Tag: compliance

Categories
Blog

What Gets Measured AI Will Automate: Compliance Lessons in the Age of AI

“What gets measured gets managed” is a long-standing business adage attributed to management guru Peter Drucker. Today, in the age of artificial intelligence (AI), we can adapt this adage into a new compliance paradigm: “What gets measured gets automated.” Compliance professionals must grasp this shift, anticipate its impacts, and leverage AI strategically to enhance their compliance programs.

Automation is no longer confined to repetitive, mundane tasks. As highlighted by Christian Catalini, Jane Wu, and Kevin Zhang in their recent HBR article, What Gets Measured, AI Will Automate, AI’s capabilities now encompass complex cognitive tasks such as analysis, design, and even creative writing. This transformation is facilitated by powerful models that can rapidly absorb, analyze, and act upon extensive data sets. For compliance professionals, this signifies that areas heavily reliant on data, such as financial analysis, audits, regulatory monitoring, and reporting, are prime candidates for automation.

Understanding AI’s Automation Potential in Compliance

To effectively leverage AI, compliance professionals must first understand the scope of its potential. The article underscores that any task definable by data, a measurable outcome, and sufficient computational power is ripe for AI-driven automation. Compliance activities, such as monitoring transaction data for suspicious activities, continuously tracking regulatory updates, and managing compliance audits, fit neatly into this framework.

Consider transaction monitoring under anti-money laundering (AML) regulations. AI systems, once trained on vast historical transaction data, can instantly identify anomalies far beyond human capability, significantly enhancing detection accuracy and reducing false positives. Similarly, AI tools can autonomously track regulatory changes across jurisdictions, interpret updates, and swiftly integrate them into compliance frameworks, ensuring continuous alignment with legal mandates.

Embracing the Automation Imperative

Catalini, Wu, and Zhang note the increasing trend toward automation, citing statistics from AI firm Anthropic, which indicate that 43% of interactions with AI involve automated tasks rather than human-augmented activities. This trend underscores the need for compliance departments to adopt automation proactively.

Organizations must actively identify and prioritize measurable compliance processes for automation, thereby reallocating human resources to areas that require complex judgment and strategic decision-making. Automation in compliance does not imply reducing the significance of the workforce; instead, it empowers compliance professionals to focus on higher-order tasks that require nuanced understanding and contextual judgment.

Navigating the Human-AI Collaboration

A crucial takeaway from the authors is the delineation between tasks suited for automation and those demanding inherent human judgment, such as ethical decision-making, nuanced risk assessments, and novel compliance strategies. Tasks involving uncertainty or requiring a human touch, like ethical deliberations and whistleblower investigations, remain less suited for full automation.

Incorporating AI, therefore, should not be an all-or-nothing strategy. Compliance professionals must strive for a harmonious partnership between humans and AI, leveraging the strengths of each. For instance, AI can efficiently manage regulatory changes while compliance teams interpret these insights and apply them strategically within their organizational context.

Strategic Implementation of AI in Compliance

The authors advocate for a strategic approach that identifies tasks that AI can readily automate based on three foundational components: data availability, measurable objectives, and computational feasibility. Compliance teams should systematically catalog compliance processes against these criteria to identify opportunities for automation and optimization.

For example, continuous monitoring systems can integrate AI to streamline monitoring and enhance predictive capabilities, proactively flagging emerging compliance risks before they manifest. AI-driven platforms can analyze extensive datasets from past compliance breaches to identify patterns and predict potential future risks, thereby enabling compliance teams to act preemptively.

Leveraging AI for Continuous Improvement

One significant advantage emphasized by the authors is AI’s ability to improve through iterative learning cycles continually. Compliance automation, supported by machine learning algorithms, continuously refines itself, becoming increasingly accurate and responsive. This capability is particularly critical in compliance, where the risk landscape constantly evolves.

By integrating AI-driven continuous improvement into their compliance monitoring systems, companies can achieve significant efficiency gains. For instance, iterative improvements in anomaly detection algorithms reduce false positives over time, enabling more precise resource allocation in compliance investigations.

Confronting Challenges and Risks

Despite AI’s potential, compliance professionals must remain vigilant regarding inherent challenges and risks, such as algorithmic bias, data privacy concerns, and model transparency. Effective governance structures must oversee the implementation of AI, ensuring its ethical deployment is aligned with regulatory expectations and organizational values.

Transparency and explainability of AI-driven compliance decisions will increasingly become regulatory imperatives, underscoring the need for models that clearly articulate their decision-making processes. Compliance professionals must advocate for model interpretability, working closely with data scientists to develop explainable AI solutions that withstand regulatory scrutiny.

Preparing for the Future

The authors emphasize a clear message: in the future landscape of compliance, tasks amenable to measurement and automation will swiftly transition into the AI domain. Compliance leaders must proactively identify these tasks, implementing robust automation strategies while simultaneously focusing human effort on navigating uncertainty, making strategic decisions, and addressing ethical considerations.

Compliance professionals can draw inspiration from innovators like Amar Bose, mentioned by the authors, who succeeded by prioritizing qualitative human experiences over quantitative metrics alone. Similarly, compliance programs must strike a balance between measurable automation efficiencies and qualitative human judgment, thereby fostering resilience and adaptability.

The future of compliance lies not in resisting automation but in embracing it strategically. Compliance professionals equipped to leverage AI’s capabilities proactively will find themselves better positioned to manage evolving risks effectively. By automating measurable tasks, compliance teams can reallocate resources to address complex uncertainties, enhancing their strategic impact and ultimately strengthening organizational integrity.

In the age of AI, compliance professionals who effectively combine automated precision with nuanced human judgment will set new benchmarks in compliance excellence.

Categories
Compliance Into the Weeds

Compliance into the Weeds: The COSO Governance Framework

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Are you seeking insightful perspectives on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss the recently released COSO Corporate Governance Framework.

Tom and Matt take a deep dive into the new COSO Corporate Governance Framework draft. They discuss the importance of public comment on the draft, which is open until July 11, and explore the framework’s six key components. The framework aims to provide discipline in achieving good governance within organizations, covering areas such as strategy, culture, human resources, and resilience. Kelly highlights the significance of culture in compliance and the role of information quality in the future, providing practical tips on implementing and testing the framework. The episode highlights the importance of this framework for various stakeholders, encouraging practitioners to review and provide feedback on the draft.

Key highlights:

  • Overview of COSO’s Draft Corporate Governance Framework
  • The Six Objectives of the Framework
  • Importance of Culture in Compliance
  • Principles and Points of Focus
  • Resilience in Corporate Governance

Resources:

Matt Kelly in Radical Compliance

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

A multi-award-winning podcast, Compliance into the Weeds, was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast.

Categories
Blog

Is FCPA Enforcement Back? Part 2 – What Compliance Professionals Should Do

After months of speculation and a noticeable lull in FCPA enforcement, the U.S. Department of Justice (DOJ) has made a significant announcement with a new policy statement. In a recently released memorandum titled Guidelines for Investigations and Enforcement of the FCPA (FCPA Memo), Deputy Attorney General (DAG) Todd Blanche has sent a clear message that FCPA enforcement is still alive under the Trump Administration. However, it will now focus on new areas, including cartel disruption, national security, US business development, and leveling the global playing field for U.S. companies.

This two-part blog post series delves deeply into the FCPA Memo. Yesterday, in Part 1, we examined the key compliance takeaways from this significant policy shift. Today, in Part 2, we provide practical insights into how you, the compliance professional, should respond.

1. Reassess your FCPA risk profile—especially in high-risk geographies and industries now under the national security spotlight.

Following the FCPA Memo, compliance professionals must reassess their FCPA risk profiles, particularly in high-risk geographies and industries that are increasingly scrutinized due to national security concerns. The FCPA Memo signaled that corruption-related activities, especially those intertwined with national security interests, are receiving enhanced scrutiny. This includes critical infrastructure sectors, technology industries, energy companies, pharmaceutical enterprises, and defense contractors. It also applies particularly to businesses operating in emerging or high-corruption-risk markets such as Brazil, China, India, Mexico, and Russia, among others.

Companies should move to update their geographic and sector-specific risk assessments. A robust reassessment involves reviewing recent enforcement actions, analyzing geopolitical developments, and carefully monitoring regulatory guidance that identifies new enforcement priorities. It means conducting thorough due diligence on third-party intermediaries, scrutinizing joint venture partnerships, and proactively understanding local business practices that could expose the organization to corruption risks.

Furthermore, compliance leaders should engage senior executives and board members in understanding how heightened national security risks intersect with anti-corruption compliance. This awareness ensures leadership commitment and alignment, enabling resources to be strategically allocated to address emerging risks comprehensively. The current enforcement climate mandates increased vigilance around political contributions, lobbying activities, dealings with foreign government-owned entities, and managing interactions with politically exposed persons (PEPs).

Finally, integrate scenario planning and predictive analytics into your risk assessment procedures to proactively anticipate potential compliance vulnerabilities. By considering worst-case scenarios and conducting regular tabletop exercises, compliance teams can identify possible gaps and vulnerabilities before enforcement authorities do. This forward-looking approach ensures that your FCPA compliance framework remains agile, responsive, and attuned to the evolving global enforcement landscape, providing a robust defense should regulators or investigators come calling.

2. Stress-test your investigation protocols to ensure you can respond quickly and comprehensively when issues arise. Speed now matters more than ever.

The DOJ’s recent pronouncements underscore a critical message for compliance professionals: investigative agility is now paramount. Authorities are increasingly emphasizing the need for rapid and comprehensive responses to allegations or evidence of misconduct. Companies struggle to quickly mobilize internal investigations in response to heightened scrutiny, potential penalties, and reputational damage. Therefore, it is essential to regularly stress-test your internal investigative protocols, ensuring readiness to launch effective and thorough inquiries when allegations surface swiftly.

Begin by evaluating your investigative playbook, checking for clearly defined roles, immediate escalation procedures, and robust communication plans. Conduct scenario-based drills involving different departments—legal, compliance, audit, HR, and senior management—to gauge response times and coordination effectiveness. These exercises help reveal procedural gaps, unclear accountabilities, or bottlenecks that slow down your response capabilities.

Critically test your protocols’ effectiveness in preserving and collecting evidence, managing chain-of-custody requirements, and handling electronically stored information (ESI). Time is your enemy when evidence could be lost, altered, or destroyed. Ensure your team has immediate access to necessary forensic and technical resources, enabling rapid and precise data extraction and preservation. Likewise, train your squad extensively on conducting compelling witness interviews, crafting proper documentation, and swiftly reporting initial findings to internal stakeholders and, if necessary, external regulators.

Additionally, proactively assess your external support networks, including law firms, forensic accountants, and crisis management specialists, and pre-negotiate engagement terms to ensure a seamless process. Having your external investigative partners pre-vetted and standing by will significantly expedite your investigative response. Prompt internal investigations demonstrate organizational integrity, cooperation, and seriousness to regulators, significantly influencing potential penalties or remedial expectations.

Ultimately, speed and thoroughness in investigations are essential not only to meet DOJ expectations but also to mitigate reputational risks, reduce financial exposure, and maintain internal employee confidence in the integrity of the compliance program. Comprehensive and efficient investigations demonstrate proactive, ethical leadership, reassure stakeholders, and position your organization as credible and transparent under regulatory scrutiny.

3. Refocus your compliance program on detecting and preventing serious misconduct, not just paperwork violations. The DOJ isn’t interested in minor slips—it wants meaningful enforcement with real-world impact.

Historically, compliance programs have sometimes overly emphasized procedural compliance, focusing on checking boxes, ensuring policies are signed, and conducting routine training without verifying the actual behavioral impact. However, recent enforcement trends and DOJ guidance unequivocally indicate a shift toward substantive compliance outcomes over procedural adherence. Authorities are explicitly uninterested in minor technical infractions; their priority is detecting meaningful misconduct, preventing real-world harm, and demonstrating a genuine organizational commitment to integrity.

Therefore, compliance leaders must pivot their approach to prioritize detecting and deterring serious wrongdoing, including bribery, fraud, financial misstatements, money laundering, and other forms of criminal conduct. This involves investing in sophisticated monitoring technologies, predictive analytics, and behavioral data analysis to proactively identify anomalies or indicators of serious misconduct. Traditional periodic audits and passive whistleblower hotlines alone are no longer sufficient; compliance programs must evolve into proactive, data-driven risk detection systems capable of identifying misconduct early and intervening decisively.

Tailor your compliance training to address real-world scenarios relevant to your employees’ actual work environments. Interactive, scenario-based training that actively engages employees in solving compliance dilemmas provides deeper learning, reinforces ethical behaviors, and fosters an organizational culture that is sensitive to misconduct red flags. Employees who understand the practical implications of ethical failures are better equipped to identify and escalate serious issues early, providing compliance teams a critical window for intervention.

Moreover, refine compliance incentives and disciplinary systems to reward genuine integrity and ethical behavior rather than mere policy adherence. Incorporate ethics and compliance objectives into performance reviews, leadership promotions, and recognition programs. Conversely, demonstrate a firm stance against serious misconduct through consistent and publicized enforcement actions. Employees must recognize that the organization’s ethical stance is authentic, actionable, and carries consequences.

By refocusing compliance programs on substantive misconduct, organizations send a clear and powerful message to employees, stakeholders, and regulators alike: compliance is not an administrative exercise but a fundamental component of the business’s integrity, sustainability, and long-term success. Such a program meets DOJ expectations for effective compliance, mitigates regulatory exposure, and safeguards the organization’s reputation, credibility, and value.

This FCPA memo was not simply a policy update. It was a strategic reset. And for the compliance community, it’s a call to action.

The bottom line is that the FCPA is here to stay. It may be entering one of its most aggressive and geopolitically consequential phases yet. For compliance professionals, that means redoubling your efforts, not out of fear, but with clarity, purpose, and a seat at the strategic table. As always, effective compliance is not—and never has been—about checklists. Instead, it is about protecting your business and enabling it to compete ethically, globally, and with confidence.

And even if this administration does not follow its own FCPA memo and brings no enforcement actions, the FCPA will still be the law under the next administration.

Categories
SBR - Authors' Podcast

SBR-Author’s Podcast: Upping Your (Compliance) Game

Welcome to the SBR-Authors Podcast! In this podcast series, host Tom Fox visits with authors in the compliance arena and beyond. Today, the tables are turned as Caitlyn Tobey and Ellen Hunt from The Seven Elements Compliance Book Club host Tom to talk about his most recent book, Upping Your Game.

They explore how AI and machine learning can transform compliance operations, turning them into strategic business functions. He discusses the operationalization of compliance, the importance of integrating ethics into business practices, and the role of AI in enhancing the effectiveness of compliance. Notable examples, such as Wells Fargo’s use of AI in compliance and the concept of compliance by design, demonstrate how technology can facilitate more efficient business processes and foster a proactive compliance culture.

Key highlights:

  • Reframing Compliance in the Trump Era
  • The Role of AI in Compliance
  • Ethics and Compliance: A Strategic Partnership
  • Challenges and Risks of AI in Compliance
  • AI Chatbots in Compliance

Resources:

Upping Your Game on Amazon.com

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Compliance Tip of the Day

Compliance Tip of the Day – New FCPA Enforcement Memo – What Does it Mean?

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we conclude a 2-part look at the recently released FCPA Enforcement Memo. Today, in Part 2, we consider what it means for a compliance professional.

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
Blog

Is FCPA Enforcement Back? Part 1 – What Compliance Professionals Need to Know

After months of speculation and a noticeable lull in FCPA enforcement, the U.S. Department of Justice (DOJ) has made a significant announcement with a new policy statement. In a recently released memorandum titled “Guidelines for Investigations and Enforcement of the FCPA” (FCPA Memo), the Deputy Attorney General (DAG), Todd Blanche, has sent a clear message that FCPA enforcement remains alive under the Trump Administration. However, it will now focus on new areas, including cartel disruption, national security, US business development, and leveling the global playing field for U.S. companies.

This two-part blog post series breaks down, in Part 1, the key compliance takeaways from this important policy pivot, and in Part 2, offers practical insights on how you, the compliance professional, should respond.

1. Cartels, Corruption, and Competitive Disadvantage: The New Enforcement Trifecta

The Trump Administration has refocused DOJ enforcement on cartels and transnational criminal organizations. This FCPA memo formalizes that commitment by tying cartel activity directly to FCPA enforcement. If a foreign company bribes officials in a jurisdiction where cartels thrive, think Mexico or Colombia, this administration sees a compelling hook for the DOJ to act. It is not just about corruption in isolation; it is about rooting out the business practices that enable criminal ecosystems.

More provocatively, the FCPA Memo explicitly prioritizes cases where corruption places U.S. companies at a competitive disadvantage in the business world. That is undoubtedly a reframing of the FCPA’s historical mission. Historically, the US and other uneducated critics have claimed that the FCPA penalizes US companies more harshly than their foreign counterparts. That has never been true, as even in 2025, more than half of the top ten largest FCPA enforcement actions of all time have been against foreign-based companies. However, the DOJ’s message now is that if your foreign competitor is winning contracts by bribing officials, the US government may well be interested in investigating them, not just because it is illegal, but also because it harms American businesses.

Compliance Takeaway: If your company is aware of unfair practices by foreign competitors, this may be the ideal time to take action. The door is open for whistleblower complaints even against non-U.S. entities, primarily where jurisdictional hooks exist. Expect more aggressive cross-border enforcement. Consider strengthening your third-party due diligence in regions where cartels or known corruption are prevalent.

2. Expedited Investigations: A Welcome Burden or a New Headache?

The FCPA Memo calls on prosecutors to “proceed as expeditiously as possible” in investigating and resolving FCPA cases. On its face, this sounds like good news—long, open-ended probes can paralyze business operations and drain resources. But what does this mean? More pressure on prosecutors? More pressure on internal investigations? More pressure on internal reporting and triage? More pressure on getting it right? (Hint: It’s all of the above.)

FCPA investigations are complex. They require cross-border data collection, permissions from foreign authorities, and interviews with key personnel who often have full business calendars. Now, there is added pressure to accelerate timelines, which may involve compressing review cycles, reducing interview preparation time, and making quicker judgment calls.

Compliance Takeaway: Compliance teams should rehearse their internal investigation protocols. Do you have the right tech stack for document review? Can you mobilize your legal team quickly? Is your board informed about high-risk regions and prepared to respond quickly? If not, now’s the time to prepare.

3. Collateral Consequences and Business Disruption: A Balancing Act

The memo notably instructs prosecutors to consider “collateral consequences,” the potential disruption to lawful business operations, and the impact on innocent employees. This language expands the typical resolution-phase considerations into the investigative phase itself.

This could play out in several ways. Investigations may be more narrowly scoped, targeting business units directly implicated in misconduct rather than company-wide fishing expeditions. It may also lead to greater leniency in imposing fines or monitorships where such measures would significantly impair innocent stakeholders. It certainly provides defense counsel with more arguments to present to the DOJ to limit or narrow the scope of any investigations.

Compliance Takeaway: If your organization finds itself under DOJ scrutiny, be prepared to advocate for the operational integrity of your business early and often. Document how cooperation, remediation, and disruption mitigation are being handled throughout the investigation. Use this framework as a proactive tool in early dialogue with prosecutors.

4. National Security Interests Continue to Take Center Stage

Building on the Biden Administration’s policy on Anti-Corruption, the Trump Administration has woven national security into FCPA enforcement priorities, highlighting sectors such as defense, software, artificial intelligence, critical minerals, and deepwater infrastructure. This means more cases involving cobalt mining, chip manufacturing, satellite communications, and cyber tools will fall within the DOJ’s line of sight. In essence, the DOJ is saying, “If your business, or your competitor’s business, touches sensitive sectors with national implications, we care.”

Compliance Takeaway: Compliance professionals in industries even tangentially connected to national security should conduct fresh risk assessments. Are you sourcing from high-risk jurisdictions? Using agents in resource-rich areas? Working with state-owned entities abroad? If so, those red flags now carry more weight.

5. Corporate Structures vs. Individual Misconduct: Back to Basics

One curious phrase in the memo warns against attributing “non-specific malfeasance to corporate structures.” At first glance, it’s a head-scratcher. However, upon closer inspection, it reinforces a longstanding principle: corporations are liable when individuals commit crimes, not due to vague failures in internal controls. This is essentially a reaffirmation of the longstanding DOJ position that it will not prosecute internal control violations absent extraordinary circumstances. (This has been left to the SEC.) This prosecutorial philosophy has defined the DOJ’s FCPA enforcement over the last decade. It is not enough for the DOJ to find a company that had weak controls; you need to show that someone crossed the line.

Compliance Takeaway: This is good news for companies with mature compliance programs. But it also raises the stakes for effective training, monitoring, and investigations. Your internal audit function must be able to identify and document actual misconduct, not just control failures. The DOJ stated that it will focus on crimes rather than paperwork errors.

6. The Focus on Serious Misconduct: Clearing the Docket

The DOJ has also clarified that it will deprioritize routine or “de minimis” FCPA violations, such as small gifts, modest travel perks, or isolated hospitality expenses. These will no longer be the centerpiece of enforcement actions unless they are accompanied by more serious wrongdoing. Although prominently stated in the FCPA Memo, the prosecutorial reality is once again that such violations have never been part of DOJ FCPA enforcement actions.

That does not mean your corporate compliance program should collectively fail to meet expectations. Excessive gifts or travel can still be part of the fact pattern in larger bribery schemes and may be cited in SEC books-and-records charges, even if the DOJ declines to pursue criminal prosecution.

Compliance Takeaway: Your policies on gifts, travel, and entertainment remain relevant, but you should right-size your compliance efforts. Focus your highest controls and resources on areas where real business decisions are being made, such as third-party relationships, government tenders, and public-private partnerships.

7. Foreign Prosecutions and Global Coordination: Sharing the Stage

The memo closes with an acknowledgment that foreign enforcement matters. Prosecutors are instructed to weigh whether other jurisdictions may prosecute before launching their actions. This appears to affirm the DOJ’s commitment to international collaboration rather than signaling retreat. Expect more joint settlements, coordinated raids, and synchronized prosecutions. But do not count on the DOJ stepping aside, especially in high-stakes cases.

Compliance Takeaway: If your company is under investigation abroad, don’t assume you’re out of the DOJ’s reach. Transparency and cooperation with global authorities will still be key. And make sure your disclosures in one country don’t conflict with your representations in another.

Join us tomorrow for Part 2, where we consider some responses you should take now.

Categories
Blog

Investigative Lessons from Sherlock Holmes: The Sign of Four

Corporate compliance and Sherlock Holmes may seem worlds apart, but compliance professionals and Sir Arthur Conan Doyle’s legendary detective share a core responsibility: uncovering truths hidden behind complex webs of evidence. “The Sign of Four,” one of Doyle’s most gripping Sherlock Holmes tales, offers powerful investigative insights directly applicable to the realm of compliance. Here are five key lessons compliance professionals can draw from Holmes’s investigative methods in this classic novel.

1. Precise Documentation: “Methodical Observation”

In The Sign of Four, Sherlock Holmes emphasizes the importance of methodical and precise documentation as crucial to solving complex mysteries. Early in the narrative, Holmes carefully examines a mysterious note received by Miss Mary Morstan. His meticulous observation of handwriting, paper quality, and ink composition enables him to deduce the note’s origin and purpose, thereby setting the course of the investigation.

Compliance professionals should emulate Holmes by rigorously documenting every aspect of an investigation to ensure thoroughness and accuracy. Precise records of evidence, witness statements, and procedures ensure accuracy, accountability, and transparency, significantly reducing risks of oversight or misinterpretation. Proper documentation also strengthens the organization’s ability to respond effectively during audits or regulatory inquiries.

2. Logical Analysis: “Eliminating the Impossible”

Holmes famously asserts in The Sign of Four, “When you have eliminated the impossible, whatever remains, however improbable, must be the truth.” This principle guides his pursuit of justice throughout the novel. Holmes methodically rules out improbable scenarios in investigating the disappearance of Captain Morstan and the subsequent quest for hidden treasure, ultimately unveiling Jonathan Small’s elaborate revenge-driven plot.

Compliance officers should similarly use structured analytical frameworks to eliminate false assumptions and unsubstantiated theories during investigations. Adopting logical, disciplined analysis reduces biases, prevents costly mistakes, and fosters more accurate and actionable outcomes. Holmes’s deductive approach encourages compliance professionals to remain vigilant against assumptions that may cloud judgment.

3. Embrace Collaboration: “Leveraging Complementary Strengths”

In The Sign of Four, Sherlock Holmes frequently relies on Dr. Watson’s support and complementary skills. Watson’s medical knowledge and practical insights greatly assisted Holmes during the investigation, notably during examinations of crime scenes and understanding the emotional motivations of suspects and victims.

For compliance professionals, this illustrates the importance of multidisciplinary collaboration. Effective compliance investigations often require collaboration with professionals from diverse specialties, including auditors, forensic accountants, legal advisors, human resources specialists, and IT experts. Embracing a collaborative approach ensures a comprehensive investigation, as each discipline brings unique insights that enhance the overall effectiveness and credibility of the compliance function.

4. Attention to Subtle Indicators: “Noticing Small Clues”

Holmes’s brilliance often lies in noticing seemingly insignificant details overlooked by others. In The Sign of Four, Holmes carefully notes tiny footprints, peculiar scents, and minor discrepancies in testimonies, each subtly directing the investigation toward its resolution. For instance, Holmes’s keen attention to Toby, the trained bloodhound, and his reaction to specific scents help locate key evidence pivotal to unraveling the mystery.

Compliance professionals must likewise sharpen their observational skills to detect subtle indicators of wrongdoing, such as minor financial discrepancies, slight variations in employee behaviors, or seemingly inconsequential procedural anomalies. Often, the most significant compliance breaches initially manifest as minor irregularities. Developing Holmes-like attentiveness can significantly enhance the detection and early resolution of compliance issues.

5. Managing Bias and Assumptions: “Maintaining Objective Judgment”

Throughout, Holmes maintains rigorous objectivity, avoiding emotional biases or ungrounded assumptions. Even when emotionally involved characters, including Watson and Miss Mary Morstan, draw emotional or intuitive conclusions, Holmes insists on relying exclusively on factual evidence and logic. His disciplined approach ensures accuracy and fairness in the investigation’s outcome.

Compliance officers frequently confront emotionally charged scenarios or influential stakeholders, which can pressure outcomes. Maintaining an objective and unbiased judgment is crucial to upholding fairness and integrity during compliance investigations. Holmes’s unwavering dedication to evidence-based analysis exemplifies the importance of unbiased fact-finding in safeguarding organizational ethics and compliance integrity.

Final Thoughts: Integrating Sherlock Holmes’s Methods into Compliance

The Sign of Four offers rich investigative wisdom that is directly applicable to corporate compliance. Sherlock Holmes’s meticulous documentation, disciplined logical reasoning, strategic collaboration, precise attention to detail, and uncompromising objectivity represent invaluable investigative methodologies for today’s compliance professionals.

As compliance continues evolving in complexity and significance, adopting Holmesian investigative rigor enhances our ability to protect organizational integrity, mitigate risks, and ensure regulatory compliance. Compliance professionals who master these investigative practices not only improve their effectiveness but also significantly contribute to their organization’s overall resilience and ethical standing.

In the dynamic landscape of corporate compliance, Sherlock Holmes’s timeless investigative lessons remain as relevant today as in Victorian London, reminding us that excellence in investigation demands continual refinement, unwavering diligence, and precise analytical clarity.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – New FCPA Enforcement Memo-What Does it Say?

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with concise, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

 

Today, we begin a two-part look at the recently released FCPA Enforcement Memo. Today, in Part 1, we consider what it says. 

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available ⁠here⁠. 

Categories
Compliance Tip of the Day

Compliance Tip of the Day – COSO Framework

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

What is the COSO 2013 Internal Controls Framework?

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
FCPA Compliance Report

#Risk New York Speaker Series – Exploring AI Risks in Compliance with Gwen Hassan

Join Tom Fox and hundreds of other GRC professionals in the city that never sleeps, New York City, on July 9 & 10 for one of the top conferences around, #Risk New York. The current US landscape, shaped by evolving policies, rapid advancements in AI, and shifting global dynamics, demands adaptive strategies and cross-functional collaboration.

At #RISK New York, you will master the New Regulatory Reality by getting ahead of US regulatory shifts and their impact. Conquer AI and Tech Risk by Safeguarding Your Organization in an AI-Driven World and Understanding the Implications of Major Tech Investments. Navigate Financial and Crypto Volatility by Protecting Your Assets and Exploring Solutions in a Dynamic Market. Strengthen Your GRC Framework by Leveraging Governance, Risk, and Compliance for Strategic Advantage. Protect Digital Trust by addressing challenges in cybersecurity and data privacy, and combating misinformation. All while meeting with the country’s top #Risk management professionals.

In this episode, Tom Fox talks with Gwen Hassan, the Chief Compliance Officer for Unisys Corporation, about her role and the upcoming #RiskNYC conference. Gwen shares insights into Unisys’ operations, including the various technologies and services they provide, and highlights her responsibilities in managing global ethics, compliance, and trade compliance risks. She also gives a teaser about her panel presentation on the compliance and ethics risks associated with artificial intelligence, stressing the importance of understanding AI’s impact on company culture and regulatory compliance. Gwen expresses her excitement about the conference, emphasizing the value of engaging with fellow risk management experts.

Resources:

#Risk Conference Series

#RiskNYC—Tickets and Information

Gwen Hassan on LinkedIn