Categories
Compliance Into the Weeds

Compliance into the Weeds: Unsexy Keys to Data Analytics for Compliance Programs

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Are you looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this Compliance into the Weeds episode, Tom Fox and Matt Kelly take a deep dive into the critical yet often overlooked aspects of data analytics.

They discuss Matt’s recent blog post on the ‘Unsexy Keys to Data Analytics,’ emphasizing the importance of foundational infrastructure over flashy visualizations. The conversation covers the need for robust data validation, the cooperation between compliance, business units, and IT departments, and the challenges faced by compliance officers in smaller companies. Highlights include real-world examples, the role of data governance, and how to align compliance risk management with corporate objectives amid ever-changing business landscapes.

Key highlights:

  • The Importance of Data Infrastructure
  • Compliance vs. Enterprise Data Analytics
  • Collaboration Across Departments
  • Data Governance and Change Management
  • Aligning Compliance with Corporate Risk Management

Resources:

Matt in Radical Compliance

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

Compliance into the Weeds was recently honored as one of the Top 25 Regulatory Compliance Podcast.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – The Last Mile

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we look at the difficulty of the ‘last mile’ of using data analytics in a compliance regime.

Categories
31 Days to More Effective Compliance Programs

31 Days to a More Effective Compliance Program: Day 29 – Enhancing Compliance through Automation

Welcome to a special podcast series on the Compliance Podcast Network, 31 Days to a More Effective Compliance Program. Over these 31 days of the series in January 2025, Tom Fox will post a key part of a best practices compliance program daily. By the end of January, you will have enough information to create, design, or enhance a compliance program. Each podcast will be short, at 6–8 minutes, and will include three key takeaways you can implement at little or no cost to help update your compliance program. I hope you will join us each day in January for this exploration of best practices in compliance.

Traditional compliance reporting methods, often reliant on manual processes like Excel spreadsheets, are time-consuming and prone to errors. This episode explores how Chief Compliance Officers and compliance professionals can enhance their programs through automation. By adopting data-driven solutions and leveraging regulatory operations (Reg Ops), it’s possible to provide near real-time reporting and improve decision-making efficiency. The focus is on integrating existing security and compliance tools, gathering real-time evidence, automating compliance gap tickets, and generating comprehensive reports for stakeholders. However, challenges like balancing data accuracy and security and the cultural transformation required for adopting these new practices are critical considerations. Embracing data-driven compliance can help organizations modernize and keep pace with the evolving regulatory landscape.

Key highlights:

  • Challenges in Traditional Compliance Reporting
  • The Role of Reg Ops in Compliance
  • Integrating Tools for Real-Time Compliance

Resources:

Click here to receive a 20% discount on The Compliance Handbook, 5th edition, for listeners to this podcast.

Categories
31 Days to More Effective Compliance Programs

31 Days to a More Effective Compliance Program: Day 5- Enhancing Compliance Through Automation

Welcome to a special podcast series on the Compliance Podcast Network, 31 Days to a More Effective Compliance Program. Over these 31 days series in January 2025, I will post a key part a best practices compliance program each day. By the end of January, you will have enough information to create, design or enhancement a compliance program. Each podcast will be short, at 6-8 minutes with three key takeaways that you can implement at little or no cost to help update your compliance program. I hope you will plan to join each day in January for this exploration of best practices in compliance.

In this episode, we explore how automation can revolutionize traditional compliance reporting, which is often manual, time-consuming, and error-prone. By leveraging data-driven solutions, compliance professionals can achieve near real-time reporting, improving decision-making and efficiency across their organizations. Reg Ops (regulatory operations) plays a key role in this transformation by focusing on automating compliance artifact creation and integrating existing security and compliance tools. This helps provide a comprehensive, real-time view of the company’s compliance status. However, organizations must carefully balance the need for real-time reporting with data accuracy, security, and cultural adaptation to realize these benefits. Tune in as we highlight three key takeaways: the critical role of automation in improving compliance effectiveness, the necessity of near real-time reporting, and the importance of balancing data accuracy and security in compliance programs. Join us tomorrow to discuss the impact of privacy regulations on data-driven compliance programs and analytics.

Key Highlights

  • Challenges in Traditional Compliance Reporting
  • Integrating Tools for Real-Time Compliance
  • Balancing Real-Time Reporting with Data Security
Categories
31 Days to More Effective Compliance Programs

31 Days to a More Effective Compliance Program: Day 4- Building Effective Data Analytics Programs for Compliance

Welcome to a special podcast series on the Compliance Podcast Network, 31 Days to a More Effective Compliance Program. Over these 31 days series in January 2025, I will post a key part a best practices compliance program each day. By the end of January, you will have enough information to create, design or enhancement a compliance program. Each podcast will be short, at 6-8 minutes with three key takeaways that you can implement at little or no cost to help update your compliance program. I hope you will plan to join each day in January for this exploration of best practices in compliance.

In today’s business environment, compliance professionals leverage data analytics to adhere to regulatory requirements and ethical standards. This episode focuses on the importance of defining specific risks an organization wants to monitor, capturing relevant data creatively, and utilizing internal expertise to build effective data analytics programs. By starting small and focusing on one risk at a time, compliance officers can demonstrate their dedication to improving compliance despite limited resources. Additionally, a data-driven approach helps shift focus from individual policy violations to identifying systemic issues, enhancing overall organizational compliance. Key takeaways include understanding multiple factors in creating data-driven compliance programs, recognizing the value of shifting focus to systemic issues, and gradually building analytics capabilities.

Key Highlights

  • Defining and Identifying Risks
  • Innovative Data Capture and Internal Collaboration
  • Demonstrating Value to Senior Management

Resources

Listeners to this podcast can receive a 20% discount to The Compliance Handbook, 5th edition by clicking here.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Boards and Digital Transformation of Compliance

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

The Board can help lead the digital transformation of compliance.

For more information on the Ethico Toolkit for Middle Managers, available at no charge, click here.

Check out the entire 3-book series, The Compliance Kids, on Amazon.com.

Categories
Compliance Into the Weeds

Compliance into the Weeds: The 2024 ECCP Update on Data Access

The award winning, Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds!

In this episode, Tom Fox and Matt Kelly take a deep dive into the 2024 update to the Department of Justice’s guidelines for corporate compliance programs, focusing on data and data access.

Tom and Matt explore the significance of these updates and whether they stem from companies showing advancements in data analytics or the DOJ recognizing gaps in data access for compliance officers. The discussion highlights the challenges compliance officers face, especially with diverse ERP systems and data silos, and provides insights into how compliance officers can leverage these guidelines to advocate for better data access within their organizations. The episode also breaks down specific questions from the DOJ’s guidelines, offering practical advice on addressing obstacles to data, resources for data access, and data maintenance.

Key Highlights:

  • The Importance of Data Access in Compliance
  • Challenges in Data Access for Compliance Officers
  • DOJ’s Six Key Questions on Data Access
  • Addressing Data Access Impediments
  • Tools and Resources for Data Analytics
  • Communicating with the Board on Data Analytics

Resources:

Matt in Radical Compliance

Tom in the FCPA Compliance and Ethics Blog

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Blog

The 2024 ECCP – Using Data Analytics to Determine Employee Engagement, Trust, and Corporate Culture

In her recent speech at the Society of Corporate Compliance and Ethics 23rd Annual Compliance & Ethics Institute. Principal Deputy Assistant Attorney General Nicole M. Argentieri spoke about the CWA and reviewed its early developments. (A copy of her remarks can be found here.) There was also updated information on the DOJ approach to whistleblowers and anti-retaliation found in the 2024 Update to the Evaluation of Corporate Compliance Programs (2024 ECCP). She addressed the growing importance of using data analytics to evaluate key aspects of a company’s corporate culture, particularly employee engagement, trust, and overall corporate ethics.

Assessing corporate culture is essential for compliance professionals. Culture is a powerful determinant of whether employees will adhere to company policies, report misconduct, and act ethically. The DOJ has made it clear through the 2024 ECCP that an organization’s culture of compliance is as critical as the controls themselves. Compliance programs must go beyond preventing misconduct and cultivate a culture where ethics and transparency are prioritized.

Employee engagement and trust are at the heart of this culture. Engaged employees are more likely to comply with rules and report issues. However, if there is a lack of trust—whether in the company’s leadership, policies, or reporting mechanisms—the risk of ethical lapses and misconduct increases. Data analytics can offer compliance professionals actionable insights into these hard-to-measure elements of corporate culture.

Leveraging Data Analytics for Cultural Insights

Traditionally, companies have relied on surveys, focus groups, and audits to assess employee engagement and trust. Despite their value, these methods frequently have limitations due to low response rates, biases, and a point-in-time perspective. On the other hand, data analytics offers ongoing, real-time insights across various indicators. Let’s explore how data analytics can help evaluate employee engagement, trust, and corporate culture:

Employee Engagement Data

Employee engagement can be a key indicator of whether a compliance program is likely to succeed. High levels of engagement suggest that employees are motivated, aligned with corporate values, and likely to act in the company’s best interest.

Metrics to Consider

  • Employee Feedback Platforms. Tracking data from feedback platforms (such as pulse surveys or anonymous feedback tools) can provide insights into employee sentiment about their work environment and leadership.
  • Participation in Training Programs. Data on employee participation in compliance training—especially voluntary programs—can offer insights into employees’ engagement with the company’s compliance initiatives.
  • Use of Corporate Tools. Monitoring internal systems such as compliance hotlines, whistleblower portals, and internal messaging boards can help assess whether employees feel empowered to engage with compliance resources.

By monitoring engagement trends over time, compliance officers can detect shifts in employee engagement and intervene if levels drop. For instance, increasing non-compliance with mandatory training could be a red flag for broader cultural issues.

Trust in Leadership and Compliance Programs

Trust is a critical component of a successful corporate compliance culture. If employees do not trust leadership or the compliance function, they are less likely to report misconduct and more likely to turn a blind eye to ethical violations.

Metrics to Consider

  • Whistleblower Reporting. Data on the number of whistleblower reports can be telling. A lack of reports may not necessarily indicate a lack of issues—it could signal a fear of retaliation or distrust in the reporting process.
  • Retention Rates in High-Risk Areas. Monitoring employee turnover in areas that are considered high-risk (e.g., finance, procurement, or overseas offices) can help determine whether ethical concerns are driving departures.
  • Survey Data on Trust Levels. Regular employee surveys on perceptions of leadership and the compliance program can offer a pulse on trust. The key is to go beyond traditional engagement surveys and ask questions about ethical concerns and trust in compliance leadership.

Combining survey data with data from whistleblower systems and employee retention analytics can offer a more nuanced view of whether employees trust leadership. A low reporting rate and high turnover in high-risk areas may indicate deeper cultural problems requiring intervention.

Monitoring Employee Behavior and Risk Indicators

One of the most significant ways data analytics can support compliance efforts is by detecting behavioral patterns that may indicate a lapse in corporate culture or potential compliance risks.

Metrics to Consider

  • Expense and Travel Data. Analyzing expense reports and travel data patterns can reveal inconsistencies or potential misconduct, such as fraudulent claims or unauthorized spending.
  • Email and Communication Analysis. Some companies use natural language processing (NLP) tools to analyze internal communications for warning signs of ethical issues. This can include detecting language that suggests rule-breaking, covering up misconduct, or expressing discontent with corporate policies.
  • Business Unit Performance vs. Compliance Reporting. Comparing performance data across business units with the frequency of compliance-related issues can provide insights into whether high-performing units are cutting corners to achieve their results.

Behavioral analytics can help compliance professionals detect patterns before they escalate into larger issues. For example, if a particular business unit shows exceptional financial performance but is under-reporting compliance concerns, this could signal a risky culture of non-compliance.

Driving a Data-Driven Culture of Compliance

Implementing data analytics in your compliance program requires the right technology, processes, and, most importantly, corporate buy-in. As the DOJ highlighted in its recent updates to the 2024 ECCP, compliance personnel must have adequate access to relevant data sources and the resources to interpret and act on that data. Companies should invest in the same level of technology for their compliance functions as they do for their business operations.

Some of the keys every compliance program should consider to help implement a data-driven culture of compliance include the following strategies:.

  • Build Cross-Functional Partnerships. Compliance teams should collaborate with human resources, IT, and business operations to gain access to the data they need. A cross-functional approach ensures compliance data is integrated into the company’s broader performance metrics.
  • Foster Transparency in Data Use. Be clear with employees about how their data will be used, particularly in sensitive areas such as monitoring communication. Emphasizing the ethical use of data can help build trust.
  • Regularly Reassess Your Metrics. As with any compliance program, the metrics used to evaluate corporate culture should evolve. New risks, technologies, and business challenges should inform your data strategy.

Strengthening Compliance through Analytics

The DOJ made clear in the Argentieri speech and the 2024 Update to the Evaluation of Corporate Compliance Programs that a data-driven approach to understanding employee engagement, trust, and corporate culture is essential for compliance success. Data analytics offers compliance professionals powerful tools to assess whether employees are following the rules and truly engaged in creating an ethical and compliant corporate environment.

As we look toward the future, companies prioritizing data analytics in their compliance programs will be better equipped to prevent misconduct, identify cultural risks, and foster a workplace that values ethics and transparency. For compliance officers, the time is now to embrace data analytics and use it to reinforce the foundation of a strong corporate compliance program.

Categories
FCPA Compliance Report

FCPA Compliance Report: Vince Walden on Leveraging Data Analytics for Effective Compliance Monitoring

Welcome to the award-winning FCPA Compliance Report, the longest running podcast in compliance.

In this edition of the FCPA Compliance Report, Tom Fox welcomes back Vince Walden, founder of KonaAI. Vince reports on the 2024 Update to the Evaluation of Corporate Compliance Programs. (Today’s episode is a cross-posting from Data Driven Compliance.)

Walden, a distinguished expert in compliance data analytics, actively participates in industry forums such as the Society of Corporate Compliance and Ethics annual summit in Grapevine, Texas. He advocates for compliance professionals to have ample access to relevant data sources, enabling them to monitor and test policies, controls, and transactions effectively. Walden stresses the importance of AI developers being vigilant about potential biases and public harm, aligning with the Department of Justice’s stance on accountability. He advises compliance practitioners to collaborate with internal audit and finance teams to ensure they have the necessary transactional data for comprehensive risk assessments, highlighting successful, cost-effective implementations like those at Albemarle as models for gradual, data-driven compliance program adoption.

Highlights in this Episode

  • Data-Driven Compliance for Cost Savings
  • Enhancing Compliance through Advanced Data Analysis
  • Identifying High-Risk Areas for Data Analytics
  • Proactive Risk Mitigation through Real-Time Monitoring
  • ROI-driven Compliance Programs with Data Analytics

Resources

Vince Walden on LinkedIn

KonaAI

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on the Ethico Toolkit for Middle Managers, available at no charge by clicking here.

Categories
Data Driven Compliance

Data-Driven Compliance: The DOJ Mandate on Transforming Compliance Through Data Analytics and AI with Vince Walden

Are you struggling to keep up with the ever-changing compliance programs in your business? Look no further than the award-winning Data Driven Compliance podcast, hosted by Tom Fox, is a podcast featuring an in-depth conversation around the uses of data and data analytics in compliance programs. Data Driven Compliance is back with another exciting episode. Today, Vince Walden, founder of KonaAI, the sponsor of this podcast, returns to talk about the recent speech by Nicole Argentieri and the release of the 2024 Update to the Evaluation of Corporate Compliance Programs (ECCP).

Walden shares insights from the Nicole Argentieri’s keynote and ECCP update, emphasizing the DOJ’s focus on data access in compliance. We explore the importance of utilizing both compliance and business data for effective fraud and risk management. Walden underscores the necessity for compliance professionals to collaborate with internal audit and finance departments, advocating for a risk-based approach to data analytics and continuous controls monitoring. The discussion also delves into leveraging AI and machine learning to improve compliance efficacy and overall business operations, arguing for the proportional allocation of resources to match the company’s sophistication level.

Key Highlights:

  • DOJ’s Focus on Data Access
  • Understanding Compliance Data Analytics
  • Training Compliance Officers on Data
  • Implementing Continuous Controls Monitoring
  • Cost Savings and ROI in Compliance
  • Proportionate Resource Allocation
  • Documentation and Transparency

Resources:

Vince Walden on LinkedIn

KonaAI

Tom Fox 

Connect with me on the following sites:

Instagram

Facebook

YouTube

Twitter

LinkedIn