Categories
FCPA Compliance Report

FCPA Compliance Report – Maria D’Avanzo on Investigations

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast in compliance. In the latest episode of FCPA Compliance Report, Maria D’Avanzo from Traliant returns to discuss the essential role of outside counsel in FCPA investigations and the challenges that a CCO may face. They believe having trusted counsel with business acumen and commercial knowledge is vital, especially when discovering potential violations outside the initial scope of the investigation. Maria shares her experience working with the CEO and chair of the audit committee and offers excellent tips for compliance professionals learning to trust their gut. The speakers also discuss the importance of self-disclosure and equally applying disciplinary actions across different jurisdictions in misconduct cases. This explosive discussion is full of insights, advice, and best practices, making it a must-listen for anyone looking to improve their organization’s compliance standards. You won’t want to miss it!

Key Highlights:

  • Managing Whistleblower Complaints: Next Steps and Importance of Outside Counsel
  • FCPA Investigation Best Practices
  • Navigating investigations outside of the initial scope
  • Navigating Compliance Decision-Making
  • Internal Disciplinary Processes and Corporate Compliance
  • Supervised learning and DOJ cooperation challenges
  • The decision (or not) to self-disclose

Resources:

Maria D’Avanzo on LinkedIn

Traliant

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Uncovering Hidden Risks

Ep 5 – Tips for Internal Investigations While Maintaining Privacy

Randyll Newman, Supervisor of Student Data and Information Security for Prince William County Public Schools in Virginia, joins host Erica Toelle and guest host Christophe Fiessinger on this week’s episode of Uncovering Hidden Risks. Randyll oversees the planning, operation, and management of security for the school division’s network infrastructure, data, and student information systems. He also served 10 years as a police officer and detective in Fairfax County, Va., retiring from the United States Naval Reserves after serving 26 years. Randyll discusses how organizations approach internal investigations, how important it is to maintain privacy for students and faculty during these investigations, and examples from previous case studies.

In This Episode You Will Learn:
  • Prince William County Public Schools’ reputation for innovative education
  • How important it is to maintain privacy for students and faculty
  • Business requirements for internal investigations
  • Considerations and adherence to regulatory compliance: Family Educational Rights and Privacy Act (FERPA); and Children’s Internet Protection Act (CIPA)
  • Tips and advice for other organizations
Some Questions We Ask:
  • What principles guided the initiative to ensure user privacy?
  • Can you outline the privacy principles you follow during investigations?
  • How did you design the technical solution to meet these business requirements?
Resources:

For more background, read the PWCS Case Study

View Randyll Newman on LinkedIn

View Christophe Fiessinger on LinkedIn

View Erica Toelle on LinkedIn

Related Microsoft Podcasts:          

Listen to: Afternoon Cyber Tea with Ann Johnson 

Listen to: Security Unlocked

Listen to: Security Unlocked: CISO Series with Bret Arsenault

Discover and follow other Microsoft podcasts at microsoft.com/podcasts

Uncovering Hidden Risks is produced by Microsoft and distributed as part of The CyberWire Network. 

Categories
31 Days to More Effective Compliance Programs

Day 22 – Internal Reporting and Triaging Claims

The call, email, or tip comes into your office; an employee reports suspicious activity across the globe. That activity might well turn into an FCPA issue for your company. As the CCO, it will be up to you to begin the process, which will determine, in many instances, how the company will respond going forward. This is more than simply maintaining hotlines. Companies have to make real efforts to listen to employees. You need to have managers trained on handling employee concerns; they must be incentivized to take on this compliance responsibility, and you must devote communications resources to reinforcing the company’s culture and values to create an environment and expectation that managers will raise employee concerns. The Monaco Memo’s emphasis on internally detecting such actions and self-reporting makes this more important.

The reason is that a business’s employees are the company’s best source of information about what is going on in the company. It is certainly a best practice for a company to listen to its employees, particularly to help improve its processes and procedures. But more than listening to its employees, a company should provide a safe and secure route for employees to escalate their concerns. This is the underlying rationale behind an anonymous reporting system within any organization. Both the U.S. Sentencing Guidelines and the Organization of Economic Cooperation and Development (OECD) Good Practices list as one of their components an anonymous reporting mechanism by which employees can report compliance and ethics violations. Of course, the Dodd-Frank Whistleblower provisions also heed the implementation of a hotline.

Given the number of ways that information about violations or potential violations can be communicated to government regulators, a robust triage system is an important way for a company to determine what resources to bring to bear on a compliance problem.

Jonathan Marks has articulated a five-stage triage process that allows for an early assessment of any allegations and a manner to think through your investigative approach. Marks cautions you must have an experienced investigator or other seasoned professional making these determinations, if not a more well-rounded group or committee. Next, consider the types of evidence to review going forward. Finally, before selecting a triage solution, understand what tools are available, including forensic and human, to complete the investigation.

 Three key takeaways:

1. The DOJ and SEC put special emphasis on internal reporting lines.

2. Test your hotline regularly to make sure it is working.

3. Every claim should be triaged before starting an investigation.

Categories
Innovation in Compliance

Corporate Case Management in the Era of the DoJ’s Monaco Memo: Episode 5 – Data Drives Prevention

Welcome to a special podcast series, Corporate Case Management in the Era of the DoJ’s Monaco Memo, sponsored by i-Sight Software Solutions. Over this five-part podcast series, I visit with Jakub Ficner, Director of Partnership Development at i-SIght. This series considers how the Monaco Doctrine and Monaco Memo have impacted compliance in several key areas. In this concluding Part 5, we consider how data and data analytics are even more critical after the Monaco Memo and how using data can drive prevention and detection.

Highlights include:

  • How does ongoing monitoring lead to continuous improvement, and how does it relate to investigations?
  • How your investigative protocol can supplement ongoing monitoring.
  • How the outlays for your investigative process are a critical step going forward.
  •  Employing root cause analysis, corrective actions, and preventative action recommendations can provide valuable data from a holistic perspective.

For more information, check out i-Sight here.

Categories
Innovation in Compliance

Corporate Case Management in the Era of the DoJ’s Monaco Memo: Episode 4 – The Fair Process Doctrine

Welcome to a special podcast series, Corporate Case Management in the Era of the DoJ’s Monaco Memo, sponsored by i-Sight Software Solutions. Over this five-part podcast series, I visit with Jakub Ficner, Director of Partnership Development at i-SIght. This series considers how the Monaco Doctrine and Monaco Memo have impacted compliance in several key areas. In this Part 4, we look to consider the Fair Process Doctrine and how the Monaco Memo emphasized the requirements as laid out under the DOJ’s Evaluation of Corporate Compliance Programs and its Update.

 

Highlights include:

  • What are DOJ expectations?
  • The stakeholders needed to be involved with determining, recommending, and implementing that outcome based on your investigation.   
  • Why consistently applying the same disciplinary actions based on the nature of substantiated elements is critical.
  • What is the Fair Process Doctrine?
  • Following the Fair Process Doctrine is critical for the credibility of your investigative protocol.

For more information, check out i-Sight here.

Categories
Innovation in Compliance

Corporate Case Management in the Era of the DoJ’s Monaco Memo: Episode 3 -Ethical Investigations

Welcome to a special podcast series, Corporate Case Management in the Era of the DoJ’s Monaco Memo, sponsored by i-Sight Software Solutions. Over this five-part podcast series, I speak with Jakub Ficner, Director of Partnership Development at i-Sight Software. This series considers how the Monaco Doctrine and Monaco Memo have impacted compliance in several key areas. In this Part 3, we look at ethical investigations and how to allow your organization to meet the strictures of the Monaco Memo. Highlights include:

  • How did the Monaco Memo impact investigations?
  • The importance of keeping the reporter informed.
  • Why consistency and transparency are key aspects of the investigative process.
  • Creating an audit trail is in your investigation protocol.

For more information, check out i-Sight here.

Categories
FCPA Compliance Report

The EC Gang on the Monaco Doctrine

In this special 5 part podcast series, I am deeply diving into the Monaco Memo and analyzing it from various angles. In this episode of the FCPA Compliance Report, we have the Award-Winning Everything Compliance quartet of Jonathan Marks, Jonathan Armstrong, Karen Woody, and Tom Fox on the Monaco Memo.

1. Tom Fox looks at the Monaco Memo through the monitorship language and answers a listener’s questions about compliance programs under the Monaco Memo.

2. Karen Woody reviews the Monaco Memo, the self-disclosure angle, and investigatory considerations and ponders the role of defense counsel going forward.

3. Jonathan Marks also looks at investigatory issues under the Monaco Memo, the role of the Board of Directors, and the role of the forensic auditor under the Monaco Memo.

4. Jonathan Armstrong’s self-disclosure from a UK angle joins Karen Woody in questioning how defense counsel should move forward.

Resources

Tom 5-Part blog post series in the FCPA Compliance and Ethics Blog

1.     A Jolt for Compliance

2.     Timely Self-Disclosure

3.     Corporate Compliance Programs

4.     Monitors

5.     The Heat is On

Monaco Memo

Categories
FCPA Compliance Report

James Koukios on the Monaco Memo

In this special 5 part podcast series, I am taking a deep five into the Monaco Memo and analyzing it from a variety of angles. In this episode of the FCPA Compliance Report, I am joined by fan-fav James Koukios, a partner at MoFo. James is a former member of the FCPA Unit, and in this podcast, we take a deep dive into the Monaco Memo. Some of the highlights include:

  1. Issues involving individual accountability.
  2. Burden shifting on communications devices and timeliness of self-disclosing and reporting.
  3. How does the Monaco Memo lay out DOJ expectations?
  4. Monaco Memo at 30,000 ft and ground level…
  5. Tweaks to the Yates Memo formulation.
  6. New requirements to the FCPA Corporate Enforcement Policy
  7. Will the incentives be enough?

 Resources

James Koukios on MoFo

Tom 5-Part blog post series in the FCPA Compliance and Ethics Blog

  1. A Jolt for Compliance
  2. Timely Self-Disclosure
  3. Corporate Compliance Programs
  4. Monitors
  5. Polite Speech

Monaco Memo

Categories
Blog

Monaco Memo: A Jolt for Compliance: Part 2 – Swiftly and Without Delay

Today, we continue our exploration of the Monaco Memo by considering the section entitled “Timely Disclosures and Prioritization of Individual Investigations”. This portion of the Monaco Memo re-emphasized the reinstitution of the Yates Memo, first announced by Deputy Attorney General (DAG) Lisa Monaco in October 2021. Clearly the Department of Justice (DOJ) wants to increase the accountability of individuals who have engaged in criminal activities such as bribery and corruption under the Foreign Corrupt Practices Act (FCPA).

It is well-settled under the FCPA Corporate Enforcement Policy that for a company to be considered for a Declination or cooperation credit, the company must self-disclose its illegal conduct. However, self-disclosure is not enough; it now must be timely. The DOJ wants speed as well because, “If disclosures come too long after the misconduct in question, they reduce the likelihood that the government may be able to adequately investigate the matter in time to seek appropriate criminal charges against individuals. The expiration of statutes of limitations, the dissipation of corroborating evidence, and other factors can inhibit individual accountability when the disclosure of facts about individual misconduct is delayed.”

The Monaco Memo stated, “it is imperative that Department prosecutors gain access to all relevant, non­privileged facts about individual misconduct swiftly and without delay.” [emphasis supplied] This means, “ to receive full cooperation credit, corporations must produce on a timely basis all relevant, non-privileged facts and evidence about individual misconduct such that prosecutors have the opportunity to effectively investigate and seek criminal charges against culpable individuals.” If a company fails to meet this burden, it will “place in jeopardy their eligibility for cooperation credit.” The DOJ goes the next step by placing the burden on companies to demonstrate timeliness, stating they “bear the burden of ensuring that documents are produced in a timely manner to prosecutors.”

Moreover, it is not simply data or information. A company must seek out and disclose on this ‘timely’ basis, the evidence “that is most relevant for assessing individual culpability.” This type of evidence could include “information and communications associated with relevant individuals during the period of misconduct.” While the DOJ may well ask companies to prioritize evidence they are seeking in investigation, even with no such instruction or request from the DOJ, “cooperating corporations should understand that information pertaining to individual misconduct will be most significant.”

All of this was driven home by adding this timeliness requirement to the analysis of factors surrounding a company’s cooperation with the DOJ, as laid out in the FCPA Corporate Enforcement Policy. The Monaco Memo stated, “in connection with every corporate resolution, Department prosecutors must specifically assess whether the corporation provided cooperation in a timely fashion.” Some of the factors in this new analysis could include “whether a company promptly notified prosecutors of particularly relevant information once it was discovered, or if the company instead delayed disclosure in a manner that inhibited the government’s investigation.” And then the stick is lowered when “prosecutors identify undue or intentional delay in the production of information or documents – particularly with respect to documents that impact the government’s ability to assess individual culpability ­ cooperation credit will be reduced or eliminated.” There are no percentages as to how much this might entail but conceivably it could reduce a cooperation credit by between 25% to 50%. Of course, if this analysis is factored into the fine and penalty calculation under the US Sentencing Guidelines, the cost could even be higher to a company.

This new requirement presents several challenges for any company and compliance professionals involved in the corporate investigatory process. The DOJ emphasis is now on ‘timeliness’ which equates to speed. When a whistleblower or other report comes in, there should now be even more urgency to assess and triage and then elevate the report to the appropriate level. Remember, this is not about a corporate decision to self-disclose or not; although there are clear implications in that decision, this is about turning over evidence of culpable individuals. If the DOJ deems your turning over evidence as not timely, it could seriously impact your ability to get the full 25% credit under the FCPA Corporate Enforcement Policy for cooperation and remediation.

In terms of your investigation protocol, under the prior Policy interpretations, you complete the investigation and then bring it to DOJ. But now the DOJ may have an argument that you were untimely because you took three months, six months, nine months; however long it takes you to perform an investigation. James Koukios also provided some other examples, “you learn that there is going to be a newspaper article which is coming out shortly and it will allege your company of corruption. Ordinarily, you would go to DOJ first, even if do not have an investigative plan in place yet because you need to get ahead of that article.”

A similar situation could involve a whistleblower or if the government comes knocking. In these situations, your organization may not have been aware of the allegations or facts. “This means you will have to investigate and at that point, it is hard to say that you will deliver timely information at any point, because you do not know things up front.” This begs the question “is it timely that I bring it to you?” This can be even more problematic “if a prosecutor thinks, you should have brought this to me two months earlier, or you should have brought this to me three months earlier.” This may be even more true as the burden is on the company to demonstrate timeliness.

As I said there are many questions on this topic going forward.

I hope you will join me tomorrow where I look at guidance on corporate accountability.

Categories
FCPA Compliance Report

Alvarez & Marsal Threatscape 2022 Report

In this episode of the FCPA Compliance Report, I am joined by Keith Williamson and Henry Chambers, Managing Directors at Alvarez and Marsal. We look at the firm’s Threatscape Report. Highlights of this podcast include:

A.    Threat 1-ABC Threats

  1. Why do you see a potential increase in anti-corruption investigations?
  2. In addition to the US under the FCPA, do you see other countries are actively assisting US authorities in ABC investigations?
  3. The new DOJ Monaco Doctrine reinstate the Yates Memo and the DOJ focus on individuals.  What does this mean for ABC investigations?
  4. What are some of the key challenges in handling investigations in China?
  5. How does this increase in ABC enforcement impact M&A?

B.     Threat 2-Fraud and Digital Asset Fraud Threats

  1. What are digit assets and digit asset fraud?
  2. The US has not yet released many regulations regarding cryptocurrency. What is the role of other countries in such regulation, if any?
  3. Why is the Ukraine war the first ‘digital asset war’?
  4. How have the worldwide sanctions against Russia impacted the growth and use of digit assets?
  5. What are the key controls and screen tools for digital assets that you advocate a company employ?

C.     Threat 3-Data Privacy and Data Protection

  1. What is the Personal Information Protection Law and how does it relate to the Chinese State Secrets and Data Security Laws?
  2. How can a non-Chinese company get data out of China?
  3. What are some of the key components of compliance program for this new law?
  4. How does this new law impact investigations in China?

Resources