Tag: compliance

Categories
Blog

A Strategic AI Playbook for Compliance Professionals

Artificial intelligence (AI) isn’t just knocking on our doors; it is already here, shaking up traditional processes, reshaping business operations, and redefining compliance. Yet, many organizations still find themselves stuck between tentative experimentation and strategic implementation, uncertain about how to move confidently forward. This shift is especially critical for the compliance professional: AI carries unprecedented opportunities but equally significant risks. Compliance teams must become integral in guiding organizations through this seismic change. Today, I want to explore the recent MIT Sloan article, “Leading the AI-driven Organization,” by Beth Stackpole. I will apply your prescriptions for business leaders to Chief Compliance Officers (CCOs) and other compliance leaders.

AI’s Strategic Potential and the Compliance Agenda

First, understanding the overarching message from MIT Sloan’s perspective is essential: effective AI implementation is not just a tech or business initiative. Instead, it should be seen as a comprehensive compliance strategy. Senior lecturer Paul McDonagh-Smith emphasizes the necessity of aligning AI projects directly with organizational priorities, data strategy, and employee skill sets. He warns of the gap between numerous AI experiments and cohesive, mature strategy, highlighting the urgent need for strategic alignment​.

For compliance officers, this means more than simply checking regulatory boxes. Compliance must be front and center, deeply integrated into AI strategies from the inception. The author advises compliance leaders to start by articulating how AI technologies can address specific compliance challenges and business strategies. Without this direct linkage, AI can become a distracting, costly investment rather than a value driver.

AI-Readiness: Data Quality and Governance

AI-driven compliance programs are only as strong as the data they use. Data integrity, accuracy, and governance are pillars of responsible AI applications. McDonagh-Smith poses a key question: “Is your organization’s data AI-ready?” Compliance teams must lead the charge to ensure the organization’s data is comprehensive, reliable, and managed adequately with stringent governance standards​.

Compliance professionals should champion initiatives that elevate data quality and establish rigorous governance frameworks. This is essential for operational success and regulatory compliance, particularly as privacy laws and data regulations rapidly evolve. For example, proactive data cleansing and structured data governance initiatives can preempt issues that AI might magnify, such as inadvertent biases or privacy violations.

Building AI Competency and Culture

One critical insight revolves around the skill readiness and cultural alignment necessary for AI adoption. Employees’ AI maturity levels directly affect the success of an AI strategy. Leaders must assess their teams’ current competencies, identify skill gaps, and strategically invest in training programs to build technical AI capabilities​.

For compliance leaders, this step is doubly significant. Your team needs proficiency in AI technology and an understanding of AI’s regulatory implications. Upskilling compliance professionals in data analysis, AI ethical principles, and evolving regulatory landscapes will ensure they can effectively govern the technology’s use within the enterprise.

Moreover, AI has profound cultural implications. A compliance-aware culture needs to evolve, fostering collaboration, transparency, and accountability. The author underscores the importance of creating silo-busting teams and encouraging an environment where experimentation and failure are permissible. Within compliance, this means promoting a culture of open discussion about AI risks, encouraging cross-functional collaboration, and integrating compliance considerations early in AI development.

The ‘Fast and Slow’ AI Approach

Drawing on the groundbreaking work of Nobel Prize-winning economist Daniel Kahneman, the author recommends that organizations adopt a dual-speed approach to AI strategy. Compliance programs should embrace ‘thinking fast and slow,’ where rapid experiments and quick wins coexist with careful, analytical, long-term planning​.

This approach is particularly apt from a compliance standpoint. Quick, iterative AI pilot programs can inform more strategic, enterprise-wide compliance frameworks. Compliance teams must balance agility and strategic vision, capturing and analyzing insights from pilots to inform comprehensive compliance structures capable of effectively managing AI-related risks.

Embrace Experimentation Responsibly

Experimentation is crucial, but compliance must ensure it’s done responsibly. As organizations increasingly rely on AI, enterprise risk multiplies. The author cautions that organizations must have a clear view of AI’s potential for promise and peril. Companies must adopt strong ethical frameworks, accountability mechanisms, and proactive risk mitigation strategies to ensure responsible AI use. These safeguards protect against risks like reputational harm, privacy infractions, or the proliferation of biased or incorrect information​.

Compliance professionals have an essential role in designing and maintaining these frameworks. They must act as vigilant watchdogs, ensuring the enterprise remains alert to ethical considerations and risk mitigation strategies at every step of AI implementation.

Positioning Compliance as Strategic AI Partners

Compliance teams are uniquely positioned to guide organizations through AI’s transformative landscape. The insights from this piece illuminate the tactical requirements and the strategic mindset compliance leaders need to cultivate. This is not merely about reacting to AI-driven changes; it is about proactively shaping an ethical, sustainable future where compliance is integrated at every juncture of AI’s adoption and development.

Compliance professionals must boldly step into roles as strategic AI partners, equipped with clarity of purpose, sophisticated data governance strategies, robust training programs, and rigorous ethical frameworks. In doing so, compliance safeguards the enterprise and amplifies AI’s potential to deliver real, sustainable value.

As compliance evangelists, we are privileged to lead these conversations, building a culture of responsible, strategic innovation that aligns business priorities with compliance excellence. AI isn’t merely a wave to ride but a journey to lead.

It is time for compliance to embrace this challenge and set the standard for AI-driven excellence in the corporate world.

Categories
Blog

The Role of Compliance in Auditing AI

As compliance professionals, our roles evolve constantly, shaped by new technologies and emerging risks. One of the most significant developments in recent years has been the rapid growth of artificial intelligence (AI) and machine learning systems in the corporate environment. The 2024 Evaluation of Corporate Compliance Programs (2024 ECCP), under the Management of Emerging Risks to Ensure Compliance with Applicable Law section, asked several key questions.

  • What is the company’s approach to governance regarding the use of new technologies, such as AI, in its commercial business and compliance program?
  • How is the company curbing any potential adverse or unintended consequences resulting from using technologies, both in its commercial business and its compliance program?
  • How is the company mitigating the potential for deliberate or reckless misuse of technologies, including by company insiders?
  • To the extent that the company uses AI and similar technologies in its business or as part of its compliance program, are controls in place to monitor and ensure its trustworthiness, reliability, and use in compliance with applicable law and the company’s code of conduct?
  • Do controls exist to ensure the technology is used only for its intended purposes?
  • What baseline of human decision-making is used to assess AI?
  • How is accountability over the use of AI monitored and enforced?

One key tool for answering many of these questions is auditing. In his recent article in the Harvard Business Review, What Leaders Need to Know About Auditing AI, author Luca Belli outlines crucial insights that business leaders must understand about auditing AI. I have adapted his thoughts for a Chief Compliance Officer and compliance professional.

While audits are becoming a core feature of working with AI, they do not have a predetermined process that follows a straight line; rather, they are a web of different decisions, both from the business and the technical side. Specifically, audits often face four core challenges: 1) they do not follow a straight line, 2) data governance is messy, 3) they require internal trust, and 4) they focus on the past. Leaders can take steps to help audits succeed. Compliance professionals can help instill the right culture and incentives and help design the audit. During the audit, they can shape the process and remove red tape.

AI is no longer confined to back-end analytics. It has stepped confidently into customer-facing roles, making decisions in critical areas such as finance, healthcare, and housing. With such reach and influence, AI poses significant ethical, reputational, and legal risks if left unchecked. Audits of AI systems, therefore, have become a cornerstone of modern compliance frameworks. Policymakers worldwide, including through the EU’s Digital Services Act and New York City’s AI bias law, are mandating external audits of AI systems. Even where not mandated, businesses voluntarily engage in audits to manage risk, mitigate potential crises, and anticipate regulatory developments.

However, auditing of AI is not straightforward. Compliance professionals must understand four fundamental challenges inherent in AI audits.

1. Non-linear Audit Processes

AI audits rarely follow a straight, predictable path. Instead, they often resemble a “random walk,” as auditors must continually adjust their focus based on emerging data and shifting business needs. Consider an audit to detect racial bias in decision-making algorithms where direct data on race is unavailable. Auditors may pivot to proxy measures like zip codes to approximate racial data. This approach, while practical, introduces discrepancies and limitations that must be carefully managed and transparently documented.

2. Complex Data Governance

Effective auditing relies heavily on data governance practices, yet data management often resembles an “old building” layered with historical inefficiencies rather than a clean, structured system. Many organizations struggle to locate and interpret data due to outdated documentation or employee turnover. Compliance teams must actively collaborate with technical teams to ensure data accuracy and completeness. As Belli suggests, robust internal documentation and dedicated data custodians can significantly ease this challenge.

3. Building Internal Trust

Audits can strain internal team dynamics, particularly if audit results lead to perceived criticisms of operational decisions. Compliance professionals must proactively foster a culture of trust, reinforcing that audits are not punitive but integral to operational excellence. As Belli notes, incentives should align accordingly: supporting audits should positively influence personal and professional evaluations, signaling organizational value in transparency and continuous improvement.

4. Historical Focus and Technical Limitations

Most audits evaluate past performance, and evolving AI systems and datasets pose challenges in replicating historical conditions. A user deleting their profile data or changes in system algorithms can complicate audits significantly. Compliance professionals must advocate for real-time monitoring or, at minimum, detailed record-keeping, ensuring auditors have sufficient context to interpret their findings and recommendations accurately.

Given these complexities, how can corporate compliance officers effectively lead their organizations through AI audits? Belli provides several practical steps:

  • Proactive Preparation: Companies should not wait for external mandates to build auditing capabilities. By establishing internal audit teams or clearly defined points of contact within existing teams, organizations can swiftly respond to audit needs while minimizing operational disruption.
  • Cultural Alignment: Corporate culture profoundly impacts audit effectiveness. Compliance professionals must champion transparency and accountability at the highest organizational levels, ensuring that audits are critical to long-term business success rather than occasional inconveniences.
  • Strategic Audit Design: Choosing between external auditors and internal audit teams requires careful consideration of organizational dynamics. Internal teams offer in-depth institutional knowledge, while external auditors provide objective perspectives without internal friction. Belli suggests a hybrid model, often ideal, balancing centralized expertise with distributed operational familiarity.
  • Leadership Engagement: Active, informed involvement by senior leadership during audits can clarify organizational priorities and remove operational roadblocks. Leaders should regularly engage with technical teams to understand key decisions, encourage thorough documentation, and ensure audit findings align clearly with broader business objectives.

The author underscores the CCO’s crucial role in navigating the nuanced landscape of AI auditing. As technology’s reach expands, compliance teams must proactively address these emerging complexities, continually adapting their oversight frameworks to meet the dynamic challenges presented by AI systems. By fostering robust internal collaboration, aligning incentives, and strategically preparing audit infrastructure, compliance professionals not only mitigate risks but also enable their organizations to harness AI’s transformative potential responsibly and ethically.

Categories
Compliance Tip of the Day

AI Playbook for Compliance Professionals

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

AI implementation is not simply just a tech or even business initiative. It requires a comprehensive compliance strategy.

Categories
Blog

The Compliance Frontier in the AI Era, Part 2: Five Critical Lessons for Compliance Professionals

Compliance professionals stand at the intersection of opportunity and challenge in an era of rapidly evolving artificial intelligence (AI) and unprecedented access to expertise. As we noted in yesterday’s blog post, which featured the Harvard Business Review piece “Strategy in an Era of Abundant Expertise” by authors Bobby Yerramilli-Rao, John Corwin, Yang Li, and Karim R. Lakhani, AI is drastically reshaping how businesses build competitive advantage, manage their resources, and strategize for future success. This transformation is not confined to operational efficiencies and strategic differentiation; it is deeply embedded in the very fabric of compliance management. As compliance professionals, we must embrace these developments to fortify our compliance frameworks or risk becoming obsolete.

In examining this provocative and thought-provoking analysis, compliance professionals can derive several actionable lessons to ensure their programs remain robust, responsive, and relevant. In this second part of a two-part blog post series, I want to explore five key lessons for compliance professionals drawn from this transformative era, each critical to strengthening compliance management in this age of abundant AI-powered expertise.

Lesson 1: Embrace AI to Enhance Risk Management Capabilities

Compliance professionals must first acknowledge that AI’s transformative potential lies in its ability to enhance existing compliance frameworks significantly. The authors underscored the dramatic productivity gains AI can deliver by embedding expertise directly into everyday operational activities. Similarly, in compliance, leveraging AI tools can significantly enhance risk identification, assessment, and mitigation.

Historically, risk assessment has been labor-intensive and prone to gaps and oversight. However, AI-driven systems can now continuously analyze vast troves of data, identify subtle patterns indicative of emerging risks, and proactively alert compliance teams. For instance, predictive analytics and AI-powered monitoring tools can substantially augment the effectiveness of compliance audits by highlighting irregularities faster and more accurately than traditional manual methods.

Embracing AI to boost risk management will streamline compliance procedures and allow compliance professionals to focus their strategic energies on higher-value tasks, such as cultural assessments, risk forecasting, and strategic compliance planning. Just as developers empowered by AI achieve more sophisticated results, compliance officers leveraging AI can reach new heights of effectiveness and efficiency in risk management.

Lesson 2: Continuously Adapt Compliance Expertise to Evolving AI Capabilities

As highlighted in the article, businesses that fail to evolve their expertise alongside technological developments face obsolescence; consider Nokia’s precipitous decline in the mobile phone market. Compliance professionals must heed this critical lesson. Accelerating AI’s capabilities means that expertise considered cutting-edge today could be standard tomorrow.

Compliance expertise must continually evolve. This is even more true in the age of the second Trump Administration, when the stick of FCPA and regulatory enforcement has been removed. However, this is also a great opportunity for the compliance profession. AI can now competently handle routine tasks such as transaction monitoring, basic regulatory research, and even elements of investigations. Compliance professionals must proactively cultivate deeper expertise in nuanced areas, such as ethical decision-making, behavioral compliance psychology, and complex international regulatory frameworks, where human judgment and subtlety remain superior.

Investing in ongoing training and development programs, analogous to Moderna’s successful AI academy initiative, will ensure compliance professionals remain ahead of technological advancements. Continuous education ensures that compliance departments manage current risks effectively and are fully prepared to manage emerging risks tomorrow.

Lesson 3: Focus Compliance Efforts on Core Strategic Areas

Businesses in the AI era are shifting their focus toward activities that create maximum strategic differentiation, such as outsourcing or automating non-core processes. Similarly, compliance departments should strategically delineate core and non-core compliance activities.

Routine compliance activities such as sanctions screening, record-keeping, and basic training can increasingly be delegated to AI-driven tools, freeing compliance professionals to concentrate on strategic imperatives like cultivating ethical culture, refining policy frameworks, and strengthening relationships with regulatory bodies.

Companies such as FocusFuel illustrate how focusing internal resources on strategic areas, supported by AI and outsourced expertise in non-core tasks, can lead to exponential business growth. Compliance teams adopting this model can similarly elevate their strategic profile within their organizations, becoming proactive strategic advisors rather than reactive overseers of compliance tasks.

Lesson 4: Establish Rigorous AI Governance and Ethics Frameworks

Successful AI integration must be accompanied by robust governance frameworks that address inherent risks, including bias, misinformation, and cybersecurity threats. This lesson resonates strongly with compliance professionals and is directly in the compliance wheelhouse. Compliance officers must ensure their organizations’ AI initiatives are ethically sound, unbiased, and securely governed as the stewards of organizational justice and fairness coupled with ethics and legal adherence.

Establishing clear guidelines for AI usage, data integrity, transparency, accountability, and ethical standards is paramount. Though immensely powerful, AI is not without ethical challenges and potential pitfalls. Compliance officers must advocate for responsible AI practices, embed robust governance protocols, and ensure organizational practices reflect regulatory obligations and broader societal expectations.

Effective AI governance means going beyond mere compliance checklists. It requires creating comprehensive frameworks that holistically address AI’s implications—safeguarding against inadvertent biases, preventing misuse, and maintaining the trust of customers, regulators, and society.

Lesson 5: Prepare Compliance Teams for Organizational Change Management

Finally, compliance professionals must recognize that embracing AI is fundamentally an organizational change management challenge, not merely a technological upgrade. The transition to AI-augmented compliance involves significant shifts in how teams operate, make decisions, and interact with other organizational functions.

Compliance leaders should proactively manage this transition by identifying and empowering AI champions within their teams, providing them with opportunities to lead AI integration initiatives, and serving as mentors and role models. The experience of organizations like Coursera demonstrates that equipping employees with the necessary skills and tools and empowering early adopters as change ambassadors significantly accelerates effective adoption.

Organizational change involves training in technical competencies and nurturing a compliance mindset attuned to continuous learning, flexibility, and agility. Clear communication, comprehensive training programs, and visible leadership commitment to AI initiatives will be crucial in effectively managing this transformative change.

Conclusion: An Imperative for Compliance Transformation

As compliance professionals, our response to the AI era cannot be passive or reactive. Rather, we must actively embrace, integrate, and leverage AI to build a compliance function that is resilient, responsive, and robustly strategic. The authors make clear that the availability and accessibility of AI-driven expertise present profound opportunities to enhance compliance effectiveness, efficiency, and strategic impact.

These five lessons—leveraging AI for risk management, continuously evolving expertise, focusing strategically on core compliance functions, ensuring robust AI governance, and proactively managing organizational change—form a blueprint for compliance professionals determined to lead their organizations confidently into the future.

Ultimately, the AI-driven era of abundant expertise demands nothing less than a comprehensive reinvention of the compliance function itself. Compliance professionals prepared to embrace these lessons will undoubtedly thrive, ensuring their own relevance and their critical role in shaping ethically grounded, legally compliant, and strategically adept organizations.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – The Role of Compliance in Auditing AI

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we consider crucial insights that compliance professionals should understand about auditing AI.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Key Lessons in Transforming Compliance with AI

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

What are the key lessons for compliance professionals to strengthen compliance management in this age of AI?

Categories
Blog

The Compliance Frontier the AI Era, Part 1 – Navigating Strategy in the AI Era

Compliance is early in the AI era, and the technology is quickly evolving. Many service providers are introducing AI “copilots,” “bots,” and “assistants” into applications to augment compliance workflows. These compliance tools have been trained on various data sources and possess expansive expertise in many domains. The level of knowledge in these tools is still growing rapidly while the cost of accessing them is decreasing. In an article in the Harvard Business Review (HBR), authors Bobby Yerramilli-Rao, John Corwin, Yang Li, and Karim R. Lakhani posit that shortly, there will be “more advanced “AI agents” equipped with greater capability and broader expertise that will be operating on behalf of users with their permission. Companies that benefit from AI can conduct business more efficiently, innovate more nimbly, and grow with sharpened vision and focus.”

Their article, “Strategy in an Era of Abundant Expertise,” provides crucial insights into how artificial intelligence (AI) transforms the competitive landscape by reshaping how businesses leverage expertise. The authors argue convincingly that we have entered an era defined by two compelling forces: the exponentially increasing volume of knowledge and the dramatically reduced cost of accessing it. Today, we begin a two-part exploration of their article and how their insights apply to compliance. In Part 1, we consider how this transformation in expertise accessibility is fundamentally altering business strategies and operational models. Tomorrow, in Part 2, we will consider their article’s lessons for the compliance profession.

The Transformation of Expertise

At its core, expertise is the deep theoretical knowledge and practical know-how necessary to perform specific tasks effectively. Historically, businesses succeeded by developing unique expertise that differentiated them from competitors. Examples such as Toyota’s mastery of lean manufacturing and Walmart’s superior distribution capability illustrate how critical specialized knowledge has been to corporate dominance.

However, AI is now dramatically changing this traditional paradigm. Today, specialized expertise, once costly and confined within the walls of large organizations, is becoming broadly available at much lower costs. AI-powered tools are emerging as pivotal “copilots,” augmenting human capabilities across numerous business functions. This shift means companies no longer need extensive internal expertise in all areas but can strategically access external AI-powered resources to fill gaps and streamline operations.

The Dual Forces of AI

The authors pinpoint two fundamental forces driving the AI-era transformation: (1) the continuous expansion of global expertise and (2) the decreasing cost of access. These intertwined forces have a profound influence on corporate strategy and organizational structure.

The expanding body of global expertise means businesses now face the impossible task of staying ahead in all relevant knowledge domains. For example, the article highlights biotech firms, where AI applications for drug discovery have surged astronomically, making it impossible for any firm to master all available knowledge independently. Simultaneously, the cost of accessing this ever-growing expertise is plummeting, lowering barriers to market entry and significantly changing competitive dynamics.

Companies such as Instagram and TikTok illustrate this trend vividly. They provide content creators with advanced tools formerly reserved for industry professionals, leveling the playing field and democratizing expertise.

Strategic Implications of AI Adoption

The authors argue convincingly that businesses leveraging AI effectively will see a “triple product” return characterized by more efficient operations, increased workforce productivity, and sharper strategic focus. Specifically, AI enables companies to refine their focus on core strategic activities, using AI-driven solutions to manage non-core functions efficiently.

A notable example is Moderna, which employed AI to create more than 900 specialized internal assistants, dramatically improving the speed and accuracy of business processes across its operations. Such integration of AI significantly raises organizational productivity and effectiveness by automating routine tasks and freeing human expertise for more complex strategic considerations.

Reallocating Resources and Refining Focus

A critical benefit of AI highlighted in the article is resource reallocation toward activities that generate maximum value. Companies can now clearly identify core processes where they excel and leverage AI-powered platforms for support activities. The startup FocusFuel, a manufacturer of caffeinated gummies, effectively demonstrates this approach. By strategically outsourcing non-core activities such as market analysis, packaging design, and logistics to AI-enabled platforms, FocusFuel rapidly established itself, achieving significant revenue growth within months of launch.

This trend signifies a paradigm shift in business operations. Organizations increasingly realize that sustaining competitive advantage means intensifying their efforts in select, strategically valuable areas rather than attempting to excel broadly. This approach enables businesses to achieve greater agility, efficiency, and responsiveness in rapidly evolving markets.

Organizational Change and Cultural Adaptation

The authors emphasize that successfully adopting AI is not merely a technological upgrade; it requires significant organizational and cultural change. Companies must prepare their employees to operate effectively alongside AI tools, embedding AI expertise into everyday processes. This preparation involves substantial investments in training and education, exemplified by Moderna’s successful establishment of an “AI academy,” offering mandatory AI education to all employees.

Furthermore, managing organizational change requires a proactive approach to cultivating internal AI champions who can accelerate adoption and encourage widespread acceptance. Coursera is a leading example, swiftly integrating AI capabilities into multiple operational facets after initially embracing AI for coding tasks. This rapid adaptation showcases the profound impact of investing in technology and human capabilities.

Future-Proofing Strategic Advantages

Companies must continually reassess their strategic foundations as AI continues its rapid advancement. Three critical questions outlined by the authors guide strategic reevaluation:

  1. What UX problems will AI soon allow the users to solve independently? As AI increasingly empowers customers directly, businesses must rethink their value propositions and reinvent user (customer/employee/supplier) interactions.
  2. What existing expertise must companies evolve to remain ahead of advancing AI capabilities? As AI matches or surpasses human capabilities in numerous tasks, companies must strengthen inherently human competencies such as empathy, creativity, and strategic judgment to differentiate themselves effectively.
  3. What strategic assets can companies leverage to maintain competitive advantages against advancing AI? Businesses must identify durable sources of advantage less susceptible to AI disruption, such as strong brand identities, deep customer relationships, proprietary physical assets, or potent network effects.

These questions illustrate the strategic depth required to successfully navigate the evolving AI landscape. They underline that the future will reward companies leveraging unique human capabilities and durable competitive advantages alongside AI expertise.

Embracing the AI-Driven Future

Ultimately, the article provides an incisive and timely exploration of the strategic implications of AI’s ascendancy. Companies facing today’s competitive realities must recognize AI’s transformative power and strategically integrate it into their operational and competitive frameworks.

For compliance professionals, whose effectiveness increasingly depends on understanding broader strategic developments, grasping these AI-driven shifts is vital. The emerging landscape characterized by abundant and accessible expertise demands a strategic response that embraces the combined strengths of AI and uniquely human insights.

As businesses move forward in this transformative era, the organizations that adeptly balance AI-driven operational efficiencies with strategic differentiation will undoubtedly emerge as leaders in their respective markets. The insights provided by the authors serve as a compelling call to action for all professionals, compliance included, highlighting the strategic imperative of integrating AI effectively to thrive in the rapidly evolving future of business.

Categories
Compliance and AI

Compliance and AI: Harnessing AI and Innovation: A Deep Dive into Compliance and Disruption with Jag Lamba

What is the role of Artificial Intelligence in compliance? What about Machine Learning? Are you using ChatGPT? These are but three questions we will explore in this cutting-edge podcast series, Compliance and AI, hosted by Tom Fox, the award-winning Voice of Compliance. In this episode, Tom is joined by Jag Lamba for a discussion on the intersection of innovation and disruption.

Jag frames his thoughts on disruption through theories from Clayton Christensen and practical examples from ventures like Tesla. They explore how these concepts translate to the compliance world, particularly through the lens of artificial intelligence. Jag elaborates on the role of generative AI in streamlining third-party risk management, from data gathering to ongoing monitoring. He shares insights on embedding compliance into core business processes, reducing friction, and creating commercial value, highlighting success stories and future potential. They look into the use of RegTech for policy management and regulatory updates, emphasizing the importance of automation for modern compliance frameworks. The podcast showcases how AI can transform compliance from a costly necessity to a strategic asset that drives business efficiency and growth.

Key highlights:

  • Understanding Disruption and Innovation
  • Elon Musk’s Approach to Innovation
  • AI in Third Party Risk Management
  • The Value of AI in Compliance
  • RegTech for Automated Compliance
  • Embedding Compliance into Business Processes

Resources:

Jag Lamba on LinkedIn

Certa AI 

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Creativity and Compliance

Creativity and Compliance – Bringing Joy to Compliance: A Conversation with Virginia MacSuibhne

Where does creativity fit into compliance? In more places than you think. Problem-solving, accountability, communication, and connection – they all take creativity. Join Tom Fox and Ronnie Feldman on Creativity and Compliance, part of the award-winning Compliance Podcast Network.

Ronnie’s company, Learnings, and Entertainment, utilizes the entertainment devices people use to consume information in their everyday, non-work lives and apply it to important topics around compliance and ethics. It is not only about being funny. It is about changing the tone of your compliance communications and messaging to make your compliance program, policies, and resources more accessible. In this episode of Creativity and Compliance, Tom Fox and Ronnie Feldman are joined by Virginia MacSuibhne, former Chief Compliance Officer for Roche and Agilent Technologies.

Virginia shares her unique approach to making compliance accessible, engaging, and fun. Emphasizing the importance of a personal brand, she discusses her philosophy of authenticity and how it translates into creating clear, actionable, and enjoyable guidance. Her unconventional methods, including using infographics, breaking down complex policies, and injecting humor and personal interests, have significantly impacted employee engagement and compliance culture.

Virginia highlights the critical role of user experience (UX) in compliance, urging practitioners to rethink their policies and communication strategies. She shares anecdotes of her creative initiatives, such as wearing a unicorn costume to training sessions, integrating compliance messages into existing training programs, and making hotline experiences as user-friendly as possible. Her mantra, ‘What makes you weird makes you wonderful,’ encourages compliance professionals to bring their unique selves to their work to foster a more approachable and effective compliance environment.

Key highlights:

  • Virginia’s Philosophy on Compliance
  • Creating an Engaging Compliance Program
  • Simplifying Policies and Procedures
  • Innovative Training and Communication Techniques
  • Overcoming Pushback and Building a Business Case

Resources:

Virginia MacSuibhne on LinkedIn

Ronnie:

  • Learnings & Entertainments (Website)
  • Compliance Confessions – inspired by “Mean Tweets,” these 90-second commercials address misconceptions and excuses to promote speak-up culture and the E&C team as positive and helpful.
  • E&C Training Jams – a soulful singer banters with ethics & compliance, explaining policies, sharing examples, and debunking excuses. 
  • Tales from the Hotline – Real speak up-themed stories about workplace behavior gone wrong.
  • Workplace Tonight Show! – E&C meets SNL Weekend Update, explaining corporate risk topics and why employees should care.
  • 60-Second Communication & Awareness Shorts – A variety of short, customizable, music and multimedia, quick-hitter “commercials” promoting integrity, compliance, speaking up, and the E&C team as helpful advisors and coaches.
  • Custom Live & Digital Programing – Custom creative programming that balances the seriousness of the subject matter with a more engaging delivery. After all, you can’t bore people into learning.

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

Creativity and Compliance was recently honored as one of the Top 35 Podcasts on Creativity by Feedspot.

Categories
Blog

Stepping Up and Stepping Forward: The Future of Compliance in an Age of AI and Deregulation

The world of compliance took a surprising turn this February with the Executive Order issued by the President suspending FCPA investigation and enforcement. This was followed in short order by the dismissal, after six years of prosecution, of the two ex-Cognizant Technology executives charged with paying or authorizing the payment of bribes in that case. It now appears that both the Department of Justice (DOJ) and Securities and Exchange Commission (SEC) FCPA units will be eviscerated and even shut down by the Administration. These significant legal rollbacks have ignited a series of conversations about the very essence and future of the compliance profession. As compliance professionals, many of us are left pondering, where exactly does compliance go from here?

I recently discussed this topic on the Compliance into the Weeds podcast with Matt Kelly, reflecting on his insights from a compliance event held in Boston he wrote about in a blog post in Radical Compliance. Matt highlighted a prevalent unease among compliance officers, underpinned by two primary concerns: the potential redundancy of compliance roles due to relaxed regulatory scrutiny and the impact of advancing technology, particularly AI, on compliance functions.

First, tackle the issue of regulatory rollback. The Trump administration has shown a clear inclination toward scaling back certain regulatory requirements, warranted or not. But there is a critical takeaway. It is not 2010, at the modern beginnings of compliance; it is 2025, and compliance is fundamentally different from what it was 15 years ago. Compliance practices and ethics programs have become deeply integrated into business operations, creating intrinsic value that transcends mere regulatory requirements. These practices have proven essential not only for managing regulatory risk but also for effectively managing broader business risks, operational efficiency, and corporate reputation.

Yet, despite the embedded nature of compliance in modern corporations, there’s a troubling scenario Matt outlined based on a keen observation from Kristy Grant-Hart. Could compliance functions gradually be absorbed by other departments? Could compliance tasks like hotline management drift toward HR, regulatory compliance fall into the hands of the legal department, and privacy compliance become the responsibility of IT security? Unfortunately, this scenario is not entirely implausible. Some short-sighted organizations might indeed take this fragmented route, viewing it as an opportunity to reduce headcount and costs.

Both Matt and I agree this is a dangerous and ultimately costly path. Fragmenting compliance capabilities across departments risks creating silos, precisely what compliance professionals have spent years fighting against. Silos impede effective communication and cloud transparency and hinder the swift, coordinated responses necessary to manage risk in today’s complex business environments. In short, this fragmentation threatens operational integrity, compliance effectiveness, and, ultimately, corporate profitability.

Instead of retrenching, compliance professionals must seize this uncertain moment as an opportunity. This is a time to demonstrate conclusively how compliance adds tangible business value beyond regulatory mandates. Hui Chen beautifully articulated this sentiment in her insightful blog post, urging compliance leaders to elevate their roles proactively. Chen recommends re-evaluating and broadening our compliance messaging, enhancing engagement with leadership, and demonstrating the clear business value compliance delivers to the organization.

Now, when we look at technology, particularly AI, there is palpable excitement and understandable anxiety within our compliance community. AI presents both extraordinary potential and a perceived threat. The crux of the concern is straightforward: could AI replace human compliance professionals?

AI undoubtedly enhances compliance capabilities significantly; it empowers us to manage larger, more complex data sets, swiftly identifies risks, automates repetitive compliance tasks, and enriches our analytical capabilities. But here’s the fundamental truth: AI requires a “human in the loop.” Human oversight, nuanced judgment, ethical considerations, and strategic thinking cannot, and should not, be outsourced entirely to algorithms.

Moreover, AI is not a threat but a tool that amplifies the effectiveness of compliance officers. Compliance professionals should proactively harness AI to enhance third-party risk management, improve whistleblower and speak-up programs, conduct more nuanced behavioral analytics, and streamline compliance training and communication. AI is here to augment, not eliminate, the vital role of the compliance officer.

Short-sighted individuals will always view AI as a cost-cutting opportunity. These individuals might attempt to unravel compliance functions, dispersing responsibilities across various departments supported by AI, thereby undermining the coherent strategic value a centralized compliance function provides.

Our response as compliance professionals should be unequivocal; robust compliance management and risk assessment capabilities are more critical now than ever. Compliance functions must remain centralized and strategic, leveraging technology to enhance rather than dilute their impact. We must clearly demonstrate to senior management how a strong, unified compliance function, bolstered by advanced technologies like AI, not only ensures regulatory compliance but actively strengthens operational resilience, business efficiency, and profitability.

In closing, Matt and I both agree these are indeed challenging and uncertain times for the compliance profession. However, they also represent a profound opportunity for growth and innovation and demonstrate the indispensable value compliance brings to businesses. Compliance professionals must rise to this challenge, proactively shaping the future rather than passively waiting for it to unfold.

As Matt aptly concluded, and I echo wholeheartedly, “I would bet on the durability of the ethics and compliance profession every day of the week.” I would only add that now is unquestionably the moment for compliance to step forward confidently, embracing innovation and clearly demonstrating its value as a strategic partner in business success.