This final point was expanded on in the SEC Order which reported that all employees involved in the misconduct were terminated.

As a three-time FCPA violator, how did the company avoid a monitor?

ABB essentially created its own monitorship around testing its compliance program and reporting to the DOJ. In a section entitled “Written Work Plans, Reviews and Reports”, ABB agreed to conduct a first review and prepare a first report, followed by at least two follow-up reviews and reports. But more than simply reporting, ABB agreed to create and submit for review a workplan for this ongoing testing of its compliance program, as the program was detailed in the DPA. The DPA specified, “No later than one (I) year from the date this Agreement is executed, the Company shall submit to the Offices a written report setting forth:

  • a complete description of its remediation efforts to date;
  • a complete description of the testing conducted to evaluate the effectiveness of the compliance program and the results of that testing; and
  • its proposals to ensure that its compliance program is reasonably designed, implemented, and enforced so that the program is effective in deterring and detecting violations of the FCPA and other applicable anti-corruption laws.”

ABB also agreed to meet with the DOJ quarterly to submit and discuss the results of its ongoing testing. While I am sure many other companies have made a similar proposal to the DOJ, through its actions during the pendency of the investigation, ABB convinced the DOJ it could be trusted to follow through with its commitment.

How does all of this work into the DOJ decision not to require a monitor? There is now a 10-factor test that was laid out in the Monaco Memo. Factor 1 is whether the company self-disclosed the incident at issue. Factors 4-6 all relate to conduct and actions when the illegal activity occurred, not after discovery and self-disclosure. Factor 4 relates to the length or pervasiveness of the conduct and whether senior management was involved. Factor 5 reviews “the exploitation of an inadequate compliance program or system of internal controls.” Factor 6 asks if compliance personnel were involved or were basically negligent in failing to “appropriately escalate or respond to red flags.” Factors 7-10 considered ABB’s actions post-reporting, how the company became aware of the matter, its root cause analysis, its remedial actions and overall reduction in the company’s risk profile. While there was no substantive discussion of these factors in the any of the resolution documents, it appears the DOJ criteria for a monitor was not met.

The ABB FCPA resolution represents one of the biggest wins for corporate compliance that we have seen in recent memory. A now thrice-recidivist received a discount on its overall fine and penalty and avoided a monitor through truly exception work after the bribery and corruption was uncovered. Every compliance officer should thoroughly study this matter to see the specific steps ABB engaged in, starting with their first phone call to the DOJ. During your investigation, embrace the DOJ’s need for speed in communicating new and salient facts as they are uncovered, perform a root cause analysis and then remediate, remediate, and remediate. ABB is to be commended and indeed celebrated for its success in this matter.

Categories
Creativity and Compliance

Compliance Confessions – Debunking Employee Myths About Compliance

Where does creativity fit into compliance? In more places than you think. Problem-solving, accountability, communication, and connection – they all take creativity. Join Tom Fox and Ronnie Feldman on Creativity and Compliance, part of the award-winning Compliance Podcast Network. In this episode, Tom and Ronnie discuss a new video series launched by L&E; why they made them and how they help the compliance professional to debunk myths about the corporate compliance function. In a trailer for a series entitled ‘Compliance Confessions’, we discuss how sharing about how employees feel about compliance and then statements providing a rebuttal to the perception of compliance officer as Dr. No and the corporate compliance function existing as the Land of No,  populated by Dr. No. We also discuss how changing the reputation of E&C from Dr. No can be a valuable communications tool for your compliance function going forward.

Resources:

Ronnie Feldman on LinkedIn

Learnings & Entertainments on LinkedIn

Ronnie Feldman on Twitter

Learnings & Entertainments 

 L&E Offerings

Compliance Confessions 

Categories
Blog

Farewell to Christine McVie and Improving Culture in the Era of Hybrid Work

It is not simply the Department of Justice (DOJ) who have emphasized corporate culture over the past 14 months. Many companies and compliance professionals have worried about culture since the Covid-19 pandemic forced organizations to adapt to new working arrangements which, by their nature, isolated employees. Now with the return to work in the form of hybrid work, many compliance professionals are thinking about how to re-engage employees from a cultural perspective in a manner which will meet the new DOJ strictures announced by Deputy Attorney General (DAG) Lisa Monaco in her October 2021 speech.

Before we get to today’s blog, I want to take a few lines to mourn the passing of Christine McVie, from the mega-Super Group Fleetwood Mac. She is the first of their five-person classic line up to pass. She was married to bassist John McVie during part of her tenure with the group. While most fans focused on Stevie Nicks as the lead singer of the group, for me, the top voice was always McVie. Husky and sultry, it was the perfect counterpoint to Nicks. McVie was also the band’s keyboardist and, more importantly, a fantastic songwriter. Her New York Times (NYT) obituary reported that in the band’s Fleetwood Mac’s “Greatest Hits” anthology, which was released in 1988 and sold eight million copies, McVie “either wrote or co-wrote half of its 16 tracks.” Some of the songs she wrote (or co-wrote) included: Say You Love Me, You Make Lovin’ Fun, Hold Me, Don’t Stop, Over My Head and Little Lies.

I was intrigued by a recent Harvard Business Review (HBR) article, entitled Revitalizing Culture in the World of Hybrid Work, reviewing a Gartner study entitled ‘Evolve Culture & Leadership for the Hybrid Workplace’. The article noted, “two-plus years into the pandemic, many leaders worry that remote and hybrid work are undermining their organizations’ culture. Their concerns aren’t entirely misplaced: A 2022 global study by the research and advisory firm Gartner found that just 25% of remote or hybrid knowledge workers feel connected to their company’s culture. But forcing employees back to the office is risky, as CEOs including Elon Musk and Jamie Dimon have discovered firsthand. Companies should take another tack.”

Indeed, the article quoted Alexia Cambon, a research director in Gartner’s HR practice and a principal author of the study, who said, “I find it ironic when leaders say they need to bring workers back to the office because of culture. They’re going to get the opposite of what they hope for. Instead of viewing hybrid work as a disruption to the cultural experience, leaders should see it as an opportunity to build culture differently.” The reality is that even with the rantings of Musk, hybrid work is here to stay not simply because employees want it, but it makes a company run more efficiently.

Cambon explained that culture has two components. The first is alignment, which she defined as “employees know what the culture is and believe that it is right for the firm.” The second is “connect­edness, which means that those same employees both “identify with and care about the culture.” The Gartner survey of “more than 4,500 knowledge workers and 200 HR leaders showed that in-​office mandates drove connectedness sharply down. Among employees with “radical flexibility” (defined as considerable freedom over location, schedule, work volume, team, and projects), 53% reported a high degree of connectedness, whereas just 18% of those with low flexibility did so.”

Understanding this culture dichotomy is important because most compliance professionals are struggling with how to re-engage employees with their corporate culture. Certainly, the Monaco Memo mandates around corporate culture are also driving these concerns. The starting point is to realize that pre-pandemic most efforts to imbue and communicate about corporate culture were around alignment. Compliance professionals tended to believe that “connectedness would occur more or less by osmosis.” Obviously, this approach needs to be rethought in a hybrid working environment “where employees spend 65% less time in offices than they did before the pandemic.” Fortunately, the article provides a three-step roadmap for compliance professionals to do so.

Communicate culture through your organization’s work. The pandemic showed that productivity increased when employees worked from home as “People often have more time for deep work.” An organization needs to use this insight as an “opportunity for employers to instill culture through daily tasks.” Cambon believes, “Every time you engage in a task, you should see the corporate culture reflected in it.” To accomplish this compliance professionals should audit “firm’s work processes to make sure they are compatible with the intended culture… “Say you want your firm to be innovative, forward-thinking, and fast-paced. If your methodologies are bureaucratic and your systems have constant technical glitches, that will undermine the culture.” For the compliance professional, it would allow you to reinforcement your culture messaging literally with every task an employee engages in.

Connect through emotional proximity. Musk and Dimon believing that “in-office interactions sustain culture confuses physical proximity with the more important sensation of emotional proximity.”  They are very different as “physical proximity is being in the same space as another individual” whereas “emotional proximity is being of importance to others.” Yet with fewer workplace interactions, each exchange can make a much stronger impact. It allows and even requires that meetings become more efficient so as not to waste everyone’s time. Compliance professionals can help the business leaders “create moments of emotional proximity by helping remote employees see how their work connects to the company mission.” Most importantly, the article states, “The more employees feel that their contributions are valuable, the more connected to the culture they become.”

Shift from optimizing corporate culture to fostering microcultures. Every Chief Compliance Officer (CCO) at a multinational understands the challenge of creating a strong corporate culture while also allowing local microcultures to thrive. But this challenge can provide an opportunity for “team-level experiences increased connectedness substantially more than enterprise-wide initiatives did. As a compliance professional, you can provide the “guidance to sail in the right direction” without prescribing specific norms and behaviors. The article concludes, “The pandemic has radically changed how employees experience corporate culture, and firms must embrace the new reality. “By relying less on osmosis to drive connectedness and more on intentionality, leaders will see outsized impact on performance and intent to stay.””

Tom’s Top Five Christine McVie playlist (all from YouTube)

Say You Love Me

You Make Lovin’ Fun

The Chain

Over My Head

Little Lies

Categories
Compliance Into the Weeds

Mental Health and Compliance Officers

The award-winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject. This episode considers the very prescient topic of mental health and compliance officers. There is a mental health crisis in the U.S. workforce today, which also applies to compliance officers. Matt recently moderated a webinar hosted by Ethico on how mental health issues can affect corporate culture and compliance officers. The panelists included Paul Liebman, head of compliance at Harvard University; Sarah Ross, a former compliance officer at Novartis who now runs a consulting business on burnout, depression, and related issues; and Nick Gallo, co-CEO at Ethico.

Some of the highlights included:

  • How the Covid-19 pandemic accelerated the issues of mental health for all workers.
  • We had some great suggestions from the panelists and webinar participants.
  • Understanding the difference between mental health and mental illness is critical.
  • Consider how your company could weave mental health awareness into training, especially manager training.
  • Define boundaries between work and personal life.
  • Finding a friend in your field can be a critical mental health safety check. If you feel like you have someone to speak to about stress, you’re more likely to understand and confront that stress. True for compliance officers and other employees alike.
  • There is a strong connection between mental health and a speak-up culture generally. If employees feel afraid to speak up about feeling stressed or overworked, would they be equally reluctant to speak up about misconduct?

 Resources

Matt Kelly in Radical Compliance

Categories
Blog

Compliance and Corporate Principles in Today’s World

For corporations, navigating the political landscape has become an increasingly difficult task. While being admonished to ‘stay in their lane’ by some; businesses are just like their stakeholders, impacted by the ever-changing political miasma. When this new reality is coupled with the new levels of transparency in companies, which are only amplified by social media, a company can find itself embroiled in very public controversies with one or more stakeholder groups. As these situations occur, Chief Compliance Officers (CCOs) and compliance professionals will be called upon to help companies navigate this fraught process.

I was therefore intrigued by a recent Harvard Business Review (HBR) article, entitled Strategy in a Hyperpolitical World, where authors Roger L. Martin and Martin Reeves opined on how companies can make smart choices when values clash. Some recent examples the authors pointed to included “when Delta stopped offering discounts to NRA members following a 2018 school massacre in Florida, it was threatened with the withdrawal of fuel subsidies in Georgia. When Disney spoke up on LGBTQ+ rights in Florida, it lost its special governance status and rights in the state. When H&M voiced concerns about cotton sourcing and human rights in China, its revenues in that country plummeted. When the Ukraine crisis broke, McDonald’s was forced to exit the business it had painstakingly built in Russia over a 30-year period.”

This change for corporations has been percolating for some time. As with many changes over the past few years, this politicizing of corporations accelerated during Covid-19 and the Russian invasion of Ukraine. In addition to the increased amplification through social media noted above, the authors believe, “the workplace has become the main vehicle for socialization and self-expression. As employees seek to express their identities and beliefs at work, they increasingly expect that their companies will support the issues they care about.” Companies have for years wanted this type of commitment and engagement with its employees but with all these changes, new risks are presented. Moreover, “many CEOs who have taken a stance on social issues say the impetus was that their employees expected and lobbied for it.” In other words, as the authors believe, the corporate playing field has expanded beyond simply justifying strategic decisions in purely business terms.

How can compliance help a company navigate through all of this? The authors state, “To make and implement the best strategic choices in this environment, leaders will have to (1) develop robust principles to guide strategic choices, (2) address ethical issues early, (3) consistently communicate and implement their choices, (4) engage beyond the industry to shape the context, and (5) learn from mistakes to make better choices in the future.” This is a process that can be facilitated by the corporate compliance function, and I have adapted the authors process for compliance.

Develop Robust Principles

The authors believe the “first step is understanding the salient social and political issues for your company. The second step is envisioning where and how those issues might intersect with your business and the choices that they imply. The third step is hearing and understanding the opinions of your employees on those issues—because, as we’ve noted, they are often the reason that companies take a position on political issues.” They caution the principles must be broad enough “to apply across the major sources of political tension to which a company is likely to be exposed” and they should be clear. Finally, they should be easily audited.

Address Ethical Issues Early

Admittedly, “anticipating and shaping ethical challenges requires a delicate balancing act” but companies are now required to be more nimble and more agile. The authors note, “Individual companies may be able to move earlier and with greater control, but eventually complex issues may necessitate collective action, often initiated by a market leader.” An organization should assess where and how it should operate as well as its “need to anticipate, preempt, and shape nascent ethical challenges. That may require a high degree of creative problem-solving, but it often garners outsize public goodwill and strategic advantages for early movers. Once an issue has become front-page news, political camps will be entrenched, and the company’s room for maneuver will be limited.” This was seen most strikingly in the wake of the Russian invasion of Ukraine where companies were presented with a stark choice from their employees and other stakeholders; support Democracy or suffer the impacts of being pro-Putin. Companies who quickly responded were also in a much better position when the inevitable economic and trade sanctions began to be levied.

Consistently Communicate and Implement Choices

It is critical that principles should “be communicated to and understood by all employees. Because they will influence the expectations of stakeholders outside the company, they should also be publicly transparent.” As the Fair Process Doctrine implies, “Principles are credible only if they are consistently applied.” The authors interpret this to mean “they must be part of the everyday making of business decisions, not simply called up in response to pressure after a situation has exploded.” But just as senior leaders must not simply “Talk the Talk but Walk the Walk”, principles which only “inform communications but not action will not be credible over time or effective in navigating risk.” A CCO should use its company’s principles to “engage with and solve issues preemptively and collaboratively whenever possible. A company standing against corruption will have a greater impact if it works with other stakeholders to address that issue and improve the context—even if, at the end of the day, a decision about whether to stay in the business in question or exit it is required.”

Engage Beyond the Industry

If there has been one change around principles, it has been that some issues are larger than any one company can impact. Some issues are beyond even an entire industry and businesses “need to work with civil society and government on the hardest and most deeply entrenched issues to effect change.” Failing to do so can lead to “accepting the unpredictability of an endless series of ad hoc responses or having regulation forced on the industry owing to insufficient impact from their own efforts. And there are important new issues around which to build consensus.”  Perhaps the clearest example of this is human trafficking and human slavery in the business context and the passage of the Uyghur Forced Labor Prevention Act (UFLPA). This legislation sailed through the US Congress, almost unanimously, as many corporations had taken stands on the abuse of such persons who were potentially embedded somewhere in their supply chain. This type of public/private collaboration is now seen in many other areas such as trade and economic sanctions in the wake of the Russian invasion of Ukraine and the fight against money laundering.

Continuous Improvement

Your business will not always get everything right. Indeed, a compliance program is designed to prevent, detect and remediate. This means fix problems as they are detected. I was therefore gratified when the authors cited to Siemens AG for such an example, in the wake of their massive corruption scandal involving Foreign Corrupt Practices Act (FCPA) violations. The authors noted, “Siemens began by cleaning house: It hired the company’s first-ever external CEO, Peter Löscher, who, within months of taking over, had replaced about 80% of the top level of executives, 70% of the next level down, and 40% of the level below that. Next, it made earnest and long-term commitments to atone for its past actions: It has supported government investigations and set up the global Siemens Integrity Initiative to fund collective action to reduce corruption, which has allowed the company to continue to bid for government contracts.”

If you work through these steps, you should be able to prepare your organization for the next major shock.