Categories
Compliance Tip of the Day

Compliance Tip of the Day – Final Thoughts on Pre-Acquisition Due Diligence in M&A

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide you with bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we conclude our week-long series on pre-acquisition due diligence in M&A from the anti-bribery/anti-corruption perspective.

For more on this topic, check out The Compliance Handbook, a Guide to Operationalizing Your Compliance Program, 6th edition, which LexisNexis recently released. It is available here.

Categories
Blog

Failure to Prevent Fraud Mastery: Enhancing Due Diligence, Training, and Improvement

We conclude our deep dive into the Economic Crime and Corporate Transparency Act 2023, which has elevated the expectations for senior leadership and boards across large organizations. Our guide in this journey has been the UK government, which has put out a document entitled “Economic Crime and Corporate Transparency Act 2023: Guidance to organisations on the offence of failure to prevent fraud.” (The Guidance) Today, we conclude with the final three sections on Due Diligence, Training, Ongoing Monitoring, and Continuous Improvement.

As compliance professionals prepare diligently for the upcoming implementation of the Failure to Prevent Fraud (FTPF) offense, it becomes imperative to understand and apply comprehensive fraud prevention measures effectively. Central to a robust anti-fraud framework are due diligence, training, monitoring, and review processes. Each of these areas must be executed diligently, proportionately, and tailored specifically to address the unique risks faced by an organization.

Due Diligence: Building Trust Through Vigilance

Due diligence is a cornerstone of an effective fraud prevention strategy. Organizations must apply meticulous and proportionate due diligence procedures to mitigate fraud risks associated with individuals or entities performing services on their behalf.

For organizations facing heightened fraud risks, standard due diligence might not suffice. Comprehensive screening, including the use of technology-driven third-party risk management tools and vetting checks, becomes vital. Contracts should explicitly state compliance obligations and consequences of non-compliance, while mergers and acquisitions must include rigorous assessments of criminal, regulatory, and tax backgrounds.

Moreover, ongoing due diligence is essential; periodic reviews and updates ensure that an organization remains alert to emerging risks or changes in the status of associated persons. Continuous monitoring can detect potential red flags that may arise post-engagement, such as sudden changes in financial stability, reputation issues, or new regulatory concerns. Additionally, organizations should ensure transparency in their due diligence processes, clearly documenting their methods and findings. This not only enhances accountability but also ensures readiness in demonstrating compliance to regulatory bodies or stakeholders during audits or investigations.

Organizations might also consider collaboration with external experts or industry peers to refine their due diligence methodologies, leveraging collective insights to strengthen their anti-fraud defenses. Regular training and awareness sessions about due diligence expectations can further embed vigilance into organizational culture, ensuring that all stakeholders understand and uphold their roles in fraud prevention.

Five Key Takeaways on Due Diligence:

  1. Leverage Technology: Use advanced screening tools and third-party risk management platforms to enhance due diligence effectiveness.
  2. Contract Clarity: Clearly articulate compliance obligations and termination clauses for fraud breaches within contracts.
  3. Monitor Employee Well-being: Regular monitoring to identify stressors or workload issues that might increase susceptibility to fraud.
  4. Mergers and Acquisitions Scrutiny: Conduct thorough fraud prevention assessments during acquisitions, integrating robust prevention measures post-acquisition.
  5. Dynamic Review: Keep due diligence processes proportionate, up-to-date, and responsive to evolving risks.

Training: Empowering Prevention Through Knowledge

Training is critical to embedding an anti-fraud culture within an organization. A clear and regular communication strategy ensures all associated persons fully understand and internalize the organization’s fraud prevention policies and procedures.

Proportionate training tailored to the specific risks of roles within the organization, especially high-risk positions, is essential. Training must detail the nature of the FTPF offense, the particular procedures required, and the clear protocols for whistleblowing. Continuous evaluation and updates ensure training remains practical and relevant, particularly as personnel change. Effective training should also encompass interactive and engaging methods such as workshops, simulations, and scenario-based exercises, which help employees understand the real-world implications of fraud and the critical importance of adhering to procedures.

Incorporating case studies of relevant fraud incidents can significantly enhance learning by illustrating practical examples and reinforcing key lessons. Organizations should also regularly evaluate the impact of training through assessments, quizzes, and feedback surveys, ensuring that employees retain the information and can effectively apply it in their roles. Integrating fraud prevention messages into routine communications, such as team meetings and newsletters, can further reinforce an anti-fraud mindset. Ultimately, a robust training program not only builds awareness but also empowers employees to identify and address potential fraud risks proactively.

Five Key Takeaways on Training:

  1. Risk-Based Training: Deliver bespoke training programs specifically targeted at roles identified as high risk.
  2. Integration with Existing Programs: Leverage and integrate fraud prevention messages into broader financial crime training initiatives.
  3. Effective Communication: Communicate internal policies, the importance of whistleblowing, and the procedures to follow.
  4. Regular Updates: Keep training modules current with evolving fraud risks, regulatory updates, and personnel changes.
  5. Monitoring Effectiveness: Regularly assess and monitor training efficacy through feedback and performance evaluations.

Monitoring and Review: Continuous Improvement and Adaptation

Monitoring and review constitute the continuous feedback loop critical to fraud prevention. Organizations must regularly assess and refine fraud detection systems and response protocols based on real-world performance and evolving risks.

Monitoring involves detecting fraud, conducting robust investigations, and assessing the effectiveness of preventative measures. Organizations should ensure that sophisticated data analytics and AI-driven detection tools are employed effectively. Investigations must be independent, well-resourced, fair, and transparent, with results communicated to stakeholders.

Review processes ensure organizations adapt and improve continuously. Regularly scheduled reviews, supplemented by event-driven assessments in response to incidents or significant changes in risk, underpin an agile and resilient fraud prevention strategy. Utilizing external feedback and industry-wide insights, organizations can benchmark their strategies and implement best practices.

Five Key Takeaways on Monitoring and Review:

  1. Regular and Responsive Reviews: Schedule regular evaluations, complemented by prompt reviews triggered by specific fraud incidents or risk changes.
  2. Data-Driven Detection: Invest in advanced data analytics and AI tools to proactively detect fraud and fraud attempts.
  3. Independent Investigations: Ensure fraud investigations are conducted independently and transparently, with clearly documented processes and outcomes.
  4. Continuous Adaptation: Maintain flexibility in fraud prevention measures, promptly adapting strategies based on review outcomes and industry developments.
  5. Sectoral Benchmarking: Collaborate and engage with external entities and industry peers to adopt best practices and maintain practical fraud prevention standards.

Concluding Thoughts

As the countdown to the FTPF offense go-live continues, compliance professionals are tasked with a critical responsibility: to ensure their organization’s preparedness through meticulous due diligence, targeted training, and robust monitoring and review practices. Each component is integral to creating an effective, proportionate, and responsive fraud prevention strategy. By embedding these practices into the organizational fabric, compliance professionals not only safeguard their organizations but also reinforce ethical standards, protecting both reputation and long-term sustainability.

Categories
Daily Compliance News

Daily Compliance News: July 22, 2025, The I-9 Hell Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings to you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, including compliance, ethics, risk management, leadership, or general interest, relevant to the compliance professional.

Top stories include:

  • What is the cost of culture of silence at NASA? (WSJ)
  • Corruption tainting Milan skyline. (Bloomberg)
  • Companies stuck in ‘I-9 hell’ of paperwork. (FT)
  • Credit Suisse flagged Sanjeev Gupta for corruption, but the bank ignored it. (Bloomberg)

You can donate to flood relief for victims of the Kerr County flooding by going to the Hill Country Flood Relief here.

Categories
All Things Investigations

All Things Investigation – Due Diligence and Drama: A Deep Dive into Art World with Daniel Weiner

Welcome to the Hughes Hubbard Anti-Corruption & Internal Investigations Practice Group’s podcast, All Things Investigation. In this podcast, host Tom Fox is joined by Daniel Weiner to discuss a complex legal case involving a valuable Picasso painting.

Weiner is the Chair of Hughes Hubbard & Reed’s Litigation Department, Chair of the Complex Business Disputes practice, and a partner in the International & Domestic Arbitration and Intellectual Property Disputes groups. Daniel and Tom take a deep dive into the intricate details of how a series of fraudulent transactions led to a multimillion-dollar dispute over Picasso’s ‘Le Peintre.‘ The podcast highlights the importance of thorough due diligence in the art world and examines the legal complexities involved in resolving such cases. As they unravel the story, they highlight the crucial role of investigations in preventing art fraud and safeguarding ownership rights.

Key highlights:

  • The Fascinating Picasso Case
  • The Fraud Unveiled
  • Legal Issues and Investigations
  • Discovery Disputes and Court Proceedings
  • Consulting and Due Diligence in Art Law

Resources:

Daniel Weiner

Hughes Hubbard & Reed website

HHR Client Alert: Firm Obtains Discovery Win in Dispute Over Sale of Pablo Picasso Painting

Categories
FCPA Compliance Report

Amanda Carty on a Due Diligence and Risk Management

In this episode of the Diligent Compliance Week 2025 Speaker Preview Podcasts series, Amanda Carty discusses her presentation at Compliance Week 2025, “Going Beyond Due Diligence in Risk Management.”

Some of the issues she will discuss:

  • Demonstrate measurable and quantifiable ROI
  • Build psychological safety that drives ethical decision-making and engagement.
  • Navigate matrix environments to expand the influence.
  • Use data to tell compelling compliance success stories
  • Partner with the C-suite to help them navigate disruptive changes, including deregulation and major economic geopolitical shifts.

I hope you can join us at Compliance Week’s 20th Anniversary National Conference. This year’s event will be held April 28-30 at The Mayflower Hotel, Autograph Collection, Washington, D.C. The lineup is first-rate, with some top ethics and compliance practitioners around.

Drop by the Diligent booth for some Compliance Podcast Network coffee to gain insights and make connections at the industry’s premier cross-industry national compliance event, offering knowledge-packed, accredited sessions and take-home advice from the most influential leaders in the compliance community. Back for its 20th year, compliance, ethics, legal, and audit professionals will gather safely face-to-face to benchmark best practices and gain the latest tactics and strategies to enhance their compliance programs.

Categories
31 Days to More Effective Compliance Programs

31 Days to a More Effective Compliance Program: Day 22 – Levels of Due Diligence

Welcome to a special podcast series on the Compliance Podcast Network, 31 Days to a More Effective Compliance Program. Over these 31 days of the series in January 2025, Tom Fox will post a key part of a best practices compliance program daily. By the end of January, you will have enough information to create, design, or enhance a compliance program. Each podcast will be short, at 6-8 minutes, and will include three key takeaways you can implement at little or no cost to help update your compliance program. I hope you will join us each day in January for this exploration of best practices in compliance.

On Day 22, we consider the levels of due diligence you should use when investigating third parties. Tom outlines the three due diligence levels necessary to manage corruption risk effectively. With insights from Candice Tal, founder and CEO of Infortal, Tom breaks down each level in detail, from initial screenings in level one to comprehensive, on-the-ground investigations in level three. He emphasizes the need for tailored approaches based on the risks associated with different business transactions and the importance of thorough documentation throughout the process.

Key highlights:

  • What are the levels of Due Diligence?
  • When is each level appropriate?
  • Key Takeaways

Resources:

Click here to receive a 20% discount on The Compliance Handbook, 5th edition, for listeners to this podcast.

Categories
Sunday Book Review

Sunday Book Review: November 17, 2024 – The Books on Due Diligence Edition

In the Sunday Book Review, Tom Fox considers books that interest the compliance professional, the business executive, or anyone curious. These could be books about business, compliance, history, leadership, current events, or anything else that might interest Tom. In today’s Sunday Book Review edition, Tom Fox looks at four top books on due diligence for the compliance professional in November 2024.

  1. OSINT: The Authoritative Guide to Due Diligence by Cynthia Hetherington
  2. Due Diligence and Corporate Governance by Linda Spedding
  3. Business Due Diligence Strategies
  4. The Art of M&A Due Diligence, Second Edition: Navigating Critical Steps and Uncovering Crucial Data by Alexandra Lajoux & Charles Elson

 

Resources:

For more information on the Ethico Toolkit for Middle Managers, available at no charge, click here.

For more information on the first Annual Compliance Podcast Network Agora Awards for Excellent in Podcasting and to register, click here. There is no charge for this event.

Categories
FCPA Compliance Report

FCPA Compliance Report: Navigating Global Compliance and Risk – Lessons from The Pager Attacks

Welcome to the award-winning FCPA Compliance Report, the longest running podcast in compliance. In this edition of the FCPA Compliance Report, Tom Fox visits with Dr. Ian Oxnevad and Chris Mason from Infortal Worldwide about the Israeli attack on Hezbollah through its pagers and explores what all of this means for the compliance professional.

The podcast explores the compliance and supply chain ramifications stemming from pagers licensed by a Taiwanese company to a Hungarian firm which were subsequently used to disrupt Hezbollah’s operations. This incident serves as a springboard for discussing the broader implications for global businesses, emphasizing the essential role of due diligence in complex supply chains. The episode offers insightful commentary on how Hezbollah’s lack of scrutiny over their suppliers led to vulnerabilities that were exploited by Israel, acting as a cautionary tale for organizations everywhere. Key topics include the unexpected ways legitimate companies can be compromised, the pervasive nature of risk management, and the importance of vetting and verifying partners across all industries to maintain business integrity and reputation.

Highlights in this Episode:

  • Attack on Hezbollah
  • Compliance and Supply Chain Issues
  • Payment Anomalies and Red Flags
  • Lessons Learned and Risk Management
  • The Importance of Knowing Your Risk Profile
  • Unintended Consequences and Risk Management
  • Final Thoughts on Supply Chain Vulnerabilities

Resources:

Infortal Worldwide

Dr. Ian Oxnevad on LinkedIn

Chris Mason on LinkedIn

Tom Fox

Instagram

Facebook

YouTube

Twitter

Categories
Blog

The Bre-X Mining Scandal: Part 5 – A Guide for the 2024 Compliance Professional (Part 1)

As we close out this series on the Bre-X mining scandal, the lessons from this notorious case continue to resonate, especially for today’s compliance professionals. The fraud that led to the downfall of Bre-X and the ensuing financial catastrophe for countless investors serves as a stark reminder of the pivotal role compliance plays in maintaining the integrity of any business. This two-part conclusion will explore the critical takeaways for compliance professionals in 2024. In Part 1, I focus on due diligence, transparency, corporate governance, conflict of interest, and regulatory compliance.

The Importance of Rigorous Due Diligence

If Bre-X taught us anything, it is the value of relentless due diligence. In today’s fast-paced business environment, where misinformation can spread like wildfire and trust is fragile, compliance professionals must maintain an unwavering commitment to fact-checking and independent verification.

Verification of Claims. Compliance officers are the gatekeepers of corporate integrity. The Bre-X scandal is a textbook case of what happens when claims are accepted at face value without proper scrutiny. In 2024, ensuring that all claims—whether they pertain to financial projections, resource estimates, or technological capabilities—are rigorously verified by qualified third parties is more crucial than ever. This due diligence must extend beyond simple paper trails; it requires thorough, boots-on-the-ground verification.

Third-Party Validation. One of the core failures in the Bre-X case was the reliance on internal data, which went unchecked. Today’s compliance landscape demands an external layer of assurance. Relying solely on the company’s self-reported information can be perilous. Independent third-party audits, validation, and assessments are no longer optional; they prevent corporate fraud. External experts often see red flags insiders miss due to oversight or willful blindness.

Transparency and Accurate Reporting

Transparency is the lifeblood of compliance, and the Bre-X scandal illustrates what happens when companies stray from this fundamental principle. The fine line between optimism and misleading information can be blurry, but compliance officers must ensure this line is never crossed.

Clear and Honest Disclosure. Today’s compliance professionals must act as the arbiter of clear and accurate corporate disclosure. More is needed to provide minimal information that technically complies with regulations; companies must fully disclose material facts related to their performance, risks, and operational realities. Bre-X misled investors with rosy projections based on fraudulent data. Modern compliance teams must guard against the temptation to oversell the company’s prospects or downplay significant risks.

Avoiding Misleading Information. The Bre-X debacle warns about the dangers of making exaggerated or false claims to investors and stakeholders. In 2024, compliance professionals must adopt a zero-tolerance stance toward misleading information. This requires close collaboration with all departments, ensuring financial reports, press releases, and investor communications are fact-checked, realistic, and grounded in verifiable data. The role of compliance in safeguarding against exaggeration or outright deception cannot be overstated.

Strengthening Corporate Governance

One of the critical failures in the Bre-X case was weak corporate governance. As companies grow in complexity, ensuring robust oversight from the boardroom down is essential.

Effective Oversight. Boards of directors must not only be present; they must be actively engaged in the business. The Bre-X scandal exposed how passive oversight can contribute to unchecked fraud. Compliance professionals should ensure that board members, especially independent ones, are empowered to ask tough questions and hold management accountable. In 2024, compliance officers should push for regular, thorough reviews of corporate governance practices, ensuring that the board remains active in safeguarding the company’s integrity.

Separation of Duties. Another key lesson from Bre-X is the need for a clear separation of duties. The concentration of power in a few individuals, especially in processes like reporting geological results, led to unchecked manipulation. Modern compliance frameworks must ensure no single person holds too much sway over critical processes. In areas such as financial reporting or resource assessments, compliance professionals must establish checks and balances that prevent conflicts of interest and reduce the risk of fraud.

Understanding and Mitigating Conflict of Interest

Bre-X was rife with conflicts of interest that, had they been addressed, might have mitigated the extent of the damage. In 2024, compliance professionals must be vigilant in identifying and managing potential conflicts at all levels of the organization.

Identifying Conflicts. Conflicts of interest can undermine the integrity of any organization through personal financial gain, favoritism, or unaddressed personal relationships. Compliance officers must develop robust mechanisms for identifying and addressing conflicts before they escalate. In the Bre-X case, certain individuals stood to personally gain from inflated stock prices directly conflicting with their fiduciary duties. Modern-day compliance professionals must establish clear conflict-of-interest policies and ensure these are consistently enforced.

Establishing Clear Policies. It is not enough to identify conflicts; companies must have clear policies and procedures to manage them. This includes mandatory disclosures, regular audits, and a strong ethical culture encouraging employees to report potential conflicts. Employees should be trained to recognize conflicts of interest and be empowered to raise concerns without fear of retaliation. The Bre-X scandal reminds us that an unaddressed conflict of interest can lead to catastrophic outcomes for all stakeholders.

Enhanced Focus on Regulatory Compliance

Finally, the Bre-X scandal illustrates the importance of adhering to industry standards and anticipating regulatory changes. In the wake of Bre-X, Canada introduced NI 43-101, a set of strict guidelines for reporting mineral resources. The lesson here is that compliance professionals must stay current with regulations and be proactive in their approach.

Adhering to Industry Standards. In 2024, industry standards are constantly evolving. Whether environmental regulations, data privacy laws, or sector-specific standards like NI 43-101, compliance professionals must ensure that their organizations are always fully compliant. This requires staying informed about changes in the regulatory landscape and ensuring that the company’s internal practices are aligned with the latest requirements.

Proactive Compliance. Compliance officers should take a proactive approach rather than waiting for regulations to change. This includes monitoring industry trends, participating in industry working groups, and maintaining open lines of communication with regulators. Proactive compliance can prevent costly legal battles and protect the company’s reputation.

The Bre-X mining scandal remains a cautionary tale for compliance professionals, and the lessons learned from this case are more relevant than ever in 2024. By emphasizing rigorous due diligence, transparency, corporate governance, conflict of interest management, and proactive regulatory compliance, compliance officers can help safeguard their organizations against fraud and mismanagement that led to Bre-X’s downfall.

In Part 2 of this series, we will conclude this blog post by diving deeper into the evolving role of technology and how it has transformed the compliance landscape, offering new tools and challenges for today’s compliance professionals. Join us tomorrow.

Categories
Adventures in Compliance

Adventures in Compliance: The Last Bow Stories – Due Diligence Lessons from The Adventure of The Red Circle

Welcome to a review of all the Sherlock Holmes stories which are collected in the work, “The Last Bow“. It is a collection of eight detective stories written by Sir Arthur Conan Doyle, from 1908 to 1917. The collection spans some of the most intriguing cases and mysteries that Holmes and his loyal friend Dr. John Watson tackle.

Today we take up The Adventure of the Red Circle, which appeared in Strand Magazine in December 1911, as we consider investigative lessons for compliance professionals from The Adventure of the Red Circle.

In this story, we connect the narrative to important compliance lessons such as identifying hidden connections, understanding network dynamics, uncovering deception, building compelling cases for action, recognizing the power of influence, emphasizing collaboration, and the value of critical thinking. He also discusses the historical context of the story and its publication.

Key Highlights:

  • Warren’s Mysterious Lodger
  • Holmes’ Investigation and Discoveries
  • The Red Circle Crime Gang
  • Due Diligence Lessons for Compliance Professionals

Resources:

The New Annotated Sherlock Holmes

Sherlock Holmes FAQ

Connect with Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

For more information on Ethico and a free White Paper on top compliance issues in 2024, click here.