In my previous post, A Quick Guide to ESG and Risk Management in the Extended Enterprise, I outlined what environmental, social and governance (ESG) is and how it impacts third-party risk management. This post expands on a specific aspect of governance in ESG: anti-bribery and corruption (ABAC). ABAC Risk and Compliance  Organizations today face a tremendous…

The extended enterprise defines business today. An organization is not defined by brick and mortar walls and traditional employees. The organization is a web of third-party relationships of suppliers, vendors, outsourcers, service providers, distributors, contractors, consultants, brokers, dealers, agents, and more. The actions and behavior of these third parties impact and shape the reputation and…

Having an opinion of where corporate compliance and ethics should report outside of legal is like the opening sequence to Indiana Jones: Raiders of the Lost Ark. Indiana carefully makes his way through the jungle, while his colleagues are taken out by traps. But Indy is cautious and experienced. He gets deep into the jungle following…

Environmental, social and governance practices are under increasing regulatory scrutiny. How well is your third-party risk management program structured to assess these risks? Today, organizations are increasingly challenged to address environmental, social and governance (ESG) practices and reporting. Stakeholders, customers and regulators want to ensure that the companies they interact with and invest in share…

In today’s global business environment, a broad spectrum of economic, political, social, legal, and regulatory changes continually takes the organization to a new level of strategic and tactical complexity and creating commensurate pressures on business performance. The legal department has become essential in navigating this risk in today’s complex, dynamic, distributed, and disrupted business environment.…

Previously we looked at Why Policies Matter and The Principles of Policy Management from the newly published Policy Management Capability Model that I developed with OCEG for PolicyManagementPro.com. This week we turn our attention to the structure of a strong policy management capability in your organization found in the Policy Management Capability Model (which is…

Anyone that knows me knows that I love science fiction and fantasy books and movies. In the 70’s I remember being in 2nd grade and watching the cartoon of J.R.R. Tolkien’s The Hobbit. I instantly devoured the book and read all of The Lord of the Rings and Silmarillion by the 4th grade. I was…

ESG – Environmental, Social & Governance – is all the rage and buzzword with investors, regulators, lawmakers, and citizen activists. Pressure is mounting from multiple fronts for organizations to implement ESG reporting in their organizations. In one respect, this is an evolution of sustainability and corporate social responsibility (CSR) efforts of the past. However, ESG…

Agility is a thing of beauty. I love watching acts of agility. Take parkour for example, how these athletes can leverage and use their surroundings to navigate and seem to do the impossible . . . simply amazing. A few years back I was doing a lot of Spartan races. Myself, that was not agility…

We are at the final stage in working through a CECO SWOT Analysis to help CECOs develop their strategy in 2021 and into the future. Over the past few weeks, we looked at the STRENGTHS, WEAKNESSES, and OPPORTUNITIES of the typical CECO; this week we turn to the THREATS. As you look to build your strategic compliance and ethics…

Last week we looked at Why Policies Matter from the newly published Policy Management Capability Model that I developed with OCEG for PolicyManagementPro.com. This week we turn our attention to the principles of policy management for those seeking training and certification as a Certified Policy Management Professional (CPMP) . . . Policy Management is a…

From time to time, people ask why policies matter. After all, they argue, are not the laws and regulations we have to follow enough guidance? Beyond those requirements, can’t we let managers decide how to run their operations and have case-by-case flexibility? Don’t policies create liability when they are not followed? Isn’t it just more…