CONDUCT RISK, ETHICS & RISK CULTURE COMPLIANCE MANAGEMENT … · Weak corporate governance was...

4
Regulators around the globe are cracking down on conduct, and therefore, organisaons are looking to beer enforce their code of conduct to ensure an ethical culture exists that can be measured and managed, with reputaons being treated equal to profits, growth and consumer interests. In the UK it is monitored as Conduct Risk by the Financial Conduct Authority, in the US as Corrupon by the Dept of Jusce, and in many other jurisdicons regulators are demanding compliance officers to demonstrate their healthy compliance & ethics program. But it’s not just a problem related to banking and financial services – organisaons across mulple industries are under pressure to ensure their workforce understands relevant regulaons such as health and safety, consumer privacy, conflict of interest, complaints handling and more, in a way that can prove to the regulator to be effecve – and if not, risk reputaonal damage and large fines. INTRODUCTION Post-2008 financial meltdown, the regulators across the G20 countries were driven with a mission to find a beer way to prevent individual behaviour that eroded integrity and resulted in a systemic financial disaster. Weak corporate governance was determined as a main culprit, with tone at the top, culture and behaviour being contributory factors, which has forced regulators to put the onus on organisaons to prove they’ve considered conduct and ethics at a strategic level, and have put the governance and processes in place to migate the risk. £150 BILLION Research conducted by the London School of Economics 1 , showed between 10 of the world’s largest banks, including Barclays, HSBC, Lloyds Banking Group and Royal Bank of Scotland, have paid out about £150 billion (bn) in “conduct costs” since 2008. $50 BILLION Total penales imposed on firms selling mortgage backed securies in the US 2 has reached $50bn, with a single $16bn record selement hing the Bank of America in 2014. CONDUCT RISK, ETHICS & RISK CULTURE COMPLIANCE MANAGEMENT Use technology to beer shape the behaviour of your organisaon to get an A on your regulator’s scorecard 1 www.lse.ac.uk/newsAndMedia/news/archives/2013/11/ConductCostsProject.aspx 2 www.e-brm.com/blog/?paged=25 1 SOLUTION BRIEF

Transcript of CONDUCT RISK, ETHICS & RISK CULTURE COMPLIANCE MANAGEMENT … · Weak corporate governance was...

Regulators around the globe are cracking down on conduct, and therefore, organisati ons are looking to bett er enforce their code of conduct to ensure an ethical culture exists that can be measured and managed, with reputati ons being treated equal to profi ts, growth and consumer interests.

In the UK it is monitored as Conduct Risk by the Financial Conduct Authority, in the US as Corrupti on by the Dept of Justi ce, and in many other jurisdicti ons regulators are demanding compliance offi cers to demonstrate their healthy compliance & ethics program.

But it’s not just a problem related to banking and fi nancial services – organisati ons across multi ple industries are under pressure to ensure their workforce understands relevant regulati ons such as health and safety, consumer privacy, confl ict of interest, complaints handling and more, in a way that can prove to the regulator to be eff ecti ve – and if not, risk reputati onal damage and large fi nes.

INTRODUCTIONPost-2008 fi nancial meltdown, the regulators across the G20 countries were driven with a mission to fi nd a bett er way to prevent individual behaviour that eroded integrity and resulted in a systemic fi nancial disaster. Weak corporate governance was determined as a main culprit, with tone at the top, culture and behaviour being

contributory factors, which has forced regulators to put the onus on organisati ons to prove they’ve considered conduct and ethics at a strategic level, and have put the governance and processes in place to miti gate the risk.

£150 BILLION Research conducted by the London School of

Economics1, showed between 10 of the world’s largest

banks, including Barclays, HSBC, Lloyds Banking Group and Royal Bank of Scotland, have paid out about £150 billion (bn) in “conduct costs” since 2008.

$50 BILLION Total penalti es imposed on fi rms selling mortgage backed securiti es in the US

2 has reached $50bn,

with a single $16bn record sett lement hitti ng the Bank of America in 2014.

CONDUCT RISK, ETHICS & RISK CULTURE COMPLIANCE MANAGEMENT

Use technology to bett er shape the behaviour of your organisati on to get an A on your regulator’s scorecard

1 www.lse.ac.uk/newsAndMedia/news/archives/2013/11/ConductCostsProject.aspx2 www.e-brm.com/blog/?paged=25

1

SOLUTION BRIEF

2

SOLUTION BRIEF

COMMON CHALLENGES FOR GRC PROFESSIONALS

■ Financial Consumer Protecti on is a broad mandate & without doubt also impacts industries outside traditi onal banking and fi nancial services

■ Similar to regulatory frameworks such as Basel and Solvency, a one-size fi ts all cookie cutt er framework does not exist

■ How do you capture board level considerati ons and make sure the trickledown eff ect reaches product design & other governance acti viti es

■ How do you assess your organisati on’s “risk culture” ■ How do you account for consumer impact and feedback

to ensure positi ve outcomes

ACL’S APPROACH TO SOLVING CONDUCT RISK, ETHICS & RISK CULTURE COMPLIANCE MANAGEMENT

Board Level Governance

Demonstrate that the board considers the impact of their organisati on’s products on consumers, as much as they do revenues, growth & risk. (Figure 1)

Top-down Risk-based Approach

There is no prefab framework – so pencil out the areas that make your organisati on vulnerable to conduct risk such as product design, marketi ng tacti cs, sales commissions and other monetary remunerati on, compliance reviews, and consumer feedback. Map your key control framework to ensure all of your risks are well miti gated. (Figure 2), (Figure 3)

Issue & Incident Management

Execute your acti viti es for conduct miti gati on, and capture control or policy gaps – assign ownership to them, track them, report on them to the board and make sure they get resolved. ACL’s platf orm does a great job automati ng this and allows you to collaborate with business owners easily.

Acti viti es Defi ne Culture

Culture isn’t separate from what is communicated in strategy and objecti ves, it’s deliberately created through process to shape, monitor and reinforce desired behaviours. Culture is simply your organisati on’s shared beliefs. (Figure 3), (Figure 4)

Data & Risk Analyti cs

Data isn’t an opti onal skill or competency. Data is absolutely necessary when seeking the truth in organisati onal behaviour. Monitor transacti ons and let data reveal the truth. Flag acti viti es or data that look suspicious and have the appropriate person review, investi gate or remediate it so no doubt exists. When an issue is discovered, register it and track it through to resoluti on.

Whistleblower Hotline

Most occupati onal wrongdoing is uncovered through ti ps, and if you don’t have a hotline, the organisati on may be caught off guard with a splash cover story on tonight’s 6pm news.

Code of Conduct – Gratuity Pre-Approval Hotline

As part of a robust code of conduct program, giving or receiving gift s is common business practi ce within pre-defi ned limits by industry or an organisati on. Be a step ahead of the regulators and register the authorised gratuiti es before they occur.

Consumer/Customer Feedback Survey & Complaints Hotline

How do you know if consumers are receiving the right products from you? Simple. Just ask them using ACL surveys – you design them and we do the rest by automati ng the workfl ow to respond.

Are you fi nding out about unhappy customers very late in the game? Know your customer (KYC) bett er - get them to tell you earlier so you can easily modify your products, fees, or processes.

Figure 3: Example workfl ow to gain insight on the sales commission process to help manage conduct risk

Figure 2: Projects assigned to manage risks identi fi ed

Figure 1: Organisati on-wide risks identi fi ed

soluti on-brief-conduct-risk© 2016 ACL Services Ltd. ACL and the ACL logo are trademarks or registered trademarks of ACL Services Ltd.

All other trademarks are the property of their respecti ve owners.

LEARN MORE ABOUT WHAT YOUR ORGANISATION CAN ACCOMPLISH WITH ACL.

Call +44 (0) 118 949 7434 (UK) or 1-888-669-4225 (USA) to speak with a representati ve

Visit our website at acl.comEmail us at [email protected]

ACL SOLUTION OVERVIEW:

Benefi ts of ACL’s Data-Driven Approach to Conduct Risk, Ethics & Risk Culture ■ Analyse operati onal data for trending in sales and other KRI’s ■ Analyse survey data and complaints for additi onal trending ■ Reinforce a healthy risk culture by paying att enti on to details ■ Centralise everything from board governance, to miti gati on eff orts, to customer feedback ■ Provide interacti ve, acti onable oversight to senior management & the board

� � � �

Internal Audit

Compliance & Ethics

Finance & Accounti ng

Risk Management

Conduct Risk Assurance over Conduct Risk Program

Owner of Conduct Policy Management

Process Health Checks & Monitoring

Owner of Conduct Risk Program

Code of Conduct Assurance over Code of Conduct Compliance

Owner of Code of Conduct Compliance

Gratuity Pre-Approval Workfl ow

Owner of Conduct across broader ERM Framework

Organisati onal Culture

Assurance over Risk Culture

Owner Risk Culture Management

Finance Process, Policy & Culture Reinforcement

Owner of ERM Culture

Anti Fraud Assurance over Vendor & Employee Fraud

Owner of Conduct Fraud

Process Monitoring to Prevent Conduct Fraud

Figure 4: Surveys can help assess workforce or affi liates or third parti es on awareness of new product design or compliance requirements

4

SOLUTION BRIEF