Compliance risk rewiews
Compliance risks make it imperative that companies regularly review their business processes. Mounting regulatory requirements regarding anti-money laundering, trade and sanctions as well as the increased enforcement of the UK Bribery Act and the Foreign Corrupt Practices Act (FCPA) become increasingly difficult challenge even for well-run companies. In the last five years compliance risks reviews (CRR) became a major driver of risk management and forensic services on global scale. Risks go hand in hand with technological leverage of a new age. Fraudsters and other wrongdoers deploy sophisticated technology to the best of their knowledge in the same way as risk managers use sophisticated reporting tools and analytics to manage and transform risk data into valuable business intelligence. This cat and mouse game never ends. Adoption of monitoring programs, including Governance, Risk and Compliance (GRC) tools and sophisticated visualization and forensic technologies such as Big Data, is essential. Yet the other side slips from the scrutiny by using newest tools of communications, benefiting from strict IT policies in companies, which in most cases push fraudsters to go completely off-records. Strictly controlled environment breeds uncontrolled channels of communication, albeit in indirect way. This is a big challenge. We are aware of this and offer extensive expertise in investigative, forensic technology and business intelligence areas to assist both in-house and outside legal counsels and compliance officers to effectively uncover the facts of potential company’s non-compliance with laws, regulatory requirements, rules and other codes of conduct.
Routinely, upon authorized access to client’s data we perform CRR with advanced computer forensic techniques (FDA, e-Discovery), which help uncover “hidden” tracks of communications and compliance artifacts even on thoroughly controlled devices of the targets. Acting on restricted or broad mandate of a client, we process company’s data into indexed project database, accessible by search terms for focused or comprehensive compliance risks review. In broader mandate projects, we broaden the number of data sources, merging company’s data with legitimate pay-for-access databases of legal entities, social networks analysis and public sources. Our clients enjoy the way we present CRR deliverables. Our reports contain well-investigated and complete cases of misconduct in visualized form with meaningful insights, which greatly enhance clients’ capabilities in taking informed strategic decisions, be they reactive or proactive in nature.