BoardAndFraud

The Continued Evolution of Best Practices for Compliance Programs

In 2019 and 2020, the federal government released significant information which directly impacted compliance professionals. We cover all three releases in this eBook, the 2020 Evaluation of Corporate Compliance Programs – Guidance Document, the 2019 Framework for OFAC Compliance Commitments, and the 2019 Evaluation of Corporate Compliance Programs in Criminal Antitrust Investigations.

These three documents provided not only the government’s refreshed thinking on what constitutes a best practices compliance program. I have combined all three onto a best practices document.

» Read More

SEC & DOJ Release Second Edition of the Resource Guide to the U.S. Foreign Corrupt Practices Act

The SEC and DOJ Resource Guide is intended to provide information for businesses and individuals regarding the U.S. Foreign Corrupt Practices Act (FCPA). The guide has been prepared by the staff of the Criminal Division of the U.S. Department of Justice and the Enforcement Division of the U.S. Securities and Exchange Commission.

The key changes to the Second Edition reflect developments and issues that are well-known to experienced practitioners. Nevertheless, the updated Guide emphasizes the importance of effective (and “adequately resourced”) compliance programs, risk-based diligence efforts, and voluntary self-disclosures.   

» Read More

COVID-19 – Fraud On The Rise is No Surprise!

Last week, the Association of Certified Fraud Examiners (” ACFE”) published the results of a survey taken by more than 1,800 anti-fraud professionals in late April and early May 2020, while we were deep into the Covid-19 crisis.  The findings, for the most part, are not surprising, but does reveal some disappointing information.  While I have not seen a raw copy of the survey, I was surprised the ACFE didn’t ask if the company’s fraud risk assessment was reviewed and modified accordingly.

In addition, the survey highlights trends in the overall level of fraud. Survey respondents provided information about their current observations and expected changes regarding ten (10) specific types of fraud.

» Read More

DOJ Revises its Guidance on the Evaluation of Corporate Compliance Programs

Without any fanfare, the U.S. Department of Justice Criminal Division has once again revised its Evaluation of Corporate Compliance Programs (“ECCP”).  The ECCP  remains  organized around three overarching questions that prosecutors ask when evaluating compliance programs, with some revisions, which are in bold text below:

Is the corporation’s compliance program well designed?
Is the program being applied earnestly and in good faith? In other words, is the program being implemented adequately resourced and empowered to function effectively?
Does the corporation’s compliance program work in practice?

While most of the document is identical to the 2019 Guidance, there are subtle and noticeable revisions.  The revisions appear to be designed to help provide additional clarity when answering the above three questions. 

» Read More

The Next Level of Investigations

Many investigations are currently being performed remotely, in concert with the general counsel, the chief compliance officer, the chief audit executive, and depending on the how the allegation was triaged, with outside counsel, a forensic accounting firm, and the board.  Even government prosecutors are interviewing witnesses remotely.

The primary goal of the interview is to elicit information in a non-coercive manner. My personal preference is always to conduct interviews face to face because I can control the subject and the environment, and evaluate the nonverbal behavior of the interviewee.  But, if performing a face-to-face interview is not possible, I suggest using video over the telephone.

This writing provides some suggestions for techniques to consider when conducting internal investigations remotely.

» Read More

Internal Investigations and Keywords

Investigative search terms are specific to each situation and are a primary tool used by the investigation team to identify possible relevant information in a data set. However, overly broad or poorly chosen terms or keywords can produce excessive and irrelevant results, or worse, miss the  “smoking gun” e-mail or document. Additionally, have you thought about the list of search terms or keywords being privileged or protected opinion work product in the context of an internal investigation?

» Read More

COSO Releases Thought Leadership on Risk Appetite

Organizations encounter risk every day as they pursue their objectives. In conducting appropriate oversight, management and the board must deal with a fundamental question: How much risk is acceptable in pursuing these objectives? Added to this, regulators and other oversight bodies are calling for better descriptions of organizations’ risk management processes, including oversight by the board.

COSO has released a thought leadership piece to help understand and communicate risk appetite, an amorphous concept to many.

» Read More

Fraud Pentagon – Enhancements to the Three Conditions Under Which Fraud May Occur

Today’s fraudster is clever and operates in an environment ripe for criminal activity. Economic unrest is making it easier for employees to find ways to set fraud in motion – and a new breed of offenders is finding cunning ways to do so. After more than 60 years, the classic fraud triangle of three elements or events that motivate an employee to cross the line has morphed into the Fraud Pentagon.

Company boards and senior management must take an offensive stance against the five conditions that precipitate fraud with a clear plan that limits the opportunity for fraud and minimizes the impact when fraud does occur.

» Read More

Tone from the top: Leadership’s challenge during a crisis

Leaders must find ways to engage with their people to motivate them, and this becomes increasingly important during uncertain or trying times. If done correctly, talking can be incredibly powerful. It can help relieve anxiety and help people find the strength they didn’t know was in them. Studies have shown that talking shuts down the brain’s fear center.

As Dr. Judson A. Brewer stated in a recent New York Times article, “Anxiety is a strange beast. As a psychiatrist, I have learned that anxiety and its close cousin, panic, are both born from fear.”

Fear and anxiety can be debilitating. Without proper communication in a crisis, it’s easy for people to spin and spread stories of fear, creating social contagion. To balance this tendency, in a crisis, leaders need to take their “tone from the top” to the next level.

» Read More

Whistleblowers: Tipsters not trusting the system? Here’s how to win them back

Whistleblowers: Tipsters not trusting the system? Here’s how to win them back.

Anonymous hotlines and tip-reporting structures are useless, of course, if informants don’t trust them. Employees won’t blow the whistle if they fear reprisals. So, their concerns often don’t enter case-management systems and frauds continue. Here’s how to earn back their trust, take them seriously and transform raw tips into valuable fraud examinations.

» Read More

Whistleblowers: A Fraud Triage System

As the use of whistleblower programs continues to grow, many organizations find themselves struggling to manage burgeoning caseloads. As a result, serious fraud investigations can be delayed (with mounting losses) while less consequential complaints are being investigated. The lack of a timely, systematic and repeatable process for evaluating and prioritizing whistleblower tips that contain allegations of ethical breaches can also expose an organization to increased regulatory risk.

While there is no single, “right” method for following up on whistleblower complaints, the most effective approaches often resemble the medical triage programs that hospitals and first responders use to allocate limited resources during emergencies, or a crisis situation.

Here are some useful guidelines for designing and implementing a fraud triage system.

» Read More

Board Overconfidence: An Often Unrecognized Risk

Directors on corporate boards are – almost by definition – men and women who are accomplished and successful. So it is only natural that most board members also are highly self-assured and confident in their judgment and abilities.

When that self-confidence is misplaced or overstated, however, the consequences can be costly. This is particularly true when overconfidence causes board members to underestimate or overlook the risks associated with fraud or management incompetence. Moreover, when board overconfidence is compounded by management overconfidence, the risks can multiply quickly.

Once the dangers of overconfidence are understood and appreciated, board and management teams alike can begin taking proactive steps to mitigate the risks. Knowing the warning signs of board overconfidence is an essential first step.

» Read More

The Use of Red Flags to Detect Misconduct or Fraud

A Red Flag is an unusual circumstance or a pattern of anomalies that should alert a reasonable person of possible misconduct. In each such instance, further inquiry and due diligence might be necessary to determine if the anomalies are explainable or require an investigation.

Below are some Red Flags to consider.

» Read More

The Role of the Board of Directors in Compliance Oversight

Under the U.S. Federal Sentencing Guidelines, in order to receive credit for having an effective compliance program, and thereby reduce the fines imposed on the organization, a Board of Directors must be “knowledgeable about the content and operation of the compliance and ethics program,” and must “exercise reasonable oversight with respect to the implementation and effectiveness of the compliance and ethics program.” In addition, in criminal actions against a business organization, including the FCPA, the DOJ’s Justice Manual instructs prosecutors to ask and answer several questions, including: 1) Do the Directors exercise independent review of the company’s compliance program? and 2) Are Directors provided timely and accurate information sufficient to enable the exercise of independent judgment?

» Read More

The Compliance Shift – Now for Tomorrow!

Where is compliance headed in the 2020’s? Certainly, technological solutions will be a big part of the future of compliance programs and controls. Compliance is rapidly emerging and being viewed as a critical business process. Moving away from the days in which it was driven by legalese and where lawyers are responsible for crafting compliance policies and procedures.  These advances provide opportunity for innovation, and enable compliance to recede from being viewed as a cost center led by the “head of business denial”, to being viewed as value added function to the business. Simply put, a more effective compliance program contributes to more efficient business processes, which leads to greater profitability.

» Read More

Fraud, Compliance & Integrity Risk During a Crisis and a Downturn

As a crisis unfolds, like Coronavirus, and markets decline globally, fraudsters will be adapting and new risks will emerge and some risks will increase. 

Remember, white collar criminals adapt by profiling us, so they can exploit our weaknesses. That being said, companies need to develop a strategy that enables the deployment of appropriate tactics to manage these new or increasing risks.

This writing explores some fraud, compliance, and integrity risks and is intended to provoke discussion.

» Read More

Take Your SOx Off

On March 12, 2020, the Securities & Exchange Commission adopted a controversial rule that exempts more categories of public companies from auditor attestation of management’s internal control over financial reporting required by Section 404(b) of the Sarbanes-Oxley Act of 2002, despite strong opposition by investor protection advocates.

The rules are intended to benefit low revenue companies even if the funds raised in the public stock markets are not small, according to, Release No. 34-88365, Amendments to the Accelerated and Large Accelerated Filer Definitions. The amendments become effective 30 days after publication in the Federal Register, which normally occurs a few weeks after a rule is posted on the SEC’s website.

» Read More

COVID-19 – Coronavirus: Crisis Management, Business Continuity, Fraud, and More!

Crisis Management: Some of the biggest mistakes made when handling a crisis are not dealing with the problem head-on, thoughtless or insincere comments, lack of communication with stakeholders, unprepared spokespeople, getting defensive after receiving backlash, or, sitting back and letting the problem grow. Domino’s, Sony, Samsung, BP, United Airlines, Equifax, KFC, are all good examples of companies who stumbled with crisis management. Companies should study these crises and learn from the mistakes!

In addition, fraud, compliance, and integrity risks may change. A crisis situation can and often does increase the pressure on senior management and of course salespeople to meet their sales targets! Deviant behavior is easily justified.

» Read More

IIA Philadelphia and Baker Tilly’s Fraud & Ethics Symposium is Postponed! Stay tuned for the new date.

This one-day fraud symposium, sponsored by Baker Tilly’s Global Forensic, Compliance and Integrity Services, and Solutions Practice Group and hosted by the Institute of Internal Auditors, Philadelphia Chapter, will include topics such as:

•Culture
•Current trends in white-collar crime
•Tone is the middle
•Policy management
•Case study on a local fraud

Discover who will be speaking and register for the event!

» Read More

Five Men Indicated for Worldwide Cryptocurrency Fraud Scheme

On December 10, 2019, three men were arrested in connection with an alleged $722 million cryptocurrency mining fraud scheme.  An additional defendant was arrested following the Department of Justice’s press release, and another remains at large.

From April 2014 through December 2019, Defendants solicited investments in its BitClub Network, a purported bitcoin mining pool that was operated by Defendants.  They are charged with exploiting unsophisticated investors with “false promises of large returns for investing in the mining of Bitcoin.”  The “complex world of cryptocurrency” allowed Defendants to take advantage of investors, which Defendant Matthew Brent Goettsche referred to as “dumb” investors, “sheep,” and “morons.”  Defendants manipulated the daily mining earnings amounts reported to investors in order to attract new investors and to encourage reinvestment of earnings, amassing at least $722 million in ill-gotten gains.

Read more to better understand how others exploit this perplexing concept, what the SEC has to say about the matter, and what the consequences are.

» Read More
Skip to toolbar