Categories
All Things Investigations

ATI Podcast: Inhouse Insights – Building and Benefiting from a Culture of Compliance

Welcome to the inaugural episode of the newly rebranded ATI Podcast: Inhouse Insights—formerly known as All Things Investigations.

Presented by the Hughes Hubbard & Reed LLP Anti-Corruption & Internal Investigations Practice Group, this premiere episode sets the tone for a bold new chapter—bringing practical, in-house perspectives to today’s most pressing compliance challenges.

Host Michael DeBernardis welcomes Darryl Cyphers Jr., Senior Director of Legal Compliance at Klaviyo, for a candid and forward-looking conversation on how organizations can build—and sustain—a culture of compliance that actually works.

Together, they explore how compliance leaders can move beyond policies on paper to create real organizational impact—through measurable culture metrics, smarter use of AI to drive policy engagement, authentic tone at the top, and meaningful collaboration with HR and business partners. Darryl also shares practical guidance for navigating compliance gray areas and strengthening trust through continuous employee engagement and feedback.

Highlights include:

  • Defining a modern culture of compliance
  • Metrics and tools for measuring cultural effectiveness
  • Employee engagement and feedback that drive results
  • Building partnerships across HR and business teams
  • Innovative and engaging compliance training approaches
  • Navigating gray areas with confidence and credibility

Resources:

Hughes Hubbard & Reed Website

Klaviyo

Darryl Cyphers Jr. on LinkedIn

Categories
Blog

Returning to Venezuela: Why “Yes, If” Is the Only Defensible Compliance Answer

Most of you readers know that sometimes when I get going on a project, it (the project, not me) just keeps on growing. What started as a podcast with Matt Ellis on the risks of going back into Venezuela expanded out into a series of podcasts on the FCPA Compliance Report and with Mike DeBernardis on All Things Investigations. The podcasts led to a five-part blog post series on the same topic in the FCPA Compliance and Ethics Blog. I then needed to expand the blogs into a book and provide forms, checklists, frameworks, and deployment packs for compliance professionals to help them think through the issues presented in Venezuela and in other similarly high-risk jurisdictions.

All of that has led to the only book on how to return to Venezuela, Returning to Venezuela: The Compliance Guide to Yes, If (Title inspired by Mike DeBernardis). It is available in both print and eBook versions on Amazon.com.

When companies talk about returning to Venezuela, the conversation almost always begins with opportunity. Oil reserves. Market access. First-mover advantage. What the book Returning to Venezuela does is effectively reset that conversation where it belongs for compliance professionals: with reality. It is a disciplined, compliance-first analysis of what it actually means to operate in one of the world’s highest-risk jurisdictions.

The core message is uncompromising but straightforward: Venezuela is not a place for optimism, informal controls, or siloed compliance. It is a stress test. If your compliance program can function there, it can function anywhere. If it cannot, no license, policy, or assurance letter will save you. The book is not a warning label about Venezuela. It is a working manual for how a compliance function should assess risk, design controls, and govern decision-making before commercial momentum takes over.

Step One: Reframing the Risk Assessment

The first way a compliance professional should use Returning to Venezuela is to recalibrate how risk assessments are performed. Traditional country risk assessments often ask abstract questions: corruption perception scores, sanctions status, and enforcement history. Those inputs are necessary, but insufficient. Returning to Venezuela pushes compliance professionals to replace abstract scoring with operational mapping.

Instead of asking whether Venezuela is high risk, the framework asks:

  • Where will government discretion arise?
  • Where can delay be monetized?
  • Where does the business depend on intermediaries?
  • Where does value move, pause, or change form?

This is a critical shift. Risk is no longer treated as a country attribute. It becomes a process attribute. Compliance professionals can use Returning to Venezuela’s structure to redesign their risk assessment around real business steps: procurement, logistics, payment, security, licensing, and dispute resolution.

Step Two: Identifying Pressure Points Before They Become Incidents

Returning to Venezuela is especially useful in helping compliance professionals identify pressure points, not just risk categories. Pressure points are moments where the business is most likely to face demands for improper value, shortcuts, or exceptions. Procurement is one. Customs clearance is another. Security access, utilities, labor approvals, and payment routing are others.

Using Returning to Venezuela, compliance professionals can document:

  • Where pressure is expected;
  • Who owns the decision at that point?
  • What escalation looks like; and
  • When refusal or exit becomes mandatory.

This transforms compliance from a reactive role into a proactive role in designing decision architecture.

Step Three: Using the Checklists as Control Gates, Not Paper Artifacts

A common compliance failure is treating red flags as documentation exercises rather than control mechanisms. One of the strengths of Returning to Venezuela is that its red flags are designed as gates, not records. Each checklist answers a single question: Is this activity governable under our current assumptions?

Compliance professionals can deploy these checklists at defined moments:

  • Market entry discussions
  • Vendor and JV selection
  • Transaction structuring
  • Payment and banking design
  • Security and logistics planning

If a red flag cannot be cleared, the activity cannot proceed. That discipline is what makes the framework defensible. It also protects compliance officers personally, because decisions are anchored in documented governance rather than informal judgment.

Step Four: Integrating Risk Domains Instead of Managing Them in Silos

Another way compliance professionals should use Returning to Venezuela is as a blueprint for breaking down internal silos. The book makes clear that in Venezuela, corruption, export controls, AML, sanctions, security, and extortion are not separate risks. They are interconnected expressions of the same operating pressure. Treating them separately guarantees blind spots.

Practically, this means compliance can use the book to justify:

  • Integrated risk reviews instead of sequential sign-offs;
  • Shared escalation forums across functions;
  • Unified monitoring rather than separate dashboards; and
  • Common exit triggers across risk domains.

This is particularly important for AML. Returning to Venezuela positions money laundering risk not as a standalone compliance obligation, but as the capstone test of whether the entire framework works.

Step Five: Structuring Board Oversight Around Decisions, Not Updates

Too often, boards receive high-level compliance updates that provide comfort but not clarity. Returning to Venezuela gives compliance professionals a way to reframe board oversight around decisions, not reports. Using the board materials and decision templates, compliance can:

  • Force explicit risk acceptance;
  • Document assumptions that underpin approvals;
  • Secure delegated authority to pause or exit operations; and
  • Establish clear revisit and escalation triggers.

This protects both the organization and the compliance function. When conditions change, the discussion is no longer “Why did this happen? ” but “Which assumption failed, and what decision does that trigger? ” That is governance functioning as intended.

Step Six: Building a Repeatable Risk Management Framework

The final and most important way to use Returning to Venezuela is as a template, not a one-off Venezuela playbook. While the facts are Venezuela-specific, the framework is portable. Compliance professionals can lift this framework and apply it to:

  • Other high-risk markets;
  • Post-merger integration;
  • Sanctions-heavy environments; and
  • Complex third-party ecosystems.

The Appendices: The Operational Backbone of Returning to Venezuela: Yes, If

One of the defining features of Returning to Venezuela: The Compliance Guide to Yes, If is that it does not stop at analysis. The appendices convert risk identification into governance, decision-making, and operational control. They are not academic supplements. They are the machinery that makes a “yes, if” decision possible in practice.

Taken together, the appendices form an integrated compliance control stack designed for one purpose: to govern decision-making in an environment where corruption, coercion, sanctions, AML exposure, and weak rule of law are not edge cases but daily conditions.

Appendix A: One-Page Operational Checklists

Appendix A contains a series of one-page checklists, each focused on a distinct but interconnected risk domain. These are not policy summaries. They are operational gating tools meant to be used before decisions are made, not after problems occur.

Appendix B: The CCO Deployment Pack

Appendix B is written from the perspective of the Chief Compliance Officer and is explicitly operational. It is designed to be deployed internally to executive leadership, business sponsors, and control functions.

Appendix C: Board of Directors Materials

Appendix C is aimed squarely at directors and audit or compliance committees. Its function is not to educate boards on Venezuela generally but to structure how boards make, record, and revisit risk acceptance decisions.

Appendix D: Decision-Making Frameworks

Appendix D pulls together the logic underlying the entire book. It provides decision-making frameworks that force organizations to confront uncomfortable realities before committing resources.

How the Appendices Work Together

Individually, each appendix addresses a specific audience or function. Collectively, they form an integrated control system that aligns:

  • Operational decision-making.
  • Compliance authority.
  • Board oversight.
  • Exit discipline.

The appendices are designed to prevent the most common failure pattern in high-risk jurisdictions: waiting until conditions deteriorate before asking hard questions. By then, leverage is gone.

Final Thought

The most important contribution of Returning to Venezuela is that it does not accurately describe risk. It shows compliance professionals how to operate in the real world without surrendering control.

Used correctly, the book becomes a working tool:

  • To assess risk honestly;
  • To design controls that hold under pressure;
  • To align management and the board, and finally
  • To decide when “yes” becomes “no.”

For compliance professionals, that is not just risk management. It is about meeting the business in an operational setting with a risk management strategy for literally the highest risk on earth.

You can purchase Returning to Venezuela: The Compliance Guide to Yes, if on Amazon.com.

Categories
All Things Investigations

All Things Investigations – DOJ’s Evolving Guidelines: Implications from Liberty Mutual’s FCPA Case

Welcome to the Hughes Hubbard Anti-Corruption & Internal Investigations Practice Group’s podcast, All Things Investigation. In this podcast, host Tom Fox welcomes back Mike DeBernardis to discuss the recently released first Foreign Corrupt Practices Act (FCPA) enforcement action, a Declination involving Liberty Mutual Insurance Company.

Mike DeBernardis, partner at Hughes Hubbard & Reed, and Tom delve into the first FCPA enforcement action of 2025 involving Liberty Mutual. They discuss the nuances of self-disclosure during ongoing investigations, the challenges facing defense attorneys, and the expectations set by the new corporate enforcement policy. Key topics include proactive cooperation, dealing with deconfliction, and the importance of root cause analysis. The conversation provides valuable insights into how the Department of Justice communicates its expectations through enforcement actions and the evolving landscape of corporate compliance.

Key highlights:

  • Exploring the Liberty Mutual Case
  • Challenges of Early Self-Disclosure
  • Corporate Enforcement Policy Changes
  • Full and Proactive Cooperation
  • De-confliction in DOJ Investigations
  • Root Cause Analysis Importance
  • Social Media and Ephemeral Messaging

 Resources:

Hughes Hubbard & Reed website

Mike DeBernardis

Categories
Data Driven Compliance

Data Driven Compliance – The Failure to Prevent Fraud Offense: Insights for US General Counsels with Mike DeBernardis

Welcome to Season 2 of the award-winning Data Driven Compliance. In this new season, we will look at the new Failure to Prevent Fraud offense. Join host Tom Fox as we explore this new law and how to comply with it through the lens of data-driven compliance. konaAI sponsors this podcast. In this episode of Season 2, Tom Fox is joined by Mike DeBernardis, Partner at Hughes Hubbard & Reed.

In this episode, Tom and Mike look at the specific offenses listed in the Failure to Prevent Fraud Offense and translate them into US-legalese. They discuss common misunderstandings among US lawyers, the broad jurisdictional scope, and specific fraud types under UK law, such as fraud by false representation, failure to disclose information, and abuse of position. They also emphasize the importance of risk assessments for US companies with UK operations to ensure compliance and avoid legal repercussions, and also touch on the potential geopolitical implications and the necessity of having robust policies and procedures to prevent fraud. 

Key highlights:

  • Fraud by False Representation
  • Fraud by Failing to Disclose Information
  • Fraud by Abuse of Position and Obtaining Services Dishonestly
  • Corporate Fraud: Participation, Accounting, and Trading
  • Risk Mapping and Compliance Strategies

Resources:

⁠Hughes, Hubbard & Reed⁠

Mike DeBernardis on ⁠LinkedIn⁠

⁠New Considerations for Companies with U.K. Ties: Home Office Issues Guidance to Organisations on the Offence of Failure to Prevent Fraud⁠

⁠konaAI⁠, a Covasant company

Click here for konaAI White Paper Rethinking Compliance: Practical Steps for Adapting to the UK’s New Fraud Legislation

Connect with Tom Fox on ⁠LinkedIn

Categories
All Things Investigations

All Things Investigations – Task Force Strategies: Addressing New Government Priorities

Welcome to the Hughes Hubbard Anti-Corruption & Internal Investigations Practice Group’s podcast, All Things Investigation. In this podcast, host Tom Fox is joined by HHR lawyers Mike DeBernardis and Sean Reilly to discuss the new HHR Task Force.

In this award-winning All Things Investigations podcast episode, host Tom Fox converses with Hughes Hubbard and Reed partners Mike De Bernardis and Sean Reilly about the firm’s strategic reorganization. Responding to the U.S. administration’s fresh focus on cartels and foreign terrorist organizations, Hughes Hubbard has built a cross-disciplinary task force. This team combines expertise from compliance, sanctions, and dispute resolution practices to address companies’ heightened risks and compliance obligations, particularly in Mexico and Latin America. The discussion also covers implications for multinational corporations, the importance of reassessing risk, how the administration’s prioritization of certain enforcement actions can influence corporate strategies, and the emerging dangers surrounding tariffs and the False Claims Act.

Key highlights:

  • Hughes Hubbard’s New Task Force
  • Implications of Cartel Designations
  • National Security and Voluntary Disclosure
  • Cross-Functional Task Force Benefits
  • Tariff Evasion and False Claims Act

Resources:

Mike DeBernardis

Hughes Hubbard & Reed website

Sean Reilly

Categories
Fox on Podcasting

Fox on Podcasting – Celebrating Excellence in Podcasting in the Domestic Arena

Join Tom Fox as he explores the world of podcasting, and get ready to be inspired to start your podcast. Today, we begin a three-part series on honoring excellence in podcasting and the Agora Awards. In this second episode celebrating the Compliance Podcast Network Agora Awards, host Nick Gallo introduces four guests and hosts of their own podcasts: Mike Volkov, Matt Kelly, Mike DeBernardis, and Karen Woody.

In this episode, we stress the importance of being listenable and engaging rather than rigidly adhering to a set script when discussing compliance issues. Reflecting on experiences from 14 to 15 years ago, it’s clear that a heavily scripted approach can fall short. All our guests agree that a more conversational format resonates better with audiences. We focus on meaningful dialogues, keep episodes concise, typically around 20 minutes, and highlight the value of slowing down and prioritizing listener engagement over extensive, pre-planned talking points.

Key highlights:

  • Engaging Podcasting
  • Evolution with Compliance Into the Weeds
  • Building a Good Conversation
  • Podcast Length and Ambitions

Resources:

Matt Kelly

Compliance into the Weeds

Everything Compliance

Karen Woody

The Woody Report

Classroom Insiders

Succession-the Final Season

Everything Compliance

Mike DeBernardis

All Things Investigation

Mike Volkov

Corruption, Crime and Compliance

Categories
All Things Investigations

All Things Investigations: FCPA Alert Week – Mike DeBernardis on the FCPA & Anti-Bribery 2024 Alert

Welcome to the Hughes Hubbard & Reed Anti-Corruption & Internal Investigations Practice Group’s podcast, All Things Investigation. This week, we will feature five lawyers from HHR to introduce the firm’s always popular and annual FCPA and Anti-Bribery Alert. In this first podcast of the 5-part series, host Tom Fox joined Mike DeBernardis to introduce the Alert and some key themes and highlights from the FCPA and anti-bribery in 2024.

In the inaugural episode celebrating the Hughes Hubbard & Reed FALL 2024 FCPA and Anti-Bribery Alert, Tom is joined by Mike DeBernardis. They delve into the significance of Hughes Hubbard & Reed being the first major firm to release their FCPA alert each year and discuss the creative introduction themed around 1999 movies, including a quote from ‘The Matrix.’ The Alert is segmented into four comprehensive chapters covering analysis, policy developments, corporate resolutions, international focus, and updates from multilateral development banks. Key trends such as treating past misconduct and encouraging whistleblowing are highlighted, along with an ongoing issue of gifts and hospitality in corporate resolutions. The audience is encouraged to access the report on the firm’s website for more detailed insights.

Key highlights:

  • Overview of the FCPA and Anti-Bribery Alert
  • The Matrix Quote and Its Relevance
  • Detailed Breakdown of the 2024 Alert
  • Key Highlights and Trends
  • Focus on Gifts and Hospitality

Resources:

Hughes Hubbard & Reed website

2024 Fall FCPA and Anti-Bribery Alert

Mike DeBernardis

Categories
All Things Investigations

All Things Investigations: Anchored in Fraud: Mike DeBernardis and Shayda Vance on Austal USA’s Scandal

Welcome to the Hughes Hubbard Anti-Corruption & Internal Investigations Practice Group’s podcast, All Things Investigation. In this podcast, host Tom Fox is joined by guests Mike DeBernardis and Shayda Vance to discuss the significant case involving Austal USA, a shipbuilding company facing charges of securities fraud and obstruction of a federal audit due to the misreporting of costs for U.S. Navy ships.

The episode delves into the actions taken by the DOJ and SEC and underscores the complexities involved when senior executives are implicated in fraud and the challenges companies face in maintaining compliance and cooperation with government investigations. The conversation highlights the importance of having a robust compliance program and the critical role of the board of directors in overseeing investigations. The guests also explore the specific ramifications for government contractors and defense contractors and the significant impact of U.S. jurisdiction on foreign companies listed on American Deposit Registries. Through the lens of the Austal case, the discussion provides vital insights and lessons for compliance professionals, corporate executives, and board members.

Key Highlights

  • Details of the Fraud and Legal Actions
  • Lessons Learned and Analysis
  • Government Contractors and Compliance Programs
  • Challenges in Replacing Senior Executives
  • Significance of ‘Not Presently Responsible’ in Government Contracting
  • Implications of Listing on the American Deposit Registry

Resources:

Hughes Hubbard & Reed website

Categories
The Corruption Files

The Corruption Files: Exploring The Teapot Dome Scandal: Lessons from a Century – Old Corruption Case

What is stranger than fiction? The stories of worldwide corruption. In this podcast series, co-hosts Tom Fox, the Voice of Compliance and Mike DeBernardis, partner at Hughes Hubbard discuss some of the most audacious corruption cases in anti-corruption enforcement. More importantly, they will discuss the lessons learned on what your organization can do to prevent running afoul of international anti-bribery laws.

In this episode of Season 2, Tom and Mike take a deep dive into one of the seminal scandals of the 20thcentury, the Teapot Dome scandal.

The infamous Teapot Dome scandal occurred during Warren Harding administration. Tom and Mike take a deep dive into a historical overview of the event, detailing steps taken by key figures like Albert Fall, who leased federal oil reserves to his associates without competitive bidding, resulting in massive corruption and eventual convictions. The discussion highlights the scandal’s significant impact on U.S. governance, including the first conviction of a former cabinet member, and underscores enduring compliance lessons relevant to modern-day corruption cases.

Key Highlights:

  • Historical Context of the Teapot Dome Scandal
  • The Scandal Unfolds: Key Players and Actions
  • Investigations and Revelations
  • Legal Consequences and Fallout
  • Lessons and Reflections

Resources:

Mike DeBernardis on LinkedIn

HughesHubbardReed

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
All Things Investigations

All Things Investigations: ‘This Can Be Done’: Mike DeBernardis on Navigating Compliance in High – Risk Jurisdictions

Welcome to the Hughes Hubbard Anti-Corruption & Internal Investigations Practice Group’s podcast, All Things Investigation.

In this podcast, host Tom Fox welcomes back Mike DeBernardis to discuss recent corruption convictions involving individuals connected to Venezuela, as highlighted in Hughes Hubbard & Reed’s ‘Month in a Minute.’

We use these criminal matters as a starting point to discuss how companies can effectively manage compliance in high-risk areas by assessing risks, crafting risk management strategies, implementing specific controls, documenting processes, and training employees. We emphasize the importance of maintaining thorough documentation to meet regulatory requirements and auditing standards.

Key Highlights:

  • Month-in-a Minute Overview
  • Compliance in High-Risk Areas
  • Risk Management Strategies
  • Documenting and Presenting Compliance

Resources:

Hughes Hubbard & Reed website

Mike DeBernardis