Categories
31 Days to More Effective Compliance Programs

One Month to More Effective Written Standards: Day 15 – Enforcement Actions Featuring Facilitation Payments

One of the more confusing areas of the FCPA is in that of facilitation payments. Facilitation payments are small bribes but make no mistake about it, they are bribes. For that reason, many companies feel they are inconsistent with a company culture of doing business ethically and in compliance with laws prohibiting corruption and bribery. Further, the 2020 FCPA Resource Guide specified, “while the payment may qualify as an exception to the FCPA’s anti-bribery provisions, it may violate other laws, both in Foreign Country and elsewhere. In addition, if the payment is not accurately recorded, it could violate the FCPA’s books and records provision.” Additionally, the 2020 FCPA Resource Guide stated, “Whether a payment falls within the exception is not dependent on the size of the payment, though size can be telling, as a large payment is more suggestive of corrupt intent to influence a non-routine governmental action. But, like the FCPA’s anti-bribery provisions more generally, the facilitating payments exception focuses on the purpose of the payment rather than its value.”
In addition to these clear statements about whether the FCPA should continue to allow said bribes; you should also consider the administrative nightmare for any international company. The U.K. Bribery Act does not have any such exception, exemption or defense along the lines of the FCPA facilitation payment exception. This means that even if your company allows facilitation payments, it must exempt out every U.K. Company or subsidiary from the policy. Further, if your company employs any U.K. citizens, they are subject to the U.K. Bribery Act no matter who they work for and where they may work in the world, so they must also be exempted. Finally, if your U.S. Company does business with a U.K. or other company subject to the U.K. Bribery Act, you may be prevented contractually from making facilitation payments while working under that customer’s contract. As I said, an administrative nightmare.

Three key takeaways:

  1. Do not forget the administrative nightmare of facilitation payments for international organizations.
  2. The Kay decision made clear how narrow the “routine government action” exception is.
  3. Facilitation payments will usually be an add-on as they are symptomatic of an ineffective compliance program.

For more information, check out The Compliance Handbook, 4th edition, here.

Categories
FCPA Compliance Report

FCPA Compliance Report – Carlos Villagrán Muñoz on Implementing Effective Compliance Programs in Latin America

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast in compliance. In this episode, Tom Fox welcomes Carlos Villagrán Muñoz, Chief Compliance Officer at CMPC in Chile. We discuss operationalizing compliance at CMPC and in Latin America.

Carlos Villagrán Muñoz is a seasoned Chilean attorney with considerable experience in implementing and advancing compliance programs in Latin America. His perspective on the subject is shaped by his extensive experience and understanding of the unique challenges in the region. Carlos identifies two major hurdles in implementing effective compliance programs in Latin America: the need to tailor programs to both global and local contexts due to cultural nuances and differing perceptions of corruption and the pressing issue of money laundering, fueled by illegal activities such as corruption, drug trafficking, and human trafficking. He believes that Latin America lags in anti-money laundering efforts, which are crucial in combating corruption, and advocates for compliance programs that address these issues while considering cultural differences. Join Tom Fox and Carlos Villagrán Muñoz as they delve deeper into these topics and more in this episode of the FCPA Compliance Report podcast.

 Key Highlights

·      CMPC’s Compliance Program Addressing Antitrust Infringement

·      Navigating Cultural Nuances and Money Laundering: Compliance Challenges in Latin America

·      CMPC’s Comprehensive Compliance Training Program

·      The Rise of Technologically Savvy Compliance Experts in Chile

·      Dynamic Networking Opportunities for Compliance Professionals

Resources

Carlos Villagrán Muñoz on LinkedIn

The FinCEN Report Company

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Data Driven Compliance

The Uses of Data Driven Compliance: Part 5 – Compliance Successes Using Data Driven Compliance

Welcome to Data Driven Compliance. In this podcast, we discuss how to use data to improve and enhance the effectiveness of your compliance program, creating greater business efficiency, all leading to more return on investment for your compliance regime. Join host Tom Fox as he explores how data will drive your compliance program to the next level. This podcast is sponsored by KonaAI.

I recently had the opportunity to visit with Vince Walden, founder and CEO of KonaAI, for a podcast series on the uses of data driven compliance. Over these five podcasts, we have discussed generative AI and ChatGPT in compliance, the profiles of a corrupt payment, making the business case for data-driven compliance, what to ask for and how to ask for it, and some success stories. In this concluding Part 5, we will look at some compliance successes using a data driven approach.

In the world of business, compliance is a critical aspect that ensures organizations adhere to legal and ethical standards. Compliance not only helps companies avoid legal troubles but also plays a significant role in improving business efficiency and profitability. In this episode, Tom and Vince considered the advanced compliance tools for fraud detection and cost savings. Our discussion entailed a comprehensive analysis of the key factors that impact advanced compliance tools for fraud detection and cost savings, exploring the tradeoffs involved, the challenges faced, and the importance of considering the impact on decision-making.

Key Highlights:

  • Invoice Price Discrepancy Detection and Recovery
  • Compliance-driven Efficiency through Fraud Risk Analysis
  • Shifting Travel Expenses for Manufacturing Observations
  • Integrating Multiple Data Sources for Fraud Detection

Resources:

Connect with Vince Walden on LinkedIn

Check out Kona AI

Connect with Tom Fox on LinkedIn

Categories
Blog

Compliance Successes Using Data-Driven Compliance

I recently had the opportunity to visit with Vince Walden, founder and CEO of KonaAI for a podcast series on the uses of data driven compliance. KonaAI is the sponsor of those podcasts. This blog post series will flesh out the podcast show notes. Over the next five blog posts, we will discuss generative AI and ChatGPT in compliance, the profiles of a corrupt payment, making the business case for data-driven compliance, what to ask for and how to ask for it and some success stories. In this Part 5, we will look at some compliance successes using a data-driven approach.

As always, I am joined by Vince Walden, founder and CEO of KonaAI. There is a quiet revolution happening in the realm of compliance. It’s one that, if harnessed correctly, can turn a typically reactive process into a proactive strategy. I am of course talking about data-driven compliance. By making use of the vast amounts of data your organization collects, you can uncover potential compliance risks before they turn into actual problems. This approach can be a game-changer, not just for your role as a compliance officer, but also for your organization’s overall risk management strategy. No longer will you be caught off guard. Instead, you’ll be leading the charge, armed with real-time insights and actionable data.

Sometimes, we face unintended consequences in a business setting – consequences that occur unexpectedly because of actions taken. They could be beneficial, like improvements to the business or reduced costs. Or, they could point to underlying issues that need addressing. However, these consequences can become visible only when multiple risk triggers are considered. Here’s the interesting bit. Vince underscored the importance of considering multiple risk triggers when analyzing data. Relying on just one test or indicator won’t cut it. It isn’t just one anomaly that signals an issue. The convergence of multiple risk signals helps in identifying the potential problem areas.

Compliance is not simply about rules and regulations. It is about understanding and managing risks, ultimately leading to better business decision-making. When well-executed, it can yield great rewards or “compliance wins”. One example is identifying high-risk areas in your business and managing them proactively. A high-risk business unit in high-risk FCPA environments. By analyzing their fraud risks, the company found that salespeople wound up spending quite a bit on gifts, travel, and entertainment for foreign officials to secure a sale. The solution? Limit setting. Not only did it save them money, but decreased the sales cycle, and the cherry on top – a clientele of higher quality.

Using data analysis techniques to improve business efficiency is of utmost importance in today’s business environment. By leveraging data analysis, you have the power to identify bottlenecks, streamline processes, and optimize your operations. This not only saves time and resources but also enhances overall compliance and risk management efforts. With every step you take towards harnessing the power of data, you are paving the way for increased business efficiency and success in your industry.

Compliance is the critical aspect that ensures organizations adhere to legal and ethical standards. Compliance not only helps companies avoid legal troubles but also plays a significant role in improving business efficiency and profitability. Data driven  of advanced compliance tools for fraud detection and cost savings was discussed. This article aims to provide a comprehensive analysis of the key factors that impact advanced compliance tools for fraud detection and cost savings, exploring the tradeoffs involved, the challenges faced, and the importance of considering the impact on decision-making.

One of the advanced compliance tools discussed in the episode is Unit Price Analysis. This tool utilizes advanced technology to identify discrepancies in vendor invoices, potentially saving companies significant amounts of money. By comparing prices charged for the same product by the same vendor in different locations, contract compliance can be achieved. As Walden explained, even a small difference in unit prices can translate into substantial recoveries when multiplied by tens of thousands or hundreds of thousands of units. This tool highlights the importance of scrutinizing vendor invoices and ensuring fair pricing across different locations.

To effectively detect fraud and ensure compliance, it is crucial to integrate multiple data sources into compliance monitoring programs. As Vince Walden mentions, transparency is key, and integrating various data sources brings that transparency into play. By pulling in third-party payments, due diligence work, sanctions lists, whistleblower hotline data, and other indicators, companies can gain actionable insights and identify improper payments and risk scoring. The ability to put in multiple risk triggers and analyze data from various sources allows for a more comprehensive and accurate assessment of potential risks.

However, implementing advanced compliance tools for fraud detection and cost savings is not without its challenges. It is essential to know when to stop reviewing transactions or high-risk activities. Risk scoring frameworks help prioritize the most critical transactions, but continuous improvement is necessary to update the models and identify any missed risk triggers. Additionally, the complexity of integrating multiple data sources and implementing advanced compliance tools requires careful planning and consideration.

The impact of advanced compliance tools for fraud detection and cost savings goes beyond financial benefits. These tools can change the character of the people who interact with the company. By shifting the responsibility of travel expenses to foreign officials, the company not only achieved significant cost savings but also attracted decision-makers who came to sign contracts. This unexpected outcome demonstrates the power of compliance and fraud risk prevention in improving business efficiency and quality of customers.

In conclusion, advanced compliance tools for fraud detection and cost savings play a crucial role in ensuring legal and ethical standards are met while improving business efficiency and profitability. Unit Price Analysis and Fraud Risk Analysis are just two examples of such tools discussed in the podcast episode. By integrating multiple data sources, implementing risk scoring frameworks, and continuously improving compliance models, companies can achieve transparency, identify risks, and make informed decisions. However, it is important to consider the challenges and tradeoffs involved in implementing these tools. Ultimately, the impact of advanced compliance tools extends beyond financial benefits, positively influencing the overall business environment.

Resources:

Connect with Vince Walden on LinkedIn

Check out Kona AI

Connect with Tom Fox on LinkedIn

Categories
Data Driven Compliance

The Uses of Data Driven Compliance: Part 4 – What to Ask For and How to Ask For It

Welcome to Data Driven Compliance. In this podcast, we discuss how to use data to improve and enhance the effectiveness of your compliance program, creating greater business efficiency, all leading to more return on investment for your compliance regime. Join host Tom Fox as he explores how data will drive your compliance program to the next level. This podcast is sponsored by KonaAI.

I recently had the opportunity to visit with Vince Walden, founder and CEO of KonaAI, for a podcast series on the uses of data driven compliance. Over these five podcasts, we will discuss generative AI and ChatGPT in compliance, the profiles of a corrupt payment, making the business case for data-driven compliance, what to ask for and how to ask for it, and some success stories. In Part 4, we discuss what data a CCO needs to ask for and how to do so.

Vince Walden brings knowledge and experience in continuous compliance monitoring and risk assessment processes. Walden’s perspective on the topic is that it should be approached as a journey, not a one-time program. He emphasizes the importance of proactive risk assessments and continuous monitoring, advocating for an iterative approach demonstrating constant improvement in compliance efforts. This perspective is shaped by his belief that meeting regulatory expectations requires a diligent and ongoing commitment to improvement.

Walden also suggests that data sources should be identified based on the results of the fraud risk assessment and that the ease of obtaining the data should be considered when prioritizing analytics projects. To delve deeper into what data a CCO should ask for and how to ask for it, join Tom Fox and Vince Walden on this Data Driven Compliance podcast episode.

Key Highlights:

  • Continuous improvement through risk assessments and monitoring
  • Effective risk assessment through diverse data sources
  • Uncovering hidden relationships through expense categories

Resources:

Connect with Vince Walden on LinkedIn

Check out Kona AI

Connect with Tom Fox on LinkedIn

Categories
Blog

What Data to Ask For and How to Ask for It

I recently had the opportunity to visit with Vince Walden, founder and CEO of KonaAI, for a podcast series on the uses of data driven compliance. KonaAI is the sponsor of those podcasts. This blog post series will flesh out the podcast show notes over the next five blog posts, and we will discuss generative AI and ChatGPT in compliance, the profiles of a corrupt payment, making the business case for data-driven compliance, what to ask for and how to ask for it and some success stories. In Part 4, we will explore what data to ask for and how to ask for it.

As always, I am joined by Vince Walden, founder and CEO of KonaAI. There is a quiet revolution happening in the realm of compliance. It’s one that, if harnessed correctly, can turn a typically reactive process into a proactive strategy. I am, of course, talking about data-driven compliance. By using the vast amounts of data your organization collects, you can uncover potential compliance risks before they become actual problems. This approach can be a game-changer for your role as a compliance officer and your organization’s overall risk management strategy. No longer will you be caught off guard. Instead, you’ll lead the charge with real-time insights and actionable data.

Imagine a world where compliance isn’t a headache but a strategic advantage. You’re not constantly putting out fires but predicting and preventing them. It might sound like a dream, but it doesn’t have to be. How so? Well, by adopting a data-driven approach to compliance. This innovative method allows you to identify, assess, and manage potential compliance risks based on actual data. It’s about staying one step ahead, making informed decisions, and truly adding value to your organization. It’s not just about avoiding penalties and meeting regulations anymore. It’s about creating an environment of continuous improvement and proactive risk management.

Let’s paint a picture. You’re in a game of chess. But in this game, you’re not just reacting to your opponent’s moves. You’re anticipating them, strategizing, and making proactive decisions. That’s the power a data-driven approach to compliance can bring to your role as a compliance officer. It’s more than just crunching numbers and keeping up with regulations. It’s about leveraging the power of data to identify and mitigate risks before they materialize. It’s about transforming compliance from a cost center into a strategic asset. So, if you’re curious about how to make this data-driven shift, buckle up because we’re about to dive deep into this transformative realm.

Compliance monitoring and risk assessment are crucial components of any effective compliance program. In a recent episode of the podcast “Data Driven Compliance,” hosted by Tom Fox and featuring Vince Walden, the topic of continuous compliance monitoring and risk assessment process was explored in depth. This article aims to comprehensively analyze the critical factors that impact this process, discuss the tradeoffs involved in balancing different factors, and explore the challenges associated with other approaches.

Vince highlighted the importance of starting with a fraud risk assessment. This initial step allows organizations to identify high-frequency and high-impact risks and implement mitigating controls. Compliance professionals can prioritize their efforts and focus on the most critical areas by assessing the likelihood and impact of various risks on a scale of one to ten.

Data sources play a crucial role in risk assessment. Financial accounting systems and third-party data are valuable sources of information for identifying and mitigating risks. Tracking and categorizing expenses in accounting systems is significant for identifying anomalies and assigning risk scores. Vince highlighted the significance of having a centralized system, such as the Kona platform, to streamline this process.

However, relying solely on analytics without integrating them into the fraud risk assessment would be best. He emphasized the need for alignment between data analysis and risk assessment to ensure efforts are focused on addressing the identified risks. Simply conducting data analytics without considering the underlying risks may not yield meaningful results.

One of the challenges in continuous compliance monitoring and risk assessment is the availability and accessibility of data. Some data sources may need help, requiring compliance professionals to prioritize based on the ease of data acquisition and its value. For example, if faced with choosing to conduct a data analytics project in Brazil or China, Walden suggested starting with Brazil due to the relative ease of obtaining data from that region.

Another challenge lies in the scope of compliance monitoring. Walden emphasized that compliance monitoring is not a one-time, all-encompassing effort. It is a journey that involves proactively assessing risks and monitoring them from location to location. Compliance professionals should focus on demonstrating continuous improvement rather than tackling all threats at once. This approach aligns with regulators’ expectations of an effective due diligence program.

In addition to the primary focus on risk assessment, Walden highlighted the importance of considering ancillary areas of inquiry. For instance, looking at places such as charitable donations or marketing spending can provide valuable insights into potential risks of bribery or corruption. The KonaAI tool can help correlate these ancillary data points and provide a more comprehensive view of compliance risks.

In conclusion, continuous compliance monitoring and risk assessment require a thoughtful and balanced approach. Organizations can identify and prioritize risks, starting with a comprehensive fraud risk assessment. Data sources, such as financial accounting systems and third-party data, play a crucial role in this process. However, aligning data analytics with the identified risks is essential to ensure meaningful results. Compliance professionals should also consider the data availability challenges and scope of compliance monitoring. Organizations can meet regulatory expectations and enhance their compliance programs by demonstrating continuous improvement and considering ancillary areas of inquiry.

Resources:

Connect with Vince Walden on LinkedIn

Check out KonaAI

Connect with Tom Fox on LinkedIn

Categories
Blog

Making the Business Case for Data Driven Compliance

I recently had the opportunity to visit with Vince Walden, founder and CEO of KonaAI, for a podcast series on the uses of data driven compliance. KonaAI is the sponsor of those podcasts. This blog post series will flesh out the podcast show notes. Over the next five blog posts, we will discuss generative AI and ChatGPT in compliance, the profiles of corrupt payments, making the business case for data-driven compliance, what to ask for and how to ask for it, and some success stories. Part 3 will discuss making the business case for data-driven compliance.

Vince Walden, the CEO and founder of KonaAI, is here with me as always. Walden pointed out a dual aspect to this, bringing risk and financial perspectives into play. The risk perspective aligns with meeting expectations from the Department of Justice, SEC, or other regulatory bodies, which include culture alignment and prudent data handling. The financial end deals with a knock-on effect of compliance: a potential improvement in financial performance by curtailing revenue leakage through fraud and improper payments. This is what compliance professionals do every day. In regulated industries, however, it is not simply about convincing others of the necessity. It is also about aligning the company’s tools and methods to meet the expectations of external regulatory bodies. In an ideal world, a company’s compliance goals should align with its business goals. But achieving this balance is easier said than done.

While regulatory compliance is important, businesses are about generating revenue and turning a profit. Balancing compliance with profitability can often seem like a tightrope walk. But businesses need to realize that this balance is possible and beneficial in more ways than one. Compliance and profitability could coexist with the help of a business-savvy compliance tool. Compliance professionals need to distance themselves from a narrow focus on policies and enforcement. A broader perspective, including understanding the importance of data-driven metrics and business context, can position these professionals as valuable contributors to an organization’s bottom line. Yet Walden warned against complacency, saying that professionals who only focus on regulation and leave the business aspect by the wayside can find themselves marginalized.

Increasingly, companies realize the value of having multiple perspectives at the decision-making table. While finance and internal audit have always been pivotal, including compliance in these discussions provides a more rounded view. This broad-based approach can unlock novel insights into operational efficiency, risk mitigation, and more. The dialogue between compliance, finance, and procurement has been improving. Industries like telecommunications, oil and gas, technology, and pharmaceuticals are leading this change, recognizing the value of integrated discussions. Vince stresses the need for transparency in transactions that pose risks to the organization and sees compliance professionals playing a significant role in these discussions.

One of the greatest challenges of being a compliance professional is speaking the language of the CFO and financial stakeholders. Convincing them about the monetary benefits of compliance involves more than just throwing around regulation jargon – it requires the ability to present your case strategically. Compliance professionals understand their audience and tailor their discussions accordingly. He advises professionals to focus on how data-driven compliance can save money, improve efficiencies, and prevent improper payments. This is how to get the CFO and other financial stakeholders on board and win them over with the business case for compliance.

Walden emphasizes the importance of understanding the CFO’s financial language to argue for effectively implementing data-driven compliance. Compliance professionals must demonstrate the return on investment and the success of compliance and fraud risk management programs. Key performance indicators such as dollar recoveries and risks avoided can be used to measure the impact of data-driven compliance. Walden also highlighted the significance of finding hidden money and stopping improper payments before they occur. By utilizing data-driven metrics, compliance professionals can identify the riskiest transactions and prevent fraud, waste, and abuse. This not only aligns with the DOJ’s expectations but also improves the overall functioning of the business.

Also of significance is the role of compliance professionals in finance and procurement. More and more companies are recognizing the need to have compliance professionals at the table when making financial decisions. Compliance professionals must be able to speak the language of CFOs and help them understand the importance of compliance in reducing costs, eliminating waste, and preventing improper payments.

To make a compelling business case, compliance professionals should focus on the financial benefits of data-driven compliance. For example, if a company disburses hundreds of millions or billions of dollars in accounts payable payments to third parties, implementing a risk scoring system can help identify the top ten riskiest transactions at risk for fraud, waste, and abuse. The company can recover millions of dollars by investing a relatively small amount, such as $200,000, resulting in a significant return on investment.

It is also important for compliance professionals to collaborate with finance, procurement, and internal audit teams. The Association of Certified Fraud Examiners (ACFE) and COSO collaborated on writing the COSO Fraud Risk Management Guide, which offers useful advice for running a fraud risk management program. The principles outlined in this guide align with the DOJ’s guidance on effective compliance programs. Compliance professionals should take the initiative to engage with CFOs, heads of accounting, and heads of internal audit to foster collaboration and ensure compliance efforts are aligned with overall business objectives.

Compliance professionals play a vital role in data-driven risk management. By making a compelling business case for data-driven compliance, they can demonstrate the financial benefits, such as preventing fraud, improving cash flow, and uncovering hidden funds. Collaboration with CFOs and other key stakeholders is crucial to ensure compliance efforts are integrated into overall business strategies. Compliance professionals must continue to adapt and evolve their understanding of finance and procurement to effectively communicate the importance of data-driven compliance in mitigating risks and driving business success.

Finally, remember that data-driven compliance can improve financial performance and ROI. By harnessing the power of data to inform compliance activities, professionals in regulated industries can effectively navigate complex regulatory landscapes, minimize risks, and optimize business operations. The steps in making a business case for data-driven compliance lay the foundation for success, enabling professionals to leverage data insights, drive informed decision-making, and, ultimately, drive better business outcomes. Embrace data-driven compliance and unlock the potential for improved financial performance and ROI—within your reach.

 Resources:

Connect with Vince Walden on LinkedIn

Check out KonaAI

Connect with Tom Fox on LinkedIn

Categories
Blog

Profiles of Corrupt Payments

I recently had the opportunity to visit with Vince Walden, founder and CEO of KonaAI, for a podcast series on the uses of data driven compliance. KonaAI is the sponsor of those podcasts. This blog post series will flesh out the podcast show notes. Over the next five blog posts, we will discuss generative AI and ChatGPT in compliance, the profiles of corrupt payments, making the business case for data-driven compliance, what to ask for and how to ask for it, and some success stories. In Part 2, we will consider the profiles of a corrupt payment.

The episode highlighted research by MIT and KonaAI that examined $75 billion in payments from various companies to identify characteristics associated with high-risk payments. For businesses looking to identify and stop improper payments, the MIT and KonaAI research offered useful insights. Key attributes that were found to be associated with high-risk payments included payments made without purchase orders, payments flagged by anti-corruption keywords, and payments that significantly deviated from the norm. These attributes were often relevant in the data that humans tagged as high-risk.

One of the key takeaways from the research is the importance of investigating red flags in sales increases. A case study was presented in the episode, highlighting a suspicious sales increase in a Polish province. Contributions to a charitable organization came with increased sales, which raised questions about potential corruption or bribery. This case study emphasizes that compliance officers and risk professionals must monitor commissions, sales incentives, and margins to identify potential bribery and corruption issues.

Companies are encouraged to leverage data analysis tools like KonaAI to identify high-risk payments and prevent corporate corruption. These tools can help track and identify improper payments, providing transparency and easy access to financial accounting data for compliance professionals. By combining financial accounting data with data analysis capabilities, companies can gain insights into payment patterns and detect anomalies that may indicate potential corruption.

However, it is important to note that tradeoffs are involved in balancing different factors when identifying high-risk payments. Compliance officers and risk professionals must carefully consider the impact of their decisions on the business. The podcast episode highlighted the analogy of brakes on a car, emphasizing that the purpose of brakes is not to slow down but to enable the car to go fast and stop when necessary. Similarly, compliance efforts aim to facilitate business growth while ensuring ethical practices and preventing corruption.

The episode also discussed the challenges of identifying high-risk payments and preventing corporate corruption. One challenge is the need for collaboration among companies in an anonymous way to analyze the profiles of improper payments. The research conducted by MIT and KonaAI demonstrated the potential of such collaboration in identifying common risk triggers and profiles of high-risk payments. However, ensuring data privacy and confidentiality is crucial in such collaborative efforts.

In conclusion, identifying high-risk payments and preventing corporate corruption require a comprehensive approach that combines data analysis, collaboration, and a focus on business growth. The MIT and KonaAI research offers useful insights into the characteristics of high-risk payments. Compliance officers and risk professionals are urged to leverage data analysis tools and closely monitor payment patterns to detect and prevent improper payments. By balancing compliance efforts and business objectives, companies can mitigate corruption risks and foster a culture of transparency and integrity.

Examining data is like peering into a crystal ball that projects the inner workings of a business, but only if you know what to look for. One essential facet is sales performance. Even the tiniest irregularities can be a hint of greater issues at hand, such as improper payments. So, understanding and tracking sales data, be it a sudden sales surge in a particular area or an individual outperforming all expectations, is quite crucial.  Walden emphasized the importance of transparency in analyzing sales data. If figures shoot up in a specific region or uncannily exceptional sales are tied to a particular individual, Vince suggests investigating to find out more. The key here, he describes, is the ability to spot these oddities before they morph into a serious problem. Transparency in financial analysis, Vince implores us, can be a game-changer in tracking down and rectifying improper payments.

Third-party relationships can be as much a source of risk as any other part of a business. Keeping tabs on the financial activities of entities such as distributors, commission sales agents, and joint venture partners is therefore imperative. Monitoring these relationships to minimize the risks of improper payments. Walden suggests that the same strategies used to interpret company data for potential risks can also be utilized for third-party relationships. Compliance officers can pair financial analysis with tools like KonaAI to actively monitor anomalies or suspicious transactions. In this scenario, compliance officers can be armed with the right tools and data to monitor and, if required, mitigate any suspicious financial activities related to third-party relationships.

Extending data analysis to third parties is no longer nice; in today’s compliance and fraud-risk environment, it is a business necessity. Monitoring these outside relationships closely provides another layer of security and reduces the breeding ground for unethical activities like improper payments. By integrating financial data with tools like these, compliance officers can actively keep an eye out for anything unusual. This way, companies are not only ensuring that their internal affairs are in order but are also making sure that their external associations are clean and ethical. It’s an insight into how companies can use strategic data analysis to maintain regulatory compliance.

The bottom line is that compliance officers are the guardrails that keep a company on track. Their role is two-pronged – facilitate business growth and, at the same time, deter the business from veering off into unethical practices. Compliance officers ensure the company is always one step ahead in identifying and addressing compliance risks. A balance between growth enablement and ethical conduct is needed to steer the course towards success.

Finally, as compliance officers, you have the power to make a significant impact by preventing improper payments and preserving your organization’s reputation. By embracing the learnings from this podcast episode, you can confidently navigate the challenges of today’s complex business environment and ensure that your efforts contribute to a culture of transparency and ethical behavior. Together, we can create a stronger, more accountable business world.

Resources:

Connect with Vince Walden on LinkedIn

Check out KonaAI

Connect with Tom Fox on LinkedIn

Categories
31 Days to More Effective Compliance Programs

One Month to More Effective Written Standards: Day 6 – Operationalization of your Code of Conduct

How can you work to operationalize your Code of Conduct as articulated in the DOJ 2023 Evaluation of Corporate Compliance Programs (ECCP)? The 2023 ECCP focuses not on whether a company has a paper compliance program but whether a company is actually doing compliance. A company does compliance by moving it into the functional business units as a part of an overall business process. That is what makes a compliance program effective at the business level. There are several different parts of the 2023 ECCP that touch upon your Code of Conduct.
The Code of Conduct design and implementation process enshrine your company’s values. Those are set by senior management and their input and support for any code project, whether initial draft or update, is critical. This gets to the heart of operationalization and demonstrates how a Code of Conduct can work to meet the DOJ requirements. As an early part of your design and drafting process, you should assemble a cross-functional team. This is important for several reasons. First, diversity in your team will help produce a more well-rounded final product. But having such team diversity will also assist in your benchmarking effort, coupled with those who are going to help you out looking at designs and maybe helping forge the design of the code. Finally, you can use a group to help in the drafting, redrafting and editing process. This diversity will help you to answer all of the DOJ questions from the 2019 Guidance in a manner consistent to support operationalization.
All of these requirements point to getting out and making your Code of Conduct a part of the very fabric of your organization. By using some or all of these strategies, you will have a good starting point. But it is more than simply rollout and training. There must be ongoing communications as well.

Three key takeaways:

  1. What has been the role of senior management in the creation or update of your Code of Conduct?
  2. How have you worked with employees outside the compliance function to lay the groundwork for fully operationalizing your Code of Conduct?
  3. How have you measured the effectiveness of your Code of Conduct training?

For more information, check out The Compliance Handbook, 4th edition, here.

Categories
31 Days to More Effective Compliance Programs

One Month to More Effective Written Standards: Day 5 – Training on your Code of Conduct

What about the training on your finalized Code of Conduct? While there have been criticisms of code training, if you consider training as one source of your 360-degrees of compliance communications, the rollout of a new or updated code can be an opportunity. This rollout fits directly into the concept of 360-degrees of compliance communications as rollout is part of both communications and engagement. The delivery of a Code of Conduct is a key element of its effectiveness. By allowing your employees and other stakeholders to engage and interact with the code, through live or interactive training, the effectiveness can be better monitored and measured.
Beginning with the DOJ’s 2017 Evaluation and continuing into the 2023 ECCP, is the DOJ’s emphasis in the effectiveness of training. I think everyone would understand you do need to train but now the government’s talking to us about effective training. Begin with live training that can be held at the corporate headquarters with senior management and executive involvement. Many companies will videotape a message from the CEO to help celebrate the rollout. Then there is the opportunity for localized training that gives employees an opportunity to see, meet, and speak directly with a compliance officer, not an insignificant dynamic in the corporate environment. Such personal training also sends a strong message of commitment to the Code of Conduct. It gives employees the opportunity to interact with the compliance officer by asking questions which are relevant to markets and locations outside the corporate office, which can often provide employees with the opportunity to have confidential in-person discussions.
However, your Code of Conduct training should be an extension of the way you communicate compliance in your organization. If it is divorced from your 360-degrees of compliance communications style, you may well be missing an opportunity to drive better understanding of the code and denigrate the effectiveness of the training. Whatever approach is used, one of the critical factors is the length of time of the training session. Although lawyers and ethics and compliance professionals can (sometimes) sit through a multi-hour Code of Conduct lesson, it is almost impossible to keep the attention of business and operations employees for such a length of time. The presentation and number of PowerPoint slides must be kept to a manageable length before the attendee’s eyes start to glaze over.

 Three key takeaways:

  1. Consider a video message from your CEO to help roll out your Code of Conduct initiation or update.
  2. Tailor your Code of Conduct training to your workforce.
  3. Consider interactive and modular approaches to Code of Conduct training.

For more information, check out The Compliance Handbook, 4th edition, here.