31 Days to a More Effective Compliance Program

2023 was a very significant year for every compliance practitioner and compliance program. While there was a paucity of corporate enforcement actions under the Foreign Corrupt Practices Act (FCPA), there were significant announcements from the Department of Justice (DOJ) that directly impacted compliance professionals and compliance programs.

The first came in January, and it was an update to the Evaluation of Corporate Compliance Programs (2023 ECCP). Next, we heard speeches about the increased focus on clawbacks and other areas of consequence management. In October, Deputy Attorney General (DAG) Lisa Monaco introduced a new Mergers & Acquisitions Safe Harbor Policy in October. Finally, in late November, Acting Principal Deputy Assistant Attorney General Nicole M. Argentieri Delivered remarks at the 39th International Conference on the Foreign Corrupt Practices Act (FCPA) on the use of data analytics in a compliance program and DOJ expectations going forward.

The 2023 ECCP brought forward several new initiatives laid out in the 2020 Update to the Evaluation of Corporate Compliance Programs, including additions and deletions.

In October 2023, Deputy Attorney General Lisa Monaco announced a new policy regarding M&A. It is a Mergers & Acquisitions Safe Harbor policy that encourages companies to self-disclose criminal misconduct discovered by an acquiring company during the acquisition of a target company.

In November, Nicole Argentieri, Acting Assistant Attorney General for the Criminal Division, speaking at the ACI National FCPA, reported that the DOJ is stepping up its own use of data analytics to identify instances of corporate misconduct and will boost its cooperation with overseas law enforcement to bring more anti-corruption cases as well. The DOJ and SEC are increasingly focusing on data analytics for corporate compliance, signaling higher expectations for larger companies. Both agencies have successfully utilized data analytics in various areas, such as securities and healthcare fraud, and are actively improving their own capabilities in this field. She made several important points for all compliance professionals, which will be significant going forward into 2024 and beyond.

Three key takeaways:

1. 2023 was a key year for the DOJ’s evolution in its views on compliance programs.

2. Clawbacks, incentives, and consequence management have become more important.

3. The new DOJ safe harbor initiative for M&A raises many questions.

Learn more about your ad choices. Visit megaphone.fm/adchoices

“Reg Ops” or Regulatory Operations has the potential to revolutionize compliance. Reg Ops focuses on automating software development and compliance artifact creation, making it easier for compliance professionals to create it and for employees and other stakeholders to consume compliance content through automation and user-friendly interfaces. This approach aims to leverage the best of both worlds – the capabilities of machines and the expertise of humans – to enhance compliance programs. Or as Carsten Tams continually reminds us, it is all about the user experience.

The goal is to integrate existing security and compliance tools to gather evidence in near real-time, automate the creation of compliance gap tickets, generate real-time reports, and provide a comprehensive view of an organization’s compliance state. By leveraging the power of APIs and customer-centric design, the compliance process can be more effective and efficient.

 Three key takeaways:

 Three key takeaways:

1. Enhancing compliance programs through automation is a critical step for compliance functions and businesses to improve decision-making, efficiency, and overall compliance effectiveness.

2. Automation can help compliance functions meet the need for near real-time reporting for a variety of different stakeholders.

3. Balancing the need for real-time reporting with data accuracy and security is crucial.

For more information on our sponsor, KonaAI, click here.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In the world of compliance, data analysis plays a crucial role in identifying risks, making informed decisions, and ensuring legal and regulatory compliance. It enables companies to make fact-based decisions and mitigate risks effectively. By leveraging AI, organizations can identify high-risk payments and reduce investigation costs. This not only saves time and resources but also ensures that compliance teams can present risk in a timely and data-driven manner. We previously noted that it is not simply about having the data but also accessing it and then using it.

A key in this process is the implementation of data warehouses and cloud data warehousing solutions. The goal is to eliminate data silos and enable easy data access and analysis. By implementing a modern data stack, companies centralize their data, making it compliance-friendly as mandated by the DOJ (in the 2020 Evaluation of Corporate Compliance Programs) and more generally accessible to employees across the organization.

AI-driven data analysis and compliance solutions are revolutionizing the way organizations approach compliance and data utilization. By leveraging AI technology, these companies enable businesses to make fact-based decisions, identify risks, and ensure regulatory compliance. Investing in data governance and business intelligence tools is crucial for extracting value from data and driving business success. With the democratization of data access, organizations can empower employees to be data-informed and achieve greater efficiency. 

 Three key takeaways:

1. Data analysis is not simply about having the data but also accessing it and then using it.
2. Data democratization recognizes that effective data utilization is linked to compliance and good business practices.
3. With the democratization of data access, organizations can empower employees to be data-informed and achieve greater business efficiencies.

For more on KonaAI, click here. 

Learn more about your ad choices. Visit megaphone.fm/adchoices

ESG integration focuses on incorporating environmental, social, and governance considerations into business processes. This broader overview allows organizations to gain a comprehensive understanding of their impact, save costs, improve efficiency, and increase profitability. However, it is important to note that ESG initiatives often come with additional costs, as environmentally sound products may be more expensive than traditional alternatives. This is a tradeoff that companies must carefully consider when implementing ESG practices.

ESG integration in business processes is crucial for organizations aiming to enhance their compliance programs and make informed decisions. By leveraging data analytics, companies can identify and address ESG risks and opportunities more effectively. Collaboration and information sharing among companies also play a significant role in improving compliance efforts. As the compliance landscape continues to evolve, staying informed and adapting to new evaluation processes will be key for compliance professionals.

Three key takeaways:

1. ESG integration in business processes is crucial for organizations aiming to enhance their compliance programs and make informed decisions.
2. By leveraging data analytics, companies can identify and address ESG risks and opportunities more effectively.
3. Collaboration and information sharing among companies also play a significant role in improving compliance efforts.

For more information on KonaAI, check out their website here.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Through leveraging AI-driven solutions, companies can collect and analyze survey data to identify patterns and trends that may indicate potential risks. This empowers organizations to take proactive measures to mitigate these risks and foster a culture of trust and transparency.

Another area of significance is mapping risks to controls. This allows a compliance professional or risk manager to know where risks are occurring within an organization and then map them to corresponding controls. This permits compliance functions to assess the effectiveness of their controls and identify areas that require improvement. By leveraging AI-driven solutions, organizations can gain a comprehensive understanding of their risk landscape and make data-driven decisions to strengthen their control environment.

AI-driven solutions have the potential to revolutionize risk assessment and fraud prevention. By leveraging these solutions, companies can enhance their compliance efforts, improve efficiency, and make data-driven decisions. However, it is crucial to balance automation with human expertise and address challenges related to data availability and quality. Ultimately, the successful implementation of AI-driven solutions requires a holistic approach that considers the impact on employees, fosters a culture of trust and transparency, and aligns with the organization’s risk management objectives.

Three key takeaways:

1. Data visibility allows organizations to effectively manage their compliance efforts and make data-driven decisions.
2. By leveraging AI-driven solutions, compliance functions can generate dashboards and analytics that provide real-time insights into their risk landscape.
3. This not only improves efficiency but also enables auditors to focus on understanding the data and identifying potential risks.

For more information on this month’s sponsor check out KonaAI.com.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Chief Compliance Officers (CCOs) are increasingly turning to data analytics programs to enhance their compliance efforts. These programs leverage the power of data to identify risks, monitor activities, and detect potential compliance violations. There are several key factors that impact the success of building out data analytics programs. One crucial aspect is the need to define the risks that organizations want to monitor. By identifying the specific risks, compliance officers can focus their data analytics efforts on gathering relevant data and analyzing it to gain insights into potential compliance issues. This process involves thinking innovatively and finding creative ways to capture data that may not be immediately obvious.

Building effective data analytics programs for compliance enhancement requires careful consideration of various factors. Compliance officers must define the risks they want to monitor, identify valuable data sources, and think innovatively to capture relevant data. Leveraging internal expertise and fostering collaboration between different departments is essential for successful implementation. By starting small and gradually expanding their capabilities, organizations can demonstrate their commitment to using data analytics and gain compliance expertise. Ultimately, these programs enable companies to enhance their compliance effectiveness and mitigate risks effectively.

 Three key takeaways:

1. There are multiple factors in the design, creation, and implementation of a data-driven compliance program.

2. A data-driven approach will allow a shift of the focus from individual policy violations to identifying systemic issues.

3. Compliance officers should focus on how to begin and gradually build their capabilities.

Check out the month’s sponsor, KonaAI here.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In today’s rapidly evolving business landscape, compliance and risk management have become critical components of any successful organization. With the increasing complexity of regulations and the growing need for transparency, companies are turning to AI and data-driven solutions to enhance their compliance programs and mitigate risks. A key to this approach is the user adoption of AI-driven compliance tools. 

AI and data-driven solutions have the potential to revolutionize compliance and risk management practices. By leveraging advanced analytics, machine learning, and automation, organizations can enhance decision-making processes, improve efficiency, and proactively address compliance risks. However, it is essential to prioritize user adoption, consider the impact on user experience, and strike a balance between automation and human judgment. With the right approach, AI and data-driven solutions can become valuable assets in the pursuit of effective compliance and risk management.

 Three key takeaways:

1. Compliance, risk management and corporate legal can all benefit from a data-driven approach to risk management.  

2. By setting up alerts, compliance officers can be notified in real-time about potential risks or non-compliant activities.

3. There will always be the need for a balance between automation and human judgment.

For more information on this month’s sponsor KonaAI, check out their website, here.

Learn more about your ad choices. Visit megaphone.fm/adchoices

In the world of compliance, data analytics and monitoring have become increasingly important. The Department of Justice (DOJ) has emphasized the significance of effective compliance programs, highlighting the role of data analytics and technology-driven approaches. Data driven compliance helps companies gain insights into their data for informed decisions and improved compliance culture. Data-driven compliance should be designed to identify hidden money, prevent improper payments, and improve business efficiency. A key is the ability to facilitate collaboration and data sharing without compromising privacy or security, thereby enhancing the performance of predictive models.

In the Albemarle FCPA enforcement, the DOJ said for the first time that data-driven compliance is now a part of the requirements of an effective compliance program. By leveraging data and data analytics, compliance professionals more effectively manage risks, improve compliance culture, investigate issues, and ultimately keep companies out of trouble. Additionally, a robust data analytics platform will also contribute to making the business better by identifying hidden money, stopping improper payments, and enhancing overall business efficiency.

By leveraging data analytics, companies can identify hidden money, prevent improper payments, and enhance overall business efficiency. In today’s regulatory environment, the risk of not adopting data-driven compliance approaches is high, making solutions essential for companies seeking to stay compliant and improve their business practices.

 Three key takeaways:

1. The DOJ identified data analytics as a part of a best practices compliance program in the Albemarle FCPA enforcement action. 

2. Data-driven compliance allows companies to access their data, search vendors, analyze transactions, run corruption and fraud tests, and even evaluate predictive models.

3. Data-driven compliance should be designed to identify hidden money, prevent improper payments, and improve business efficiency.

For more information on KonaAi, click here.

Learn more about your ad choices. Visit megaphone.fm/adchoices

One of the biggest benefits of podcasting is that it allows businesses to connect with their audience more personally. Unlike traditional forms of advertising, which often come across as impersonal and sales-driven, podcasts enable businesses to build a loyal following by offering valuable and engaging content. This can include interviews with industry experts, behind-the-scenes glimpses of the business, and informative discussions on relevant topics.

Now take these same concepts of audience engagement and apply them internally to an organization. What do you potentially have? A mechanism to engage your employees, to engender trust, and to improve your overall corporate culture. Do you think this is a crazy way to improve culture? Think again about all the advantages podcasting has in place already.

A major US consumer product company started a podcast and had corporate executives on it. Who were the biggest fans of the podcast? It turned out it was the company employees, many of whom had never met their corporate executives. This allowed the executives to be humanized in a way no number of town hall meetings or other similar corporate events could ever achieve.

Podcasting is a powerful tool that corporate compliance programs can use to connect with their audience on a more personal level. By investing in podcasting, corporations can create engaging and informative audio content that will help build their ethical brand (culture) and drive employee engagement. If you want a new and different way to talk to your employees, why not try podcasting?

Since you are only limited by your imagination in compliance, why not use some of that to be creative in your compliance training and communications? Podcasting has become an essential tool for businesses to connect with their employees, establish themselves as thought leaders, and promote their values and culture. By investing in the right podcast equipment and software, corporate compliance functions can create high-quality audio content that engages their audience helps to achieve their ethical goals, and improves the culture of any organization.

 Three key takeaways:

1. You can improve employee trust and corporate culture through employee trust.

2. Communicating through a podcast can increase your brand promise with employees and other stakeholders.

3. An internal podcast can humanize your leadership to your employees.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Retaliation against a person who speaks up is a pervasive issue that not only creates a toxic work environment but also discourages victims from reporting incidents. This means you must address retaliation and encourage reporting in workplaces. When employees report harassment face severe retaliation, which leads to a loss of trust in the reporting process. This fear of being labeled a “rat” or “gossip” often prevents victims from coming forward and seeking justice. To combat this issue, non-retaliation protocols are crucial to protect individuals and ensure legal compliance.

Non-retaliation protocols must be in place to encourage reporting. The fear of retaliation is deeply rooted in the perception of being a whistleblower or complainant. Every compliance must have strong policies, consequences for violators, and open workplace conversations to empower bystanders. Bystanders play a crucial role in identifying and reporting harassment, but they often fear retaliation or loyalty conflicts.

Addressing retaliation and encouraging reporting in workplaces requires a multifaceted approach. Strong non-retaliation protocols, open workplace conversations, and the empowerment of bystanders are key factors in creating a safe and inclusive work environment. By prioritizing the well-being of employees and fostering a culture of trust, organizations can effectively combat sexual harassment and ensure compliance with legal and regulatory requirements.

Three key takeaways:

1. You must have robust policies and procedures against retaliation.

2. A lack of confidential reports will have an impact on culture.

3. Bystanders are the key to a robust culture.

Do you want to improve your culture? How can you assess your culture and develop a strategy to improve it going forward? In this free webinar on the new tool, The Culture Audit with Tom

Fox and Sam Silverstein on Tuesday, November 28, 12 CT. For more information and registration, click here.

Learn more about your ad choices. Visit megaphone.fm/adchoices