{"id":6622,"date":"2022-08-05T17:57:05","date_gmt":"2022-08-05T17:57:05","guid":{"rendered":"https:\/\/www.americanconference.com\/fcpa-dc\/?page_id=6622"},"modified":"2023-01-19T16:52:34","modified_gmt":"2023-01-19T16:52:34","slug":"doj-cco-certification-requirement","status":"publish","type":"page","link":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/","title":{"rendered":"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight"},"content":{"rendered":"
\r\n

By Jaclyn Jaeger<\/p>\r\n

Monday, August 8, 2022<\/p>\r\n<\/div>\r\n\r\n

Officials with the U.S. Department of Justice have portended a sea change in the oversight responsibilities of chief compliance officers (CCOs) as it concerns corporate resolutions going forward.<\/p>\r\n\r\n

In public remarks<\/a> made March 22, Assistant Attorney General Kenneth Polite announced that for all corporate resolutions going forward—including guilty pleas, deferred prosecution agreements, non-prosecution<\/span> agreements—CCOs and chief executive officers (CEOs) must \u201ccertify at the end of the term of the agreement that the company\u2019s compliance program is reasonably designed and implemented to detect and prevent violations of the law—based on the nature of the legal violation that gave rise to the resolution, as relevant—and is functioning effectively.\u201d<\/p>\r\n\r\n

Polite added, in certain resolutions, additional certification language may be required. \u201cWhen a company is required to provide annual self-reports<\/span> on the state of their compliance programs, we will consider requiring the CEO and the CCO to certify that all compliance reports submitted during the term of the resolution are true, accurate, and complete,\u201d he stated.<\/p>\r\n\r\n

As a former CCO himself, Polite said the intent of the certification requirement is to empower CCOs and ensure they have \u201ctrue independence, authority, and stature within the company.\u201d He added that the certification requirement ensures CCOs \u201creceive all relevant compliance-related<\/span> information and can voice any concerns they may have prior to certification.\u201d<\/p>\r\n\r\n

Some in the compliance community have expressed skepticism, however, fearing it could increase the risk of personal liability. What is a CCO to do, for example, in circumstances when senior leadership insists on overriding the CCO and hiding compliance deficiencies or misconduct?<\/p>\r\n\r\n

\u201cWhen a CCO is the only person standing in the way of the company being freed from DOJ supervision, there is enormous pressure to certify, regardless of how the CCO feels about the program,\u201d said Hui Chen, the first-ever<\/span> compliance counsel expert at the Department of Justice and now a senior advisor at R&G Insights Lab. \u201cCCOs may very well be facing the choice of \u2018sign or leave.\u2019\u201d<\/p>\r\n\r\n

Certification Case Study: Glencore<\/h5>\r\n\r\n

The Justice Department already has demonstrated how it intends to use the certification requirement. The $1 billion global resolution and plea agreement that mining company Glencore reached with U.S., U.K., and Brazilian enforcement authorities in May marked the first ever resolution in which the Justice Department used the certification requirement language in resolution papers with a company.<\/p>\r\n\r\n

Many in the compliance profession are already quite familiar with \u201cAttachment C,\u201d which outlines in corporate resolution agreements the minimum requirements of a compliance program. Glencore\u2019s plea agreement is the first, however, to include \u201cAttachment H<\/a>,\u201d the compliance certification.<\/p>\r\n\r\n

Attachment H requires that Glencore\u2019s CEO and head of compliance certify that the company\u2019s anti-corruption<\/span> compliance program is \u201creasonably designed to detect and prevent violations of the Foreign Corrupt Practices Act and other applicable anti-corruption<\/span> laws throughout the company\u2019s operations.\u201d<\/p>\r\n\r\n

Said Hui, \u201cThe certification language is fairly broad, particularly the language stating the compliance program be \u2018reasonably designed and implemented to detect and prevent violations\u2026throughout the company\u2019s operations.\u2019 Particularly for larger companies, that would be an ambitious statement to make.\u201d<\/p>\r\n\r\n

As Glencore\u2019s resolution further demonstrates, even resolutions that install an independent compliance monitor, will require the CCO and CEO certifications. The difference, however, is \u201cthe independent monitor isn\u2019t certifying under penalty of perjury,\u201d said Amy Schuh, a former chief ethics and compliance officer and now a partner at Morgan Lewis. The monitor effectively is attesting to the Justice Department in the form of a report, not a certification, whether the company has met all the requirements in Attachment C.<\/p>\r\n\r\n

Glencore declined comment.<\/p>\r\n\r\n\"Anti-Corruption<\/a>\r\n\r\n

In addition to gray areas surrounding the certification language itself, lack of certainty concerning the circumstances under which a CCO could face individual criminal liability is also creating a healthy amount of concern among those in the compliance profession.<\/p>\r\n\r\n

Reiterating public remarks made by David Last, head of the Justice Department\u2019s Fraud Unit, at a June 14 International Bar Association, Schuh said prosecution presumably would be reserved only if a CCO or CEO made a certification that was \u201cknowingly untrue, that they were lying when they signed it,\u201d she said.<\/p>\r\n\r\n

That would then constitute making a false statement in violation of 18 U.S.C. 1001<\/span>. On the other hand, if the certification is made in good faith, that should put the CCO in a better position with the Justice Department, Schuh said.<\/p>\r\n\r\n

A lot will depend on factual elements, particularly intent, Hui said. \u201cBecause there is no consistent standard, simply showing the CCO knew about some insufficiencies of the program might not be sufficient,\u201d she said. \u201cWho is to say how many problems actually constitute not<\/em> \u2018reasonably designed and implemented to prevent and detect violations\u2026throughout the company\u2019s operations?\u2019\u201d<\/p>\r\n\r\n

Steps to mitigate personal liability<\/h5>\r\n\r\n

\u201cA CCO needs, at least, measurable evidence of effectiveness on every component of the program,\u201d Hui said. \u201cFor example, evidence that training is effective in changing behavior would entail measurements of specific behavior before and some period after training. To simply show that training took place would be insufficient. It has to show it accomplished something toward preventing and detecting corruption—and keep in mind, this certification requirement applies to a wide variety of cases beyond anti-corruption<\/span> violations.\u201d<\/p>\r\n\r\n

On some level, with all the guidance documents available to CCOs, there are no secrets concerning the government\u2019s expectations of a \u2018reasonably designed\u2019 compliance program, Schuh said. For example, in addition to Attachment C in corporate resolutions, CCOs also have as a framework the agency\u2019s \u201cEvaluation of Corporate Compliance Programs<\/a>\u201d and the FCPA Resource Guide<\/a>.<\/p>\r\n\r\n

Moreover, companies that are engaging in resolution talks with the government have already identified the misconduct at issue, presented its compliance program and mapped out any necessary enhancements moving forward, and likely have done so in conjunction with counsel, Schuh said. All those discussions and ongoing reporting obligations present an opportunity for the CCO and the business to ensure their understanding of a \u201creasonably designed\u201d compliance program aligns with the government\u2019s interpretation and expectations of a \u201creasonably designed\u201d compliance program, she said.<\/p>\r\n\r\n

As with Sarbanes-Oxley<\/span> (SOX)-specific<\/span> compliance controls, various business units across a company—legal, finance, audit, human resources, procurement, sales operations, and management—all play a role and are accountable for maintaining a robust global corporate compliance program. With that in mind, CCOs moving forward may want to consider \u201csetting up some kind of sub-certification<\/span> process, akin to SOX certification,\u201d Schuh said.<\/p>\r\n\r\n

In practical terms, this means making those who are accountable for internal controls designed to help the company prevent and detect corrupt behavior attest that the controls have been implemented, tested, and are effective. That way, the CCO can then rely on those sub-certifications<\/span> as part of the compliance program, even before being subject to a certification requirement if ever faced with one.<\/p>\r\n\r\n

\u201cThat would mean you have a really robust, attested program,\u201d Schuh said. \u201cThat\u2019s like the Cadillac of programs, but I think that\u2019s the reality for companies that have to sign these certifications.\u201d<\/p>\r\n\r\n

ACI will be holding a session, \u201cThe New Realities of Corporate and Individual Liability Risks: Defense Counsel Perspectives on the DoJ\u2019s Enforcement Posture and the Path Ahead,\u201d at its \u201c39th<\/sup> International Conference on the FCPA,\u201d taking place Nov. 30-Dec. 1, 2022, at the Gaylord National Resort and Convention Center in Washington D.C.<\/em> | www.FCPAconference.com<\/a><\/p>\r\n\r\n

For questions, concerns or more information about ACI Insights, please contact:<\/strong>
Chris Corbin
Associate Director of Marketing
American Conference Institute |<\/span> The Canadian Institute |<\/span> C5
E: c.corbin@americanconference.com<\/a><\/p>","protected":false},"excerpt":{"rendered":"By Jaclyn Jaeger Monday, August 8, 2022 Officials with the U.S. Department of Justice have portended a sea change in the oversight responsibilities of chief compliance officers (CCOs) as it concerns corporate resolutions going forward. In public remarks made March 22, Assistant Attorney General Kenneth Polite announced that for all corporate resolutions going forward—including guilty pleas, deferred…","protected":false},"author":15604,"featured_media":0,"parent":6569,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-6622","page","type-page","status-publish","hentry"],"yoast_head":"\nDoJ CCO Certification Requirement Will Up the Ante of CCO Oversight | ACI Insights | FCPA and Global Anti-Corruption<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight | ACI Insights | FCPA and Global Anti-Corruption\" \/>\n<meta property=\"og:description\" content=\"By Jaclyn Jaeger Monday, August 8, 2022 Officials with the U.S. Department of Justice have portended a sea change in the oversight responsibilities of chief compliance officers (CCOs) as it concerns corporate resolutions going forward. In public remarks made March 22, Assistant Attorney General Kenneth Polite announced that for all corporate resolutions going forward—including guilty pleas, deferred…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/\" \/>\n<meta property=\"og:site_name\" content=\"FCPA and Global Anti-Corruption\" \/>\n<meta property=\"article:modified_time\" content=\"2023-01-19T16:52:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2026\/06\/700L_linkedin_general_1200x1200.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/\",\"name\":\"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight | ACI Insights | FCPA and Global Anti-Corruption\",\"isPartOf\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#website\"},\"datePublished\":\"2022-08-05T17:57:05+00:00\",\"dateModified\":\"2023-01-19T16:52:34+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.americanconference.com\/fcpa-dc\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ACI Insights\",\"item\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#website\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/\",\"name\":\"Foreign Corrupt Practices Act\",\"description\":\"Template used to create new conference sites\",\"alternateName\":\"FCPA\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.americanconference.com\/fcpa-dc\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight | ACI Insights | FCPA and Global Anti-Corruption","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/","og_locale":"en_US","og_type":"article","og_title":"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight | ACI Insights | FCPA and Global Anti-Corruption","og_description":"By Jaclyn Jaeger Monday, August 8, 2022 Officials with the U.S. Department of Justice have portended a sea change in the oversight responsibilities of chief compliance officers (CCOs) as it concerns corporate resolutions going forward. In public remarks made March 22, Assistant Attorney General Kenneth Polite announced that for all corporate resolutions going forward—including guilty pleas, deferred…","og_url":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/","og_site_name":"FCPA and Global Anti-Corruption","article_modified_time":"2023-01-19T16:52:34+00:00","og_image":[{"width":1200,"height":1200,"url":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2026\/06\/700L_linkedin_general_1200x1200.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/","url":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/","name":"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight | ACI Insights | FCPA and Global Anti-Corruption","isPartOf":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#website"},"datePublished":"2022-08-05T17:57:05+00:00","dateModified":"2023-01-19T16:52:34+00:00","breadcrumb":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/doj-cco-certification-requirement\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.americanconference.com\/fcpa-dc\/"},{"@type":"ListItem","position":2,"name":"ACI Insights","item":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/"},{"@type":"ListItem","position":3,"name":"DoJ CCO Certification Requirement Will Up the Ante of CCO Oversight"}]},{"@type":"WebSite","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#website","url":"https:\/\/www.americanconference.com\/fcpa-dc\/","name":"Foreign Corrupt Practices Act","description":"Template used to create new conference sites","alternateName":"FCPA","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.americanconference.com\/fcpa-dc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/6622","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/users\/15604"}],"replies":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/comments?post=6622"}],"version-history":[{"count":0,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/6622\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/6569"}],"wp:attachment":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/media?parent=6622"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}