{"id":8515,"date":"2023-03-02T13:44:09","date_gmt":"2023-03-02T13:44:09","guid":{"rendered":"https:\/\/www.americanconference.com\/fcpa-dc\/?page_id=8515"},"modified":"2023-08-08T20:45:40","modified_gmt":"2023-08-08T20:45:40","slug":"building-a-data-driven-anticorruption-compliance-program","status":"publish","type":"page","link":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/","title":{"rendered":"Building a Data-Driven<\/span> Anticorruption Compliance Program"},"content":{"rendered":"
\r\n

By Jaclyn Jaeger<\/p>\r\n

Wednesday, March 1, 2023<\/p>\r\n<\/div>\r\n\r\n

For more than two years now, heads of the U.S. Department of Justice have maintained a steady drumbeat that they expect companies today to have in place a sound data analytics compliance program to proactively mitigate risks. Compliance departments should heed the warnings.<\/p>\r\n\r\n

An especially significant development portending the DoJ\u2019s intensified focus on data-driven<\/span> compliance programs was the onboarding in September 2022 of Matt Galvin into the Fraud Section\u2019s recently restructured Corporate Enforcement, Compliance and Policy (CECP) Unit.<\/p>\r\n\r\n

As former head of compliance at global brewing company Anheuser-Busch<\/span> InBev (AB InBev), Galvin is a well-known<\/span> compliance expert for his innovative use of artificial intelligence and machine-learning<\/span> in proactively mitigating compliance risk. In 2017, Galvin spearheaded the launch of AB InBev\u2019s advanced data analytics platform, BrewRIGHT<\/a>, which culls troves of compliance and transactional data from numerous accounting and compliance systems across the company where it is harmonized into a centralized repository.<\/p>\r\n\r\n

The platform runs algorithms to organize and analyze the data under such buckets as anti-corruption<\/span> and fraud risk, vendor management, anti-money<\/span> laundering, economic sanctions, conflicts of interest, and even free beer giveaways. Specially built dashboards enable AB InBev\u2019s compliance teams to proactively identify and monitor any algorithms flagged as high-risk<\/span> and root out risks across the more than 50 markets where AB InBev operates. Simply put, the hiring of Galvin as a data analytics advisor for the Fraud Section is a strategic move.<\/p>\r\n\r\n

Another significant hire at the DoJ was the appointment<\/a> of Glenn Leon as the Fraud Section\u2019s new chief, who joined the agency after serving most recently as chief ethics and compliance officer at Hewlett Packard. The onboarding of more compliance professionals means prosecutors are more adept than ever at assessing companies\u2019 compliance programs.<\/p>\r\n\r\n\"National<\/a>\r\n\r\n

\u201cWe are using every tool at our disposal to combat corporate crime, including more sophisticated data analytics and other means to proactively identify criminal conduct,\u201d Assistant Attorney General Kenneth Polite said in Jan. 17 remarks<\/a> at Georgetown University.<\/p>\r\n\r\n

DoJ authorities have consistently made clear they expect compliance departments to use technological capabilities to detect misconduct as well. In keynote remarks<\/a> made in October 2021, then-principal<\/span> associate deputy attorney general John Carlin said, \u201cIt\u2019s going to be the expectation [at the DoJ] when evaluating compliance programs that corporations are using the same type of analytics to look for and predict misconduct.\u201d<\/p>\r\n\r\n

Broadening data sets<\/h5>\r\n\r\n

A sound data analytics compliance program requires companies to monitor beyond traditional sources of data to include their employees\u2019 use of personal devices and third-party<\/span> messaging applications for business purposes. They must also have the ability to preserve and recover relevant data in the event of an investigation.<\/p>\r\n\r\n

In an agency memo<\/a> issued in September 2022, revising corporate criminal enforcement policies, Deputy Attorney General Lisa Monaco made clear that companies are expected to have policies governing personal devices and third-party<\/span> messaging apps, employee training on such policies, and enforcement of those policies when violations are identified.<\/p>\r\n\r\n

The U.S. Securities and Exchange Commission and the Commodity Futures Trading Commission are focusing their sights on illegal uses of personal devices and third-party<\/span> messaging apps as well, having issued billions in fines<\/a> in the financial services industry for such violations.<\/p>\r\n\r\n

Risk-based<\/span> data analytics<\/h5>\r\n\r\n

In public comments, Leon said he doesn\u2019t expect companies to have the \u201cshiniest tool,\u201d but rather that they turn data they already have into actionable results. This necessarily requires compliance to have access to relevant data.<\/p>\r\n\r\n

According to the Criminal Division\u2019s \u201cEvaluation of Corporate Compliance Programs<\/a>\u201d guidance, questions to consider include, \u201cDo compliance and control personnel have sufficient direct or indirect access to relevant sources of data to allow for timely and effective monitoring and\/or testing of policies, controls, and transactions? Do any impediments exist that limit access to relevant sources of data and, if so, what is the company doing to address the impediments?\u201d<\/p>\r\n\r\n

Just as the DoJ has repeatedly stressed compliance programs should be risk-based<\/span>, \u201cI would expect they would look at data analytics the same way,\u201d Scott Schools, chief ethics and compliance officer at Uber, said on a recent webinar<\/a>. \u201cAt least from my perspective, I would want to make sure I can defend the level of resources I am expending on data analytics, based on a risk-based<\/span> analysis.\u201d<\/p>\r\n\r\n

Data-driven<\/span> compliance measures<\/h5>\r\n\r\n

Robert Houle, an analytics consulting manager at Baker Tilly, shared some best practices for establishing a data-driven<\/span> compliance program, including the following:<\/p>\r\n\r\n

Map the data.<\/strong> Begin by identifying all the systems across the organization that are capturing data. Consider the following questions: \u201cHow is data flowing through those systems? How is the data being manipulated or changed? Does it converge with other systems at some point?\u201d<\/p>\r\n\r\n

Collect the data into a centralized dashboard.<\/strong> After mapping out the data, the next step is to extract and consolidate the data from those multiple systems. Once consolidated, the data can then be cleaned and harmonized. Because data is typically pulled from multiple systems, building a reliable data workflow process is important. \u201cIf you\u2019re grabbing the wrong data, your visualizations are not going to be relevant,\u201d Houle said. \u201cThey might guide you in the wrong direction.\u201d<\/p>\r\n\r\n

Analyze and compare the data.<\/strong> This step is where human context comes into play, evaluating for trends by applying filters and interacting with the data in various ways—analyzing data across a specific business function or specific regions, for example. This is also when to introduce algorithms and measure the data against key risk indicators (KRIs).<\/p>\r\n\r\n\"FCPA<\/a>\r\n\r\n

In practice, a robust data visualization process requires \u201cinvolving a very focused team that has a strong analytics background,\u201d Houle said. The data analytics team should not work in a silo, he added, but rather work alongside compliance and other functions to understand, for example, \u201c\u2018What are the risk drivers at the organization? What KRIs are we going to measure against? How are we going to quantify risk?\u2019\u201d<\/p>\r\n\r\n

Report out the results from the data visualization exercise.<\/strong> Some questions for compliance to consider are, \u201cWhere are the gaps? What do we need to improve upon?\u201d Houle said. This process is an ongoing cycle, starting with a data-driven<\/span> risk assessment and continuing with continuous auditing and monitoring, he said.<\/p>\r\n\r\n

Conclusion<\/h5>\r\n\r\n

As Polite noted, the DoJ is \u201cworking more closely than ever\u201d with law enforcement partners around the world, and that most FCPA resolutions in recent years were \u201cthe result of cooperation and coordination with foreign and domestic authorities.\u201d The warning is this: In the event of an investigation, failure to have in place a sound data analytics compliance program can quickly turn into a cross-border<\/span> nightmare for a multinational company.<\/p>\r\n\r\n

Data analytics does not necessarily have to be costly or complex. Companies with limited resources can start by analyzing investigations and complaints data, in combination with cultural surveys, for example, that may collectively point to red flags or trouble spots. Ultimately, the end goal is for the compliance function to draw meaningful and proactive insight into where compliance risks may be present or where improvements may be necessary.<\/p>\r\n\r\n

ACI will be holding a forum on data analytics at its \u201c12th<\/sup> Summit on Anti-Corruption<\/span> Brazil<\/a>,\u201d taking place May 23-25<\/span>, at the Intercontinental Hotel in S\u00e3o Paulo<\/em> | www.FCPAconference.com<\/a><\/p>\r\n\r\n

For questions, concerns or more information about ACI Insights, please contact:<\/strong>
Chris Corbin
Associate Director of Marketing
American Conference Institute |<\/span> The Canadian Institute |<\/span> C5
E: c.corbin@americanconference.com<\/a><\/p>","protected":false},"excerpt":{"rendered":"By Jaclyn Jaeger Wednesday, March 1, 2023 For more than two years now, heads of the U.S. Department of Justice have maintained a steady drumbeat that they expect companies today to have in place a sound data analytics compliance program to proactively mitigate risks. Compliance departments should heed the warnings. An especially significant development portending…","protected":false},"author":15604,"featured_media":0,"parent":6569,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-8515","page","type-page","status-publish","hentry"],"yoast_head":"\nBuilding a Data-Driven Anticorruption Compliance Program | ACI Insights | FCPA and Global Anti-Corruption<\/title>\n<meta name=\"robots\" content=\"noindex, nofollow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Building a Data-Driven Anticorruption Compliance Program | ACI Insights | FCPA and Global Anti-Corruption\" \/>\n<meta property=\"og:description\" content=\"By Jaclyn Jaeger Wednesday, March 1, 2023 For more than two years now, heads of the U.S. Department of Justice have maintained a steady drumbeat that they expect companies today to have in place a sound data analytics compliance program to proactively mitigate risks. Compliance departments should heed the warnings. An especially significant development portending…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/\" \/>\n<meta property=\"og:site_name\" content=\"FCPA and Global Anti-Corruption\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-08T20:45:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/\"},\"author\":{\"name\":\"rohlinger\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#\/schema\/person\/5991f804124e9f3f1fa387681a22c093\"},\"headline\":\"Building a Data-Driven Anticorruption Compliance Program\",\"datePublished\":\"2023-03-02T13:44:09+00:00\",\"dateModified\":\"2023-08-08T20:45:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/\"},\"wordCount\":1243,\"image\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/\",\"name\":\"Building a Data-Driven Anticorruption Compliance Program | ACI Insights | FCPA and Global Anti-Corruption\",\"isPartOf\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png\",\"datePublished\":\"2023-03-02T13:44:09+00:00\",\"dateModified\":\"2023-08-08T20:45:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png\",\"contentUrl\":\"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png\",\"width\":728,\"height\":90},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.americanconference.com\/fcpa-dc\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ACI Insights\",\"item\":\"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Building a Data-Driven Anticorruption Compliance Program\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#website\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/\",\"name\":\"Foreign Corrupt Practices Act\",\"description\":\"Template used to create new conference sites\",\"alternateName\":\"FCPA\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.americanconference.com\/fcpa-dc\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.americanconference.com\/fcpa-dc\/#\/schema\/person\/5991f804124e9f3f1fa387681a22c093\",\"name\":\"rohlinger\",\"url\":\"https:\/\/www.americanconference.com\/fcpa-dc\/author\/rohlinger\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Building a Data-Driven Anticorruption Compliance Program | ACI Insights | FCPA and Global Anti-Corruption","robots":{"index":"noindex","follow":"nofollow"},"og_locale":"en_US","og_type":"article","og_title":"Building a Data-Driven Anticorruption Compliance Program | ACI Insights | FCPA and Global Anti-Corruption","og_description":"By Jaclyn Jaeger Wednesday, March 1, 2023 For more than two years now, heads of the U.S. Department of Justice have maintained a steady drumbeat that they expect companies today to have in place a sound data analytics compliance program to proactively mitigate risks. Compliance departments should heed the warnings. An especially significant development portending…","og_url":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/","og_site_name":"FCPA and Global Anti-Corruption","article_modified_time":"2023-08-08T20:45:40+00:00","og_image":[{"url":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#article","isPartOf":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/"},"author":{"name":"rohlinger","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#\/schema\/person\/5991f804124e9f3f1fa387681a22c093"},"headline":"Building a Data-Driven Anticorruption Compliance Program","datePublished":"2023-03-02T13:44:09+00:00","dateModified":"2023-08-08T20:45:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/"},"wordCount":1243,"image":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage"},"thumbnailUrl":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/","url":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/","name":"Building a Data-Driven Anticorruption Compliance Program | ACI Insights | FCPA and Global Anti-Corruption","isPartOf":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage"},"image":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage"},"thumbnailUrl":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png","datePublished":"2023-03-02T13:44:09+00:00","dateModified":"2023-08-08T20:45:40+00:00","breadcrumb":{"@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#primaryimage","url":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png","contentUrl":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-content\/uploads\/sites\/2080\/2023\/07\/610L24_728x90.png","width":728,"height":90},{"@type":"BreadcrumbList","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/building-a-data-driven-anticorruption-compliance-program\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.americanconference.com\/fcpa-dc\/"},{"@type":"ListItem","position":2,"name":"ACI Insights","item":"https:\/\/www.americanconference.com\/fcpa-dc\/aci-insights\/"},{"@type":"ListItem","position":3,"name":"Building a Data-Driven Anticorruption Compliance Program"}]},{"@type":"WebSite","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#website","url":"https:\/\/www.americanconference.com\/fcpa-dc\/","name":"Foreign Corrupt Practices Act","description":"Template used to create new conference sites","alternateName":"FCPA","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.americanconference.com\/fcpa-dc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.americanconference.com\/fcpa-dc\/#\/schema\/person\/5991f804124e9f3f1fa387681a22c093","name":"rohlinger","url":"https:\/\/www.americanconference.com\/fcpa-dc\/author\/rohlinger\/"}]}},"_links":{"self":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/8515","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/users\/15604"}],"replies":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/comments?post=8515"}],"version-history":[{"count":0,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/8515\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/pages\/6569"}],"wp:attachment":[{"href":"https:\/\/www.americanconference.com\/fcpa-dc\/wp-json\/wp\/v2\/media?parent=8515"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}