Compliance and Ethics: Ideas & Answers. Edition 76
Dear friends,
Welcome back to another edition of Compliance and Ethics: Ideas & Answers.
In our first piece this week, I offer my thoughts and guidance for my fellow introverts preparing for the next C&E conference. Watch out for the upcoming short video about being an introvert at the compliance conference and how to make the most of what can be an overwhelming experience.
In our second piece this week, Jeff Kaplan outlines the four-dimensional framework for compliance and ethics (C&E) risk assessment/management that has evolved from the original three-dimensional framework he developed in the 1990's.
As always, we finish with a bit of fun in our regular feature Compliance Lite.
And don't forget there's more content on our website so please do visit us there to read our other articles.
You can now also sign up for this newsletter via email here.
Thank you, Joe.
Introverts at a C&E Conference: Making the most of it
by Joe Murphy, CCEP
At Compliance & Ethics: Ideas & Answers, Adam Balfour is our video master. He suggested we do a short video about being an introvert going to a C&E conference and how to make the most of what can be an overwhelming experience.? He, Mary Shirley and I did a brief video touching on the topic.
Of course, being an introvert, I over prepared for what was truly a short video.? So, I offer here additional thoughts and guidance for my fellow introverts as you prepare for the next compliance conference.
The Four-Dimensional Compliance Risk Assessment
by Jeff Kaplan
In the 1990’s I developed a three-dimensional framework for compliance and ethics (C&E) risk assessment/management. ?Since then the framework has evolved and my current way of addressing risk centers largely on identifying and analyzing intersections of the following four areas:
*) Substantive risk areas.
*) Geographical factors.
领英推荐
*) Different “parts” of a company.
*) Mitigation.
An example of this approach is to consider the risk of corruption (substantive risk area) in your organization’s Eastern European region (geographical factors) for your sales team (part of the company) in light of current training, due diligence, and other controls (mitigation). This type of analysis facilitates understanding of an organization’s legal risks in a way that is granular enough to allow for efficient identification of appropriate enhancements to compliance controls.
Substantive risk areas?
In analyzing antitrust risks at a company one should first identify the different types of antitrust legal standards that could reasonably be viewed as risk causing for the company. This should entail more than simply collecting criminal (and in some cases, civil) law statutes, as we have often seen companies do in risk assessments. ?Rather, one should also include, among other things, consideration of different types of horizonal restraints, including price fixing, bid rigging and division of territories. And one should also determine whether vertical restraints should be part of the inquiry. For companies with any degree of market power the laws relating to dominance need to be considered.? Especially important are emerging areas that may be a surprise to others in the company.? In antitrust for example there are newly emerging employment issues, such as non-poach agreements, wage fixing and non-competes.? These may catch HR people off-guard.
Similarly, for the corruption risk area, one should generally assess risks not only of FCPA violations but also domestic bribery, commercial bribery and possibly lobbying, among other areas.
Note that some risks at a company may have been covered in prior assessment processes – formal or informal.– and need not be repeated. ??Indeed, one important facet of a risk assessment in some instances can be to identify what is and is not “in scope.”
Finally, in my view, too few companies address ethics (as opposed to compliance) risk. Generally, this entails conduct that does not constitute a violation of law but, rather, issues of right and wrong that could create significant reputational harm and/or lead to legal liability. ?Conflicts of interest sometimes fit this bill and so might other risk areas. Note however, that while an area may start as “only” an ethical issue, when companies go too far governments can react quickly with laws and regulations hurting the company’s business.
Risk capacity and risk motivation
The consideration of risk areas should often be based partly on key facts concerning relevant markets/business. ?For instance, with antitrust, one might enquire what market power the company actually has.? While conduct like price fixing and market allocation are violations even when the parties lack any market power, if the company perceives that it can control markets this could increase the risk of anticompetitive conduct happening. This and similar lines of inquiry can be viewed as the capacity to engage in risky conduct.?
“Having the chance to talk with compliance and ethics professionals is one of my favorite things. You in this audience have experienced how difficult your jobs are. You know how you can be beaten down, harried, and subjected to constant pressure. You know what it is like to be repeatedly resisted and distressed. In fact, this job is so difficult and you get pushed down so hard that I will share with you a personal secret about me. When I started in this field many years ago before all the pressure I was actually 6 foot 7 tall! (If you don’t know me, I am 5’4’’)"
- Joe Murphy, CCEP
Receive Compliance and Ethics: Ideas & Answers via Email
If you, or someone you know, would like to receive our newsletter directly in your inbox, simply click the link below and sign up to stay updated on the latest compliance and ethics tips and discussions.
C-suite Coach | Partner, Kaplan & Walker | Board Member | HR, Compliance & Ethics Advisor | Contributor, Harvard Business Review | Ranked #1 Global Thought Leader in Careers & Legal | MG100 | Former CAO, CCO, CHRO
3 个月Great articles Joe Murphy, CCEP —?helpful tips for introverts. SCCE CEI can be overwhelmingly huge! And having that one (or ten!) great conversation makes the whole experience a joy. And thanks for Jeff Kaplan's piece —?very helpful breakdown on RA.