Categories
31 Days to More Effective Compliance Programs

Day 31 | Levels of due diligence


Due diligence is generally recognized in three levels: Level I, Level II and Level III. Each level is appropriate for a different level of corruption risk. The key is to develop a mechanism to determine the appropriate level of due diligence and then implement that going forward. The question becomes how you use the information you obtained in the business justification and the questionnaire to determine an appropriate level of due diligence for the next step in the five-step process of third-party management. A three-step approach of varying levels of due diligence is the appropriate analysis to take going forward.
A three-step approach was discussed in Opinion Release 10-02, in which the DOJ discussed the due diligence that the requesting entity performed. This Opinion Release sets out a clear break which every compliance practitioner should use in considering an appropriate level of due diligence to engage with your third-party risk management process or when considering the level of due diligence required on a potential business venture partner. A very good description of the three levels of due diligence was presented by Candice Tal, Founder and CEO of Infortal Worldwide, in an article entitled “Deep Level Due Diligence: What You Need to Know
Three key takeaways:

  1. A Level I due diligence should only be used where there is a low risk of corruption.
  2. A Level II due diligence is sufficient in a high-risk jurisdiction if there are no red flags to be cleared.
  3. Level III due diligence is deep dive, boots on the ground investigation.

 

Categories
31 Days to More Effective Compliance Programs

Day 27 | Pre-acquisition due diligence in mergers and acquisitions


A company that does not perform adequate due diligence prior to a merger or acquisition may face both legal and business risks. Perhaps most commonly, inadequate due diligence can allow a course of bribery to continue – with all the attendant harms to a business’s profitability and reputation, as well as potential civil and criminal liability. While most compliance practitioners have been long aware of the requirement in the post-acquisition context, the 2012 FCPA Guidance focused many compliance practitioners of the need to engage in robust pre-acquisition due diligence.
This was expanded again in the 2017 Evaluation but the 2019 Guidance made even more clear the need for a robust compliance presence in the pre-acquisition phase. It stated, “A well-designed compliance program should include comprehensive due diligence of any acquisition targets.  Pre-M&A due diligence enables the acquiring company to evaluate more accurately each target’s value and negotiate for the costs of any corruption or misconduct to be borne by the target.  Flawed or incomplete due diligence can allow misconduct to continue at the target company, causing resulting harm to a business’s profitability and reputation and risking civil and criminal liability.
Three key takeaways:

  1. The results of your pre-acquisition due diligence will inform your post-acquisition integration and remediation going forward.
  2. Periodically review your M&A due diligence protocol.
  3. If red flags appear in pre-acquisition due diligence, they should be cleared.

 

Categories
Popcorn and Compliance

The Empire Strikes Back and Due Diligence

Welcome to the Day 2 of a five-day podcast series Jay Rosen and I are producing in honor of the latest Star Wars movie The Last Jedi. Each day over this week, Jay and I will review a Star Wars movie and discuss it from the compliance perspective. Today, we consider Episode V, The Empire Strikes Back and due diligence.
This movie is my personal favorite of the initial trilogy. During the climactic battle between Luke Skywalker and Darth Vader, there is the BIG REVEAL where Vadar utters the immortal line, “I AM YOUR FATHER”. In the context of knowing who you are doing business with under the Foreign Corrupt Practices Act or UK Bribery Act. I once heard a company President say he did not need to perform due diligence because he looked a man in the eyes and that was enough to know if he was honest. (I should add, this company President also evaluated the strength of a handshake as an additional level of due diligence.) Hopefully we have moved past this level of sophistication for due diligence and its evaluation thereof.
There are three levels of due diligence and you must make a determination which is appropriate for the entity or person you are investigating. If a red flag appears it must be cleared or a risk management strategy articulated to allow moving forward.
Level I
First level due diligence typically consists of checking individual names and company names through several hundred Global Watch lists comprised of anti-money laundering (AML), anti-bribery, sanctions lists, coupled with other financial corruption and criminal databases. Level I due diligence addresses such basic issues as whether the third party actually exists, the identities of management, officers, directors and shareholders and whether such persons are on regulators’ watch lists. It can also provide some basic information on whether there are politically exposed persons (PEPs) involved in the third party. Finally, if there are any media reports linking the company to corruption.
Level II
Level II due diligence encompasses supplementing Level I due diligence with a deeper screening of international media, typically the major newspapers and periodicals from all countries plus detailed Internet searches. Such inquiries will often reveal other forms of corruption-related information and may expose undisclosed or hidden information about the company, the third party’s key executives and associated parties. Level II can give you information on adverse litigation, any bankruptcy proceedings, overt signs of financial difficulty. More generally it will also provide local online information such as corporate filings, regulatory filings, lawsuits and locally archived materials. You also be able to determine if there were any in-country investigations or sanctions from regulatory entities.
Level III
This level is the deep dive. It will require an in-country ‘boots-on-the-ground’ investigation and is designed to supply your company “with a comprehensive analysis of all available public records data supplemented with detailed field intelligence to identify known and more importantly unknown conditions. Seasoned investigators who know the local language and are familiar with local politics bring an extra layer of depth assessment to an in-country investigation.
Now imagine if Luke had performed a more robust level of due diligence on Darth Vadar? Would he have been able to find out Darth Vadar was his father? Perhaps not but then again, we might not have heard that seminal line “I AM YOUR FATHER”.
Join us tomorrow where we consider Return of the Jedi and effective training.
 

Categories
Compliance Man Chooses the Target

Episode 6: Due Diligence in High Risk Markets

Welcome to Episode 6 of Compliance Man Chooses the Target with Tim Khasanov-Batirov. Our goal is to highlight matters that should be on agenda of practitioners that deploy compliance programs in industries or countries of active FCPA enforcement. In this episode, we will target three specific matters that you might like to address in the course of implementation of your compliance program. Today we will focus on Due Diligence in high risk markets.
Join me for the next episode of Compliance Man Chooses the Target with Tim Khasanov-Batirov. 
Learn more compliance tips from Tim Khasanov-Batirov at: http://complianceinpostussr.com/ http://complianceinpostussr.com/blog/

Categories
This Week in FCPA

This Week in FCPA-Episode 148 – the Hope Springs Eternal edition

As Opening Day near and the Astros are predicted to unseat Jay’s Red Sox to win the 2019 World Series, both lads are eternally hopeful for their hometown heroes. While debating this issue, they also take a look at some of this week’s top compliance and ethics stories which caught their collective eyes this week.

  1. Former Hong Kong official sentenced for FCPA violations. Harry Cassin reports in the FCPA Blog. Matthew Goldstein reports on how to reduce your FCPA sentence in the New York Times.
  2. SEC awards two whistleblowers $50MM. Kristin Broughton in the WSJ Risk and Compliance Journal. Matt Kelly takes a deep dive in Radical Compliance. Doug Cornelius gets snarky in Compliance Building. Jonathan Marks weighs in on Board and Fraud.
  3. Jonathan Ruschand William Weaver debate whether corruption can be measured. Both on the FCPA Blog.
  4. Was it fraud or was it incompetency? The HP v. Autonomy civil trial begins in London. The BBC
  5. What is the difference in whistleblowing and extortion? Joe Mont explains in Compliance Week. (sub req’d)
  6. What are your supply chain risks? Russ Berland explores in Part 1 of a two-part blog post series on Corporate Compliance Insights.
  7. Looking at enforcement of financial market crimes in Canada and UK. Anita Anand reports in NYU’s Compliance and Enforcement Blog.
  8. What steps can you take to reduce whistleblower retaliation? Matt Kelly opines in Navex Global’s Ethics and Compliance Matters
  9. OECD slams Canadian government for interfering in SNC-Lavalin corruption investigation. Jonathan Rausch reports in Dipping Through Geometries.
  10. Join Tom and AMI’s Jesse Caplan for a 5-part exploration of emerging issues in healthcare compliance and monitoring. Check out the following: Part 1-Opioid Crisis-Legal issue; Part 2– Opioid Crisis-compliance solution; Part 3– the regulators; Part 4-the monitoring healthcare organizations; and Part 5-proactive monitoring. The podcast is available on multiple sites: the FCPA Compliance Report, iTunes, JDSupra, Panoplyand YouTube. The Compliance Podcast Network is now also on Spotifyand Corporate Compliance Insights.
  11. In Houston on April 11? Join the Greater Houston Business and Ethics Roundtable for a presentation for one year look back on GDPR. Registration and information are here.
  12. Check out the latest edition of Great Women in Compliance where Mary Shirley visits with Marianne Ibrahim.

Tom Fox is the Compliance Evangelist and can be reached at tfox@tfoxlaw.com. Jay Rosen is       Mr. Monitor and can be reached at jrosen@affiliatedmonitors.com.
For more information on how an independent monitor can help improve your company’s ethics and compliance program, visit our sponsor Affiliated Monitors at www.affiliatedmonitors.com.