joe murphy, ccep [email protected] author, 501 ideas for your compliance and ethics program...
TRANSCRIPT
![Page 1: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/1.jpg)
Joe Murphy, [email protected]
AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008)
May 2009
AUDITING COMPLIANCE & MEASURING EFFECTIVENESS
![Page 2: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/2.jpg)
Auditing under the USSGs
(5) The organization shall take reasonable steps—
(A) to ensure that the organization’s compliance and ethics program is followed, including monitoring and auditing to detect criminal conduct;
![Page 3: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/3.jpg)
Compliance Audits
WHAT’S GOING ON OUT THERE?
![Page 4: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/4.jpg)
Factors to consider in compliance auditing
• Conduct both “process” & “substantive” audits
• Utilize risk assessment to prioritize the substantive risks
• Review governmental, regulatory requirements/recommendations
• Determine audit frequency
![Page 5: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/5.jpg)
Factors to consider in compliance auditing
• Determine methodology for each audit
• Does organization wish to attempt to protect the audit as privileged?
• Who should conduct the audit?
• Be sure management understands: this can be intrusive
![Page 6: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/6.jpg)
Who Does the Audit?
Lawyers?
Inside or outside?
Counselor or cop?
Others?
C&E, internal audit, subject-matter experts, HR
Mixed teams?Independence
![Page 7: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/7.jpg)
Selecting Locations/targets
• Risk factors
• What about the executives?
• Locations away from HQ
• Auditors’ independent judgment in selecting
![Page 8: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/8.jpg)
Surprise! Guess who’s here?
Should you do unannounced audits?
What is meant by “auditing to detect criminal conduct”
![Page 9: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/9.jpg)
At the Location
• Explain purpose & scope to senior on-site manager
• Select employees to be reviewed
• Select files/computer records
• Walk the site
• Review docs, conduct interviews in secure site
![Page 10: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/10.jpg)
Types of Documents to Review – Antitrust Example
• Expense vouchers, calendars, logs, meeting & trip reports, and status reports
• Files on competitors, suppliers who may also be competitors
• Trade associations/industry meeting files including handwritten notes
• “Top right hand desk drawer”
• E-mail and computer records
• Business plans
![Page 11: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/11.jpg)
Employee Interviews
• Explain purpose
• Provide Upjohn or similar letter
• Don’t be adversarial
• No notes by interviewee
![Page 12: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/12.jpg)
Scope of Employee Interviews
All levels, no exemptions
Some open-ended questions
Questions from documents
Understanding of substantive rules & compliance program
What are supervisors’ views
Closing questions
![Page 13: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/13.jpg)
What Can You Expect to Find?
“I’ve been waiting for you to call”– They won’t call, but they won’t lie either
It’s amazing what people write- See DOJ’s lysine conspiracy video for examples
- Even conspiracies depend on records
People will talk - ask any reporter- Learn at least as much as a WSJ reporter
Expect to be surprised
![Page 14: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/14.jpg)
What Can You Expect to Find?
• “LET’S BE PREDATORY ABOUT IT”
• “COMPETE – BUT NOT ON PRICE”
• ONE INTERNATIONAL CONSPIRACY HAD A PAID CONSPIRACY COORDINATOR!
![Page 15: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/15.jpg)
Enlist Internal Audit’s Support
• Auditors have a control orientation
• Include in internal audit’s charter
• Train auditors on risk areas- Red Flags list
• Bring into the team at the beginning
• But get them not to practice law!
![Page 16: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/16.jpg)
Measuring Effectiveness
WHY MEASURE?
WHAT TO MEASURE?
HOW TO MEASURE?
![Page 17: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/17.jpg)
Sentencing Guidelines item 5
(5) The organization shall take reasonable steps—
. . .
(B) to evaluate periodically the effectiveness of the organization’s compliance and ethics program;
![Page 18: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/18.jpg)
Why Evaluate the Program
EXTERNAL EXPECTATIONS– THE GOVERNMENT EXPECTS IT– PART OF PROGRAM STANDARDS
INTERNAL EXPECTATIONS– MANAGEMENT EXPECTS RESULTS– MEASUREMENT IS PART OF ANY
MANAGEMENT PROGRAM
![Page 19: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/19.jpg)
The Guidelines Question
DOES THE COMPLIANCE & ETHICS PROGRAM ACTUALLY
WORK?
![Page 20: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/20.jpg)
What to Measure
• DESIGN
• IMPLEMENTATION
• IMPACT
![Page 21: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/21.jpg)
What to Measure
• DESIGN
IF YOU DID EVERYTHING IN YOUR PLAN, WOULD IT MEET THE STANDARDS?
REVIEW BY DESK AUDIT
![Page 22: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/22.jpg)
Measuring DesignWHAT STANDARDS APPLY TO THE DESIGN?
USSGs 7+ ELEMENTS
U.S. ATTORNEYS’ MANUAL
STOCK EXCHANGE REQUIREMENTS
GOVERNMENT MANDATES
“INDUSTRY PRACTICE”
BY RISK AREA
REGULATORY/ENFORCEMENT AGENCY
CASE LAW
BY JURISDICTION
U.S. STATES
OTHER COUNTRIES
![Page 23: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/23.jpg)
What to Measure
• IMPLEMENTATION
HAVE YOU ACTUALLY DONE WHAT YOU SAID YOU WOULD DO?
COUNTING WHAT IS THERE
![Page 24: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/24.jpg)
What to Measure
• IMPACT
IS IT ACTUALLY WORKING
IN-DEPTH REVIEW, IN THE FIELD
![Page 25: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/25.jpg)
The Kaplan Matrix
Measure:
• EVERY RISK, in
• EVERY BUSINESS UNIT, for
• EVERY GUIDELINES ELEMENT
• Kaplan, “Thinking Inside the Box: Risk Analysis in Three Dimensions” (ethikos, Sept./Oct. 2000);
![Page 26: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/26.jpg)
The Kaplan Matrix – Every Risk
SOME EXAMPLES:
• ANTITRUST
• GOVERNMENT CONTRACTS
• EEO/HARASSMENT
• PRODUCT SAFETY
• ENVIRONMENTAL
• BRIBERY/CORRUPTION
• CONFLICTS/GIFTS
• CONSUMER PROTECTION
• PRIVACY
• WAGE & HOUR
• SECURITIES FRAUD
![Page 27: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/27.jpg)
The Kaplan Matrix – Everywhere
• Subsidiaries
• Sales offices
• Manufacturing plants
• Departments
• Joint ventures
• Partnerships
• Third parties
– Agents
– Suppliers
![Page 28: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/28.jpg)
Kaplan Matrix – Every USSGs Element
1. STANDARDS & PROCEDURES
2. GOVERNING AUTHORITY OVERSIGHT, MANAGEMENT ROLE & PROGRAM RESPONSIBILITY/CHIEF ETHICS & COMPLIANCE OFFICER (“CECO”)
3. SCREENING & PROPER DELEGATION
4. TRAINING & DISSEMINATING INFORMATION
![Page 29: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/29.jpg)
Kaplan Matrix – Every USSGs Element
5. AUDITING/MONITORING, REPORTING SYSTEMS & EVALUATING THE PROGRAM
6. DISCIPLINE & INCENTIVES
7. APPROPRIATE RESPONSE & PREVENTING RECURRENCE
C. RISK ASSESSMENT
COMMENTARY – PROGRAM FOLLOWS GOVERNMENT REGS/INDUSTRY PRACTICE
![Page 30: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/30.jpg)
How to Measure – Some Tools
• DESK AUDITS
• COUNTING INPUTS & OUTPUTS
• FOCUS GROUPS
• INDIVIDUAL INTERVIEWS
• AUDITS
• TESTS
![Page 31: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/31.jpg)
How to Measure – Some Tools
• STATISTICAL ANALYSIS
• EXIT INTERVIEWS
• DEEP DIVES
• SELF ASSESSMENTS
• DRY RUNS
• SURVEYS
![Page 32: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/32.jpg)
Surveys – An Incomplete Answer
• THEY MEASURE WHAT EMPLOYEES WANT TO TELL YOU
• EMPLOYEES GAME THE SYSTEM
• HOW YOU ASK AFFECTS WHAT YOU GET
• PERCEPTIONS ARE NOT ALWAYS REALITY
• COMPLIANCE IS NOT BY MAJORITY VOTE
![Page 33: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/33.jpg)
Measuring Impact – By Risk Area
HOW WOULD YOU MEASURE WHETHER THE PROGRAM WORKS IN EACH OF THESE RISK AREAS?
• ENVIRONMENTAL – MANUFACTURE
• CONSUMER PROTECTION – RETAIL
• ANTITRUST – SALES & BIDDING
• OFF-LABEL SELLING – PHARMACEUTICAL SALES
• ACCOUNTING FRAUD – SEC REPORTS
![Page 34: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/34.jpg)
Could You Convince the Government?
• THEY FOCUS BY RISK AREA
• THEY FOCUS WHERE THE VIOLATION OCCURRED
• THEY TALK WITH EMPLOYEES
• THEY LOOK AT WHAT YOU HAVE IN WRITING
• THEY EXPECT YOU TO HAVE DONE THE SAME
![Page 35: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/35.jpg)
Measuring Impact – What About Culture?
WHAT THE GUIDELINES SAY ABOUT CULTURE:
“(b) Due diligence and the promotion of an organizational culture that encourages ethical conduct and a commitment to compliance with the law within the meaning of subsection (a) minimally require the following:
[Steps 1-7]”
HOW TO MEASURE CULTURE?
THE JIM SHEEHAN TEST – TALK TO SOME EMPLOYEES!
![Page 36: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/36.jpg)
Who Does the Assessment
RANGE OF OPTIONS
FROM
LEAST INDEPENDENT, KNOWS THE MOST ABOUT YOUR COMPANY – MANAGER’S SELF ASSESSMENT
TO
MOST INDEPENDENT, KNOWS THE LEAST ABOUT YOUR COMPANY
– OUTSIDE EXPERT, NO OTHER DEALINGS WITH FIRM
![Page 37: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/37.jpg)
Who Does the Assessment - Options
• OUTSIDE INDEPENDENT COMPLIANCE EXPERTS – DOES THIS ONE REVIEW ONLY – LAWYERS, ACCOUNTANTS, C&E
FIRMS• OUTSIDE COMPLIANCE EXPERTS
– PROVIDE OTHER SERVICES FOR THE COMPANY.
• OUTSIDE, RISK AREA SUBJECT MATTER EXPERTS
![Page 38: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/38.jpg)
Who Does the Assessment - Options
• PEER REVIEWS FROM OTHER COMPANIES
• MIXED TEAMS – INSIDE & OUTSIDE, INTERESTED & DISINTERESTED
• IN-HOUSE MANAGERS/ PROFESSIONALS NOT INVOLVED IN THE C&E PROGRAM
• COMPANY C&E OFFICE. • LINE MANAGEMENT (SELF-
ASSESSMENTS)
![Page 39: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/39.jpg)
Who Does the Assessment – Consider:
• INDEPENDENCE– NOT ASSESS THEIR OWN WORK
– NOT AFRAID TO ANGER CECO OR CEO
• COMPETENCE– RESOURCES– SUBJECT-MATTER EXPERTISE– COMPLIANCE & ETHICS EXPERTISE
• CREDIBILITY
• COST
![Page 40: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/40.jpg)
Who Gets the Report
• ROLE OF THE CECO– INPUT FOR THE REVIEW
– BUT, CONTROL OF THE REPORT?
• ROLE OF SENIOR MANAGEMENT
• REPORTING TO THE AUDIT COMMITTEE– WILL THEY KNOW ENOUGH TO
UNDERSTAND & ANALYZE IT?
![Page 41: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/41.jpg)
Who Gets the Report
• RISK IN LITIGATION– PRIVATE PLAINTIFFS
– THE GOVERNMENT
PRIVILEGE PROTECTIONS– CAN STRUCTURE TO MAXIMIZE
PROTECTION, BUT . . .
– WRITE AS IF IT WILL BE PUBLIC
– FIX WHAT YOU FIND
![Page 42: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/42.jpg)
Assessments from Afar
• ACADEMICS & NGOs TRY TO ASSESS COMPANIES’ PROGRAMS– RELIANCE ON CODES - BECAUSE
THEY’RE EASY TO FIND
• IF YOU HAD TO PICK ONE C&E ELEMENT, WHICH WOULD YOU MEASURE?
![Page 43: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/43.jpg)
Assessments from Afar
• CECO AS A LEADING INDICATOR• IS CECO INDEPENDENT, CONNECTED,
EMPOWERED & PROFESSIONAL?• SOME INDICATORS:
– LISTED IN ANNUAL REPORT– BACKGROUND, EXPERTISE, CCEP– REPORTS TO BOARD– CAN BE TERMINATED ONLY BY BOARD– NOT IN LEGAL DEPARTMENT
– NO CARVE-OUTS FROM PROGRAM
![Page 44: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/44.jpg)
Follow-up
• ONLY DO AN EVALUATION IF YOU ARE PREPARED TO ACT ON IT
• NEVER BELIEVE ANY EVALUATION THAT SAYS EVERYTHING IS PERFECT
• NO MATTER HOW GOOD THE REPORT, DON’T GET COMPLACENT
![Page 45: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/45.jpg)
Follow-up
• ASSIGN FOLLOW-UP RESPONSIBILITY
– ASSIGN RESPONSIBILITY TO SPECIFIC MANAGERS
– MAKE IT PART OF THEIR OBJECTIVES & EVALUATIONS
– COVER ALL KEY FINDINGS• CHECK RESULTS PERIODICALLY
![Page 46: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/46.jpg)
Other sources
• Murphy, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM, chapter K, “USSGs item 5, other types of checking systems, monitoring techniques, and program evaluations” (SCCE; 2008)
• Kaplan & Murphy, COMPLIANCE PROGRAMS AND THE CORPORATE SENTENCING GUIDELINES: PREVENTING CRIMINAL AND CIVIL LIABILITY, chapter 18, “Measuring the Effectiveness of Compliance & Ethics Programs” (Thomson/West; 1993 & Ann. Supp.)
![Page 47: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/47.jpg)
Other sources
• SCCE SOCIAL NETWORK, “AUDITING AND MONITORING COMPLIANCE NETWORK”http://community.corporatecompliance.org/CORPORATECOMPLIANCE/CORPORATECOMPLIANCE/eGroups/DigestViewer/Default.aspx?GroupID=271
![Page 48: Joe Murphy, CCEP JEMurphy@voicenet.com AUTHOR, 501 IDEAS FOR YOUR COMPLIANCE AND ETHICS PROGRAM (SCCE; 2008) May 2009 AUDITING COMPLIANCE & MEASURING EFFECTIVENESS](https://reader036.vdocuments.us/reader036/viewer/2022062314/56649e875503460f94b8b7ac/html5/thumbnails/48.jpg)
Auditing Compliance & Measuring Effectiveness
QUESTIONS?