Categories
Innovation in Compliance

Innovation in Compliance: Integrating AI in Compliance and Risk Management with Jana Brost

Innovation is present in many areas, and compliance professionals must not only be prepared for it but also actively embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox visits with Jana Brost, COO at myCOI, the sponsor of this podcast.

They chat about the intersection of compliance, risk management, and AI. Jana discusses her background in high-growth business process outsourcing and data analysis, as well as her journey to joining my company. She explains the concept of Certificates of Insurance (COIs) and their importance in managing risk for companies. The conversation examines how myCOI empowers vendors and owners to manage their insurance requirements more efficiently through the use of AI, highlighting key industry trends and the impact of AI on speed, accuracy, and user experience. Jana also discusses the future of AI in risk management and its potential to enhance employee engagement and foster a positive company culture.

Key highlights:

  • Understanding COIs in Construction
  • Risk Management and Insurance
  • Evolution of COI Management with AI
  • AI’s Impact on Vendors and Owners
  • Customer Expectations and AI
  • Future of AI and Company Culture

Resources:

Jana Brost on LinkedIn

myCOI

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Innovation in Compliance was recently honored as the number 4 podcast in Risk Management by 1,000,000 Podcasts.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Risk Assessments and Internal Controls

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

How to use a risk assessment to provide a structured approach to establishing effective internal controls.

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
Blog

The Roots of Compliance: Trust, Technology, and the Future of Banking

Recently, I had the opportunity to visit with John Byrne, the CEO at Corlytics. You can listen to the podcast here. One of the more interesting topics we discussed is that compliance professionals find themselves at the intriguing crossroads between groundbreaking technological innovation and the timeless, foundational principles of compliance, notably trust and integrity. Nowhere is this more evident than in the banking sector, where the stakes around trust are extraordinarily high. Now, with the Trump Administration actively promoting cryptocurrency to both the US banking industry and the American public, that foundational principle is even more critical.

Historically, banking, with over two and a half centuries of operational legacy, has always relied fundamentally on customer trust. Indeed, long before modern regulatory structures emerged, banks implemented internal policies and compliance-like practices designed explicitly to instill and maintain confidence. Yet despite advancements in regulation and technology, the principle remains unchanged: trust is the lifeblood of banking, and when it falters, the consequences can be catastrophic.

Nothing illustrates this more starkly than the old-fashioned bank run, perhaps the ultimate demonstration of breached trust. In a bank run, customers simultaneously lose faith in the institution’s ability to safeguard their assets, rushing en masse to withdraw funds. This panic-driven action rapidly transforms initial doubt into widespread fear, creating an accelerating cascade effect that can swiftly collapse even seemingly robust institutions.

The recent 2023 examples of Silicon Valley Bank, Signature Bank, and First Republic Bank, all headquartered in California, underscore this timeless truth. Despite occurring in a digitally connected world with instantaneous communication, the root cause was identical to that of traditional bank runs, famously depicted in classic movies like Mary Poppins and It’s a Wonderful Life: a fundamental failure of trust. For today’s compliance professionals, the lesson remains clear and resonant. Even as they harness modern tools like artificial intelligence to enhance compliance processes, they must remain ever-vigilant custodians of trust, recognizing that without it, all technological advances and regulatory structures are ultimately insufficient to protect a bank, and indeed any business, from the devastating impact of lost confidence.

Lesson 1: Trust is the Foundation of Compliance

The essence of compliance has always been rooted in trust. Banking, as a sector with over 250 years of history, exemplifies this principle vividly. Long before the regulatory frameworks we recognize today, banks operated with internal policies designed to cultivate and maintain trust with their customers. Compliance, in its earliest incarnation, was about establishing clear standards and rules internally, ensuring customer confidence and institutional stability.

Today, despite the extensive web of external regulations, trust remains a central concern. The collapse of trust can trigger catastrophic outcomes, vividly illustrated by historical bank runs such as those portrayed in classic films like Mary Poppins and It’s a Wonderful Life. Even as recently as 2023, the failure of Silicon Valley Bank in California, a modern-day bank run accelerated by technology, reminds us starkly how fragile trust can be and how critical it remains for compliance professionals to safeguard it diligently.

Lesson 2: Compliance is Good Business

The notion of compliance as a hindrance to business, often unfairly labeled as the “business prevention unit,” is shifting dramatically. A sound compliance program aligns closely with strong business outcomes —a principle that has been repeatedly emphasized in recent years. Banks and businesses are increasingly recognizing compliance not as an obstacle but as an integral part of strategic business operations.

Good compliance facilitates a trustworthy reputation, ensures customer satisfaction, and establishes long-term business stability. Firms that embody compliance as a core business strategy consistently demonstrate resilience and sustainability. Compliance isn’t merely a regulatory necessity; it is fundamentally good business.

Lesson 3: Regulation Should Complement, Not Replace, Internal Standards

Historically, banks created their internal compliance measures to protect their institutions long before external regulation mandated such frameworks. Over time, regulatory developments have supplemented and formalized these practices, creating a structured external governance model. However, prudent banks continue to adhere to high internal standards irrespective of regulatory mandates.

Effective compliance frameworks seamlessly integrate internal ethical guidelines and external regulatory requirements, ensuring a unified approach to governance. Organizations shouldn’t solely rely on external regulations to dictate their ethical and operational standards. Instead, compliance professionals should encourage internal benchmarks of ethical behavior and trustworthiness, aligning company culture closely with compliance objectives to achieve sustainable business excellence.

Lesson 4: Technology as an Enabler of Efficient Compliance

One common complaint about compliance is its perceived inefficiency, which businesses argue slows down operations. Here, advanced technology, especially AI, presents transformative possibilities. AI-driven tools can significantly streamline compliance processes, enhancing speed, efficiency, and accuracy.

AI technologies allow compliance teams to swiftly identify risks, maintain comprehensive documentation, provide clear audit trails, and escalate issues rapidly and accurately. Rather than viewing technology as complicating compliance, companies should embrace it as an essential tool enabling compliance professionals to focus on strategic, high-value tasks rather than routine manual processes. This technological enablement does not replace skilled compliance professionals. It enhances their capabilities, ensuring more effective outcomes for the business as a whole.

Lesson 5: Compliance Should Be Proactive, Not Reactive

Compliance practices should always be forward-looking and proactive, anticipating potential issues and acting accordingly. Banks and businesses that are successful in managing risk and maintaining trust have learned not to wait for regulators to dictate ethical standards. They proactively implement robust compliance and governance frameworks because they recognize that doing the right thing is inherently good for business.

Proactive compliance fosters customer trust, internal coherence, and institutional resilience. It positions companies to avoid reputational and financial harm, reducing the likelihood of regulatory actions or scandals. Compliance professionals must champion a proactive approach, integrating ethics and integrity at every organizational level, ensuring firms remain compliant and trustworthy, irrespective of whether regulatory bodies explicitly require it.

Conclusion: A Sustainable Business Model Through Good Compliance

The future of compliance in banking, and indeed all industries, rests at the intersection of timeless principles and modern technology. Trust, always the cornerstone of compliance, remains a foundational element. Technology, particularly artificial intelligence (AI), offers powerful new tools to reinforce and streamline compliance functions, enabling more efficient, accurate, and effective oversight.

Compliance professionals stand at the threshold of an exciting era where they can leverage advanced technologies to reinforce and extend the timeless principle of trust. By returning to the roots of compliance, embedding trust deeply into corporate culture, and embracing technology as a powerful enabler, businesses will not only fulfill regulatory requirements but also establish a resilient, customer-centric, and sustainably profitable business model. Compliance, done right, transcends its role as merely regulatory adherence. It becomes a fundamental pillar of sound business practice.

Categories
Adventures in Compliance

Adventures in Compliance: The Novels – The Sign of Four, Introduction and Compliance Lessons Learned

In this new season of Adventures in Compliance, host Tom Fox takes a deep dive into the Sherlock Holmes novels. Throughout this season, Tom will explore each novel in a four-part series. The four novels we will consider from the ethics and compliance perspective are A Study in Scarlet, The Sign of Four, The Hound of the Baskervilles, and The Valley of Fear. 

For our second offering this season, we begin with The Sign of Four. In this Part 1 of our four-part exploration, we dive into the synopsis of the story and extract five key compliance lessons: (1) Methodical investigation and attention to detail, (2) The importance of clear and open communication, (3) Understanding human behavior, (4) Vigilance against complacency, and (5) Integrity and ethical fortitude. These lessons underline the timeless relevance of Sherlock Holmes’ methods for modern compliance professionals. Tune in for an engaging blend of classic literature and practical compliance insights. 

Highlights include:

  • Deep Dive into ‘The Sign of Four’
  • Key Compliance Lessons from ‘The Sign of Four’
  • Methodical Investigation and Attention to Detail
  • Clear and Open Communication
  • Understanding Human Behavior
  • Vigilance Against Complacency
  • Integrity and Ethical Fortitude

Resources:

The New Annotated Sherlock Holmes

Sherlock Holmes FAQ by Dave Thompson

Connect with Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
FCPA Compliance Report

FCPA Compliance Report – The Role of Culture and Data in Fraud Risk Management: A Conversation with Vincent Walden

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast in compliance. This is a very special episode. Today, Tom Fox cross-posts an episode from the BCG Podcast. In it, host Hanjo Siebert visits with konaAI CEO Vince Walden. They discuss the critical role of data and culture in achieving effective compliance, exploring the importance of interdepartmental collaboration, the evolving compliance landscape, and real-world examples of fraud detection. Walden emphasizes that while strategy is important, a strong organizational culture is essential for successful execution. He explains how data serves as a transparency agent and outlines the need for a collective approach to managing fraud risk. Listen in to gain insights into the challenges and best practices in modern compliance.

Key highlights:

  • The Importance of Transaction Monitoring
  • Challenges in Fraud Risk Management
  • Collaborative Approaches to Compliance
  • konaAI Role in Modern Compliance
  • Real-World Fraud Cases and Lessons Learned
  • The Impact of Business Culture on Fraud Prevention
  • Fostering a Culture of Transparency

Resources:

Vince Walden on LinkedIn

konaAI

Original Podcast Recording

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on the use of AI in Compliance programs, see my new book, Upping Your Game. You can purchase a copy of the book on Amazon.com.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Assessing Internal Controls in International Operations

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

How should you assess your internal controls in your international operations?

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
Blog

The Future of Compliance: From Risk Management to Strategic Business Partner

Recently, I had the opportunity to visit with John Byrne, the CEO at Corlytics. You can listen to the podcast here. One of the areas we discussed is that the compliance landscape is experiencing a fundamental shift, moving compliance professionals from traditional gatekeeping roles to strategic leadership positions within their organizations. Historically viewed as mere regulatory enforcers, compliance teams are increasingly recognized as essential partners in managing strategic risks. Recent global disruptions, such as unexpected tariffs and political upheavals that impact anti-corruption enforcement, as well as unprecedented events like the COVID-19 pandemic, underscore the inadequacies of traditional, static compliance frameworks.

These events emphasize a crucial truth: compliance must become agile, proactive, and deeply integrated into core business strategies to effectively anticipate and respond to rapidly evolving risks. The compliance function of tomorrow is not simply reactive; it actively shapes organizational resilience and strategic decision-making. By harnessing advanced technologies like artificial intelligence, compliance professionals can significantly enhance their capacity to identify and manage emerging risks rapidly.

In this transformed role, compliance becomes not just a defensive measure but a strategic asset positioned to enable innovation, accelerate growth, and protect organizational integrity. Embracing this vision is essential if compliance teams are to fully realize their potential as indispensable strategic leaders, securing their organizations against unforeseen challenges and positioning them for sustained success.

Lesson 1: Recognizing Compliance as Strategic Risk Management

Compliance is evolving from a purely regulatory-driven necessity into a dynamic strategic asset. At its core, compliance is a risk management process that involves identifying, assessing, managing, and mitigating risks to ensure organizational stability and effectiveness. Traditionally, this process has been laborious, reactive, and often separated from core business functions. Now, aided by technology such as artificial intelligence (AI), compliance professionals can leverage dynamic traceability and advanced analytics to accelerate risk identification and assessment dramatically.

In this rapidly evolving environment, compliance must take an active leadership role. Rather than passively reacting to regulatory requirements, compliance professionals need to proactively anticipate and manage emerging threats, positioning themselves as forward-thinking strategic advisors who protect and enable business growth.

Lesson 2: No More Black Swans—Every Risk Must Be Anticipated

Historically, compliance teams spent significant resources preparing for rare, highly impactful “black swan” events. However, recent history teaches that events previously considered extraordinary, such as pandemics, economic disruptions, or sudden political shifts, are becoming increasingly commonplace. There are no actual black swan events anymore; instead, there are just unexpected events.

Compliance professionals must recalibrate their mindset and methods, accordingly building agile systems capable of rapid adaptation. Compliance frameworks must be resilient, flexible, and proactive enough to manage uncertainties and unexpected scenarios effectively, even those we have not imagined yet. Rather than planning for specific black swans, compliance teams need adaptive frameworks and advanced scenario-planning capabilities to navigate an uncertain future.

Lesson 3: Embedding Compliance Directly into Core Business Operations

One of the most promising evolutions in compliance is its integration directly into the heart of business operations. Traditionally, compliance and operational functions operated in isolation, often misunderstanding or miscommunicating with one another. Compliance would issue requirements, leaving operational teams struggling to interpret and effectively implement directives.

Future-oriented compliance departments must break down these walls. The ideal structure aligns compliance closely with operational teams, creating shared understanding and cooperation. For instance, onboarding a large corporate client at a tier-one bank typically takes 40 days. Embedding compliance directly into the onboarding process and leveraging real-time compliance monitoring and collaboration could dramatically shorten this timeframe, delivering tangible value to customers and the firm.

Lesson 4: Creating a Learning Compliance Organization

A strategic compliance function doesn’t merely enforce rules; it continuously learns and adapts. It asks key questions: How can we improve outcomes? How can compliance processes create greater value for the business and its clients?

To become genuinely strategic, compliance departments must embrace a culture of continuous improvement. They should leverage advanced technologies, foster cross-functional teamwork, and cultivate an open and collaborative learning culture that continually seeks improvement in processes and outcomes. By shifting towards this learning organization model, compliance can better support business growth, enhance customer satisfaction, and foster a competitive advantage.

Lesson 5: Leveraging ‘What If’ Scenario Planning to Enable Business Innovation

A dynamic compliance function can actively support and accelerate business innovation through sophisticated “what if” scenario analysis. Instead of merely assessing past risks, compliance teams equipped with advanced analytical tools can proactively evaluate risks associated with potential future business decisions.

This capability enables compliance professionals to quickly analyze the implications of entering new markets, launching innovative products, or changing business strategies. Imagine compliance contributing proactively during product development, swiftly identifying regulatory or operational roadblocks. This proactive, strategic role not only prevents future compliance issues but also dramatically accelerates innovation, reduces client pain points, and fosters faster, more confident business decisions.

Compliance as a Critical Strategic Partner

The compliance profession stands at a crossroads, with immense potential to redefine itself as a strategic asset essential to organizations. Compliance professionals possess a unique skill set that enables them to lead dynamic risk management efforts—identifying risks, rapidly deploying mitigation strategies, and facilitating proactive decision-making. By leveraging technologies like AI and cultivating deep integration with operational functions, compliance departments can reposition themselves from gatekeepers to strategic business enablers.

The future of compliance lies in proactive leadership, continuous learning, and deep integration within the organization’s strategic fabric. This evolution not only enhances compliance outcomes but also transforms compliance into a mighty, positive contributor to organizational growth, innovation, and success.

Categories
Trekking Through Compliance

Trekking Through Compliance – Episode 0 – Introduction to the Updated 2025 Series

Since 2017, Tom Fox has posted the podcast “Trekking Through Compliance” each summer. Not only is Tom a full-fledged Trekkie, but many of us in the compliance community share this passion as well. To commemorate the 8th anniversary of this series, Tom has updated each episode with new commentary and insights tailored for compliance professionals and business executives. Each episode is relatively short, lasting around 10 minutes. This allows you to grasp the storyline and the lessons learned from it. So, even if you have listened and re-listened over the past summers, you will learn something new and revisit one of the most significant TV series ever.

In this podcast series, Tom Fox explores compliance, leadership, and risk management through the lens of Star Trek: The Original Series, presented in a 79-episode offering. Each podcast reviews the episode’s creative team and story synopsis, highlighting three key lessons learned in the areas of compliance, leadership, and governance. If you love Star Trek as Tom does, this podcast series is for you. He will use three key resources for each offering: (1) Eric’s Excruciatingly Detailed Star Trek (TOS) Plot Summaries, which has plot summaries for every episode; (2) MissionLogPodcast.com, a Rod Roddenberry podcast where John Champion and Ken Ray explored every episode of Star Trek, the Original Series; and (3) Memory Alpha, a great resource for all things Star Trek. Please note that Tom will use the order of release in this podcast series, so the first episode is the premier TV show, “The Man Trap,” which aired on September 10, 1966. This means that both pilots will appear later in the series. Additionally, the TV premieres are on a schedule that differs from the production schedule. So, listen over the next 79 episodes, revisit one of television’s outstanding achievements, and learn how to use Star Trek to improve your corporate compliance program and yourself as a compliance professional. We are going to have some fun.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Issues for Internal Controls in International Operations

Welcome to “Compliance Tip of the Day,” the podcast that brings you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, our goal is to provide you with bite-sized, actionable tips to help you stay ahead in your compliance efforts. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Internal controls outside the US present a different set of challenges for compliance professionals.

For more information on this topic, refer to The Compliance Handbook: A Guide to Operationalizing Your Compliance Program, 6th edition, recently released by LexisNexis. It is available here.

Categories
Creativity and Compliance

Creativity and Compliance – Nourish Your Audience: A New Approach to Compliance Training

Where does creativity fit into compliance? In more places than you think. Problem-solving, accountability, communication, and connection – they all take creativity. Join Tom Fox and Ronnie Feldman on the award-winning Creativity and Compliance. Ronnie’s company, Learnings and Entertainment, leverages the entertainment devices people use to consume information in their everyday, non-work lives and applies them to important topics related to compliance and ethics. It’s not just about being funny. It’s about changing the tone of your compliance communications and messaging to make your compliance program, policies, and resources more accessible and engaging.

In this episode, Tom and Ronnie discuss the balance between evidencing compliance training and ensuring its effectiveness through employee engagement. Ronnie expresses concerns about the focus on measurement to the detriment of engagement. He emphasizes the need for training that is engaging, short, and relevant to influence behavior and mitigate risk truly. They suggest approaches to create a compliance program that combines engagement with measurement, including regular and interesting communications, as well as more targeted training. The podcast also explores how to make a compliance calendar and the importance of adjusting content to reflect current events and practical considerations.

Key highlights:

  • The Debate: Evidence vs. Engagement in Training
  • The Importance of Nourishing Your Audience
  • Strategies for Effective Compliance Training
  • Addressing Compliance Fatigue
  • Mapping Out a Compliance Program

Resources: 

Ronnie

  • Learnings & Entertainments (Website)
  • Compliance Confessions – inspired by “Mean Tweets,” these 90-second commercials address misconceptions and excuses to promote a speak up culture and the E&C team as positive and helpful.
  • E&C Training Jams – a soulful singer banters with ethics & compliance explaining policies, sharing examples, and debunking excuses. 
  • Tales from the Hotline – Real speak-up-themed stories about workplace behavior gone wrong.
  • Workplace Tonight Show! – E&C meets SNL Weekend Update, explaining corporate risk topics and why employees should care.
  • 60-Second Communication & Awareness Shorts – A variety of short, customizable, music and multimedia, quick-hitter “commercials” promoting integrity, compliance, speaking up, and the E&C team as helpful advisors and coaches.
  • Custom Live & Digital Programing – Custom creative programming that balances the seriousness of the subject matter with a more engaging delivery. After all, you can’t bore people into learning.

 Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

Creativity and Compliance was recently honored as one of the Top 35 Podcasts on Creativity by Feedspot.