compliance, ethics and walking a fine line creating an ... · added diligence 17 l confidential and...

24
COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN EFFECTIVE ETHICS AND COMPLIANCE PROGRAM This presentation will define the elements of an effective ethics and compliance program, with special emphasis on available resources to help implement such programs into the workplace. The session will focus on the EthicsLine hotline and its operation within the confines of the EU Data Privacy requirement, as well as the UK Bribery Act. You will walk away with recommended training tools for employees and tips on how to use the hotline to report violations. NICK CIANCIO Chief Compliance Officer Global Compliance Charlotte, North Carolina Nick Ciancio joined Global Compliance in June of 2004 and currently serves as President Global Compliance International and Chief Compliance Officer. Within the ethics and compliance industry, Nick serves on the Open Compliance and Ethics Group’s (OCEG’s) Hotline Working Group panel, and is an active participant with the Society of Corporate Compliance and Ethics (SCCE), as well as the Ethics and Compliance Officers Association (ECOA). He is a frequent speaker on U.S. and international corporate ethics and compliance conference agendas, and he recently served on the advisory committee for the Ethics Resource Center’s 2007 National Business Ethics Survey. Nick possesses more than 20 years of experience in senior marketing and business development positions in the telecommunications and technology industries. Nick holds a Master of Art in Statistics from Pennsylvania State University and a Bachelor’s of Science and Master of Science in Mathematics from the University of Massachusetts. Nick has also earned a Certificate in Business Ethics from Colorado State University. “Association of Certified Fraud Examiners,” “Certified Fraud Examiner,” “CFE,” “ACFE,” and the ACFE Logo are trademarks owned by the Association of Certified Fraud Examiners, Inc. ©2011

Upload: others

Post on 09-Aug-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

COMPLIANCE, ETHICS AND WALKING A FINE LINE

CREATING AN EFFECTIVE ETHICS AND COMPLIANCE PROGRAM

This presentation will define the elements of an effective ethics and compliance program, with special emphasis on available resources to help implement such programs into the workplace. The session will focus on the EthicsLine hotline and its operation within the confines of the EU Data Privacy requirement, as well as the UK Bribery Act. You will walk away with recommended training tools for employees and tips on how to use the hotline to report violations.

NICK CIANCIO

Chief Compliance Officer Global Compliance

Charlotte, North Carolina

Nick Ciancio joined Global Compliance in June of 2004 and currently serves as President

Global Compliance International and Chief Compliance Officer. Within the ethics and compliance industry, Nick serves on the Open Compliance and Ethics Group’s (OCEG’s) Hotline Working Group panel, and is an active participant with the Society of Corporate Compliance and Ethics (SCCE), as well as the Ethics and Compliance Officers Association (ECOA). He is a frequent speaker on U.S. and international corporate ethics and compliance conference agendas, and he recently served on the advisory committee for the Ethics Resource Center’s 2007 National Business Ethics Survey.

Nick possesses more than 20 years of experience in senior marketing and business

development positions in the telecommunications and technology industries. Nick holds a Master of Art in Statistics from Pennsylvania State University and a Bachelor’s of Science and Master of Science in Mathematics from the University of Massachusetts. Nick has also earned a Certificate in Business Ethics from Colorado State University.

“Association of Certified Fraud Examiners,” “Certified Fraud Examiner,” “CFE,” “ACFE,” and the ACFE Logo are trademarks owned by the Association of Certified Fraud Examiners, Inc.

©2011

Page 2: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

1

Creating an “Effective” Anti-Fraud Program

Nick CiancioChief Compliance Officer, Global Compliance

June 2011

AGENDA

Responsibility for Fraud Protection

The Economic Climate and Fraud

Building an Effective Anti-Fraud Program

Impact of an Effective Anti Fraud Program

2 l Confidential and Proprietary

Impact of an Effective Anti-Fraud Program

ACFE Anti-Fraud Program Offerings

RESPONSIBILITY FOR FRAUD PROTECTION

Who Owns Fraud?

3 l Confidential and Proprietary

Photo courtesy of ACFE

Page 3: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

2

AGENDA

Responsibility for Fraud Protection

The Economic Climate and Fraud

Moving Out of Recession and Into Growth

Building an Effective Anti Fraud Program

4 l Confidential and Proprietary

Building an Effective Anti-Fraud Program

Impact of an Effective Anti-Fraud Program

ACFE Anti-Fraud Program Offerings

Economic slowdown has stalled business growth for the past couple of years

Anti-fraud and anti-corruption efforts that had begun to gain traction for some corporations were eroded with the economic downturn, as resources were not adequate to support efforts

Having managed through the financial crises of the last two

ECONOMIC CLIMATE IMPROVING

5 l Confidential and Proprietary

Having managed through the financial crises of the last two years, many corporations are beginning to again focus on growth

Source: Ernst & Young 11th Global Fraud Survey

MANAGEMENT TARGETING GROWTH

Q: Which of the following best characterizes your corporation’s strategy over the next year?

23%7%6%

Aggressive, growth-oriented stance as demand is improving

Don’t know

Other

53% pursuing growth

6 l Confidential and Proprietary

30%

34%

Pursue growth opportunistically while prospects unclear

Focus on cost control until prospects improve

Source: Ernst & Young 11th Global Fraud Survey

Page 4: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

3

ECONOMIC CLIMATE IMPROVINGMoving into growth

Growth often translates to increased risk—fraud, bribery, corruption

Expansion of geographiesAcquisition

Challenge is to achieve ethical growth

7 l Confidential and Proprietary

Challenge is to achieve ethical growth

A robust anti-fraud program to manage risks requires investment in resources—time, people, and technology

FRAUD IS GLOBAL

18%

21%

21%

16%

Middle East/Africa

Latin America

Western Europe

Global

Q: Has your organization experienced a “significant” fraud in the last 2 years?

8 l Confidential and Proprietary

8%

8%

9%

12%

14%

0% 10% 20% 30% 40%

Australia

Far East

North America

Japan

Central/Eastern Europe

Source: Ernst & Young 11th Global Fraud Survey

PREPARED TO ADDRESS FRAUD?

51%

52%

Well-defined roles for different groups ininvestigations

Clear process for reporting incidents to the board

Q: Which, if any, apply to your organization’s response to the first reporting of a possible case of fraud, bribery, or corrupt practice?

9 l Confidential and Proprietary

10%

39%

46%

48%

0% 10% 20% 30% 40% 50% 60%

None/Don't Know

Documented response plan invovling parts ofbusiness with investigative skills

Clear process for determining consistent disciplinaryoutcomes

Clear process for conducting root-cause analysis

Source: Ernst & Young 11th Global Fraud SurveyNote: North America surpassed averages

Page 5: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

4

ROLE DEFINITION

56%

54%

Internal Audit

Legal

Q: Does your organization have well-defined roles for different groups in response to the first reporting of a possible case of fraud, bribery, or corrupt practice?

10 l Confidential and Proprietary

43%

57%

0% 10% 20% 30% 40% 50% 60%

CFO

Compliance

Source: Ernst & Young 11th Global Fraud Survey

Not atypical to find lack of consistency, division of responsibility, and various departments working in silos with little integration of systems and processes

WHY IS FRAUD PREPAREDNESS AND RESPONSE OFTEN INSUFFICIENT?

Realization that putting an effective fraud program in place takes focus and time

Little appetite for expense associated with appropriate procedures to mitigate fraud

11 l Confidential and Proprietary

Proactive fraud prevention planning often met with initial support, but not sustainable top-level commitment to complete the task and create a lasting “effective” effort

Source: Ernst & Young 11th Global Fraud Survey

FURTHER COMPLICATING FACTORS

Suppliers

Joint V t Subcontractors

International Joint

Ventures

Co-devlopmentPartnerships

Suppliers’Suppliers

Suppliers in EmergingMarkets

Temporary Employees

Supply chains are now an important inclusion in an anti-fraud program —the more complex the organization, the larger the supply chain

12 l Confidential and Proprietary

Contractors

Agents

VendorsDistributors

Consultants

Ventures Subcontractors

International Intermediaries

Domestic Agencies

Offshore Service

Providers

DataVendors

Foreign Distributors

Dealers or Resellers

Lobbyists

Auditors YourCorporation

Page 6: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

5

GAUGING SUPPLIER RISK

HigherLikelihood

Vendors

DistributorsJoint Ventures

Agents

13 l Confidential and Proprietary

LowerLikelihood

Lower Severity

Higher Severity

External Consultants

Suppliers

Contractors

HOW DO YOU APPROACH FRAUD?

Proactive fraud detection and preventionAssess riskImplement controls to detect and deter fraudImplement processes/procedures to address alleged fraud

14 l Confidential and Proprietary

fraudContinue to evaluate and alter controls as necessary to mitigate fraud

Reactive fraud detection and prevention“Cross that bridge when we come to it”

ASSESSING FRAUD RISK

Q: When did your organization last carry out a fraud risk assessment?

- 15% had never done a fraud risk assessment

- 10% unsure% 6 months

to 1 year ago

% more than 1 year ago

Don’t know

% Never

11%

15%

10%

15 l Confidential and Proprietary

% < 6 months ago

44%

20%

Source: Ernst & Young 11th Global Fraud Survey

Risk assessments help prioritize actions to deal with most significant risks

Page 7: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

6

GROWTH EVENTS NECESSITATE ADDED DILIGENCE

% Not Very Frequently / Never

Pre-acquisition Post-acquisitionNorth America 18% 41%Latin America 16% 27%

Q: How frequently has your company conducted fraud and/or corruption-related “pre- and post-acquisition” due diligence in the last two years?

16 l Confidential and Proprietary

Western Europe 33% 43%Central and Eastern

Europe38% 43%

Middle East/Africa 29% 42%

Far East 30% 41%Australia 25% 54%

Japan 40% 53%

Source: Ernst & Young 11th Global Fraud Survey

FRAUD DUE DILIGENCE

“Prepared” organizations regularly and continually assess fraud risk

Organizations experiencing growth events must conduct added diligence

17 l Confidential and Proprietary

Of particular importance for organizations operating in highly regulated industries and/or operating in high-risk geographies

FRAUD DUE DILIGENCE—IS THE BOARD ENGAGED AND EDUCATED?

22%

17%

28%

20%

13%

17%

18%

33%

13%

13%

0% 20% 40% 60% 80% 100%

Total

North America

Q: Extent of agreement with this statement: “Our Board needs a more detailed understanding of the business if it is to be an effective safeguard against fraud, bribery, and corrupt practices.”

18 l Confidential and Proprietary

26%

16%

28%

30%

23%

26%

27%

28%

11%

48%

11%

10%

14%

20%

12%

23%

23%

9%

22%

11%

9%

23%

11%

7%

4%

Latin America

Western Europe

Central/EasternEurope

MiddleEast/Africa

Far East

% Strongly agree% Tend to agree% Neither agree or disagree% Tend to disagree% Strongly disagree

Source: Ernst & Young 11th Global Fraud Survey

Page 8: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

7

FRAUD DUE DILIGENCE—IS THE BOARD ENGAGED AND EDUCATED?

28%

40%

Details of internali i i i f d

Fraud risk assessment

Review of anti-fraud,bribery and corruption

internal controls

Q: Which, if any, of the following has the Board asked for in the last 12 months?

19 l Confidential and Proprietary

26%

14%

28%

0% 10% 20% 30% 40% 50%

Don't know

Whistleblower hotline

investigatins into fraud,bribery, corruption

Note: North America above average in performanceSource: Ernst & Young 11th Global Fraud Survey

DATA DOES NOT SUBSTANTIATE ADEQUATE BOARD CONCERN ABOUT FRAUD

Boards don’t always seem to be behaving in a manner that would increase their own protection

Management over-ride of controls was prevalent in many high-profile fraud instances

20 l Confidential and Proprietary

Board needs to understand how the corporation really operates and is “sufficiently skeptical” about numbers presented to them

Source: Ernst & Young 11th Global Fraud Survey

SUMMARY OF ERNST & YOUNG SURVEY FINDINGS

A substantial number of corporations suffered a significant fraud in the 2009/2010 timeframe

Despite the increased incidents of fraud, corporate entities’ responses to fraud allegations are ad hoc and inconsistent

Proactive measures to manage the risk of fraud are not

21 l Confidential and Proprietary

guniversally contemplated

Measures to mitigate corruption and bribery exposure are still not standard practice for corporations, including those looking to drive growth through acquisitions

Source: Ernst & Young 11th Global Fraud Survey

Page 9: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

8

AGENDA

Responsibility for Fraud Protection

The Economic Climate and Fraud

Building an Effective Anti-Fraud Program

Impact of an Effective Anti Fraud Program

22 l Confidential and Proprietary

Impact of an Effective Anti-Fraud Program

ACFE Anti-Fraud Program Offerings

9 ELEMENTS OF AN “EFFECTIVE”ANTI-FRAUD PROGRAM

1. Risk Assessment

2. Code of Ethics or Conduct and Ethics and Anti-Fraud Policies

3. Tone from the Top—Ongoing Communications

4. Training

23 l Confidential and Proprietary

5. Vehicles for Reporting Suspected Misconduct or Noncompliance

6. Centralized Data Repository

7. Standardized Case Investigation, Management, and Disposition

8. Data Analytics

9. Evaluation and Validation (Monitoring)

1. RISK ASSESSMENT WHAT SHOULD ASSESSMENT INVOLVE?

Varies based on corporation size, industry, and geography of operation

Key elements of assessment:

Review of Code of Conduct and other relevant policies and procedures

S f

24 l Confidential and Proprietary

Scrutiny of policies and procedures surrounding cash disbursements and facilitation payments, gifts and hospitality, and sponsorships

Assessing the ability of systems to report or monitor expenditures

Interviews with key personnel regarding:Corporate culture and attitude toward ethics and complianceVetting procedures for and use of third parties and agentsInteractions with government officials and departments

Page 10: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

9

1. RISK ASSESSMENT WHAT SHOULD ASSESSMENT INVOLVE?

Key elements of assessment (cont’d):

Testing internal controls already in place to mitigate fraud, bribery, and corruption risks

Reviewing fraud and corruption incident logs along with the nature of the responses and ultimate outcomes

Id tif i thi d t t i l d i bt i i k t

25 l Confidential and Proprietary

Identifying third-party agents involved in obtaining key assets, operating licenses, or sales contracts and understanding their role

Checking whether audit rights relating to suppliers, agents, and other third parties have ever been exercised with regard to bribery and corruption controls

Assessing to whom compliance training is offered and how often, as well as checking compliance training attendance/completion records

Outlines an organization’s:Corporate ValuesExpected Behaviors

Effective Codes of Conduct are:Written in common language at the 6th grade reading

2. CODE OF CONDUCT AND ETHICS/ANTI-FRAUD POLICIES

26 l Confidential and Proprietary

g g g gcomprehension level

Customized to industry, organization, workforce, and demographic (ethnic, age, gender, socio-economic)

Translated and culturally adapted if the organization is multinational

Reviewed, tested, and certified annually

FRAUD PREVENTION—CODE AND POLICYJUSTIFICATION

When a strong Code of Conduct was in place:

The median fraud losses were reduced by 46%*and

The duration of the fraud scheme was reduced on average by 37.5%*

27 l Confidential and Proprietary

When an anti-fraud policy was in place:

The median loss related to fraud was reduced by 40%*and

The average duration of a fraud scheme was reduced by 28%*

Source: 2010 ACFE Report to the Nations on Occupational Fraud and Abuse

Page 11: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

10

Executive management must:Set the tone that reflects the desired culturePersonally respect and demonstrate the tone in everyday communications and functionality (“Talk the Talk / Walk the Walk”)Drive tone down through all levels of the organizationCommunicate with specific message of ethics and integrity at least

3. TONE FROM THE TOP

28 l Confidential and Proprietary

p g g y4 times per year

Consistently enforce the organization’s Code of Conduct

“It's pretty clear that the best compliance program in the world is meaningless—even if it is funded with a well-meaning compliance officer, if the leadership is not behind it and isn't supportive.”

- Honorable Michael E. Horowitz, Commissioner, United States Sentencing Commission

MOOD IN THE MIDDLE

81%

Try resolving the

Notify supervior oranother manager

Q: What would you be inclined to do if you observed a violation of your organization’s standards of conduct?

Important to use line leadership to embed culture of ethics and integrity

29 l Confidential and Proprietary

6%

10%

44%

52%

0% 25% 50% 75% 100%

Look the other way ordo nothing

Notify someoneoutside the

organization

Call the ethics orcompliance hotline

Try resolving thematter directly

Source: KPMG Integrity Survey 2008/2009

Every employee at every level of the organization should be educated on:

Corporate values and expected behaviors (Code of Conduct)Vehicles and procedures for reporting observed misconductIndustry regulatory training as appropriate to job function

4. TRAINING AND EDUCATION

30 l Confidential and Proprietary

Legislative training as appropriate to job function (Anti-trust, Anti-bribery, money laundering, etc.)Environment, health, and safety training as appropriate to job function

Multi-element communications campaigns focus on key ethics and compliance messages and serve as everyday visual reminders

Page 12: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

11

TRAINING DELIVERY OPTIONS

Online training is an efficient and cost-effective way to train a large number of geographically dispersed employees

Customizable to your organization and industryAccessed from anywhere in the world by any computer equipped with Internet accessEnables self-paced self study on the learner’s schedule Provides automatic completion certificate for learner and management

31 l Confidential and Proprietary

Provides automatic completion certificate for learner and management summary reports for administrator

Instructor-led, onsite training is an effective way to train employees that are centralized across few locations

Customizable to your organization and industryEnables group and instructor interactionDelivered at your work location of choice

FRAUD PREVENTION—TRAINING JUSTIFICATION

When Anti-Fraud Training for employees was in place as an anti-fraud control:

Median loss related to fraud decreased by 50%*and

The average duration of a fraud scheme was decreased by

32 l Confidential and Proprietary

g y28%*

Source: 2010 ACFE Report to the Nations on Occupational Fraud and Abuse

Traditional “Open Door” ChannelsSupervisorHuman ResourcesOmbudsman

5. VEHICLES AND PROCEDURES FORREPORTING SUSPECTED MISCONDUCT

33 l Confidential and Proprietary

Confidential, anonymous reporting vehicle – Anti-fraud or ethics/compliance hotline

Page 13: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

12

57%

57%

61%

78%

23%

20%

21%

11%

20%

23%

17%

12%

Human Resources Department

Peers or Colleagues

Local Managers

Supervisor

Q: To whom would you “feel comfortable” reporting misconduct if you became aware of it?

CHANNELS FOR REPORTING MISCONDUCT

34 l Confidential and Proprietary

40%

43%

52%

57%

35%

37%

30%

29%

27%

33%

23%

27%

19%

16%

32%

0% 50% 100%

Board of Directors or Audit Committee

Internal Audit Department

Senior Executives

Legal Department

Ethics or Compliance Hotline

AgreeUnsureDisagree

Source: KPMG Integrity Survey 2008/2009

DETECTING MISCONDUCT

64%

75%

79%

20%

15%

9%

16%

10%

12%

Local Managers

Peers or Colleagues

Supervisor

Q: From whom would you “feel comfortable” seeking advise and counsel if you had a question about doing the right thing?

35 l Confidential and Proprietary

43%

47%

57%

62%

61%

36%

28%

27%

19%

24%

21%

25%

15%

18%

15%

0% 50% 100%

Internal AuditDepartment

Senior Executives

Ethics or ComplianceHotline

Human ResourcesDepartment

Legal Department

AgreeUnsureDisagree

Source: KPMG Integrity Survey 2008/2009

UNCOVERING FRAUD

10.70%

13.00%

43.20%

11.60%

15.40%

35.80%

16.70%

17.60%

15.10%

11.60%

46.30%41.10%

Internal Audit

Management Review

Tip

Tips remain the most common method of fraud detection Hotlines remain a leading vehicle for tip receipt

36 l Confidential and Proprietary

6.50%

6.50%

8.90%

6.50%

5.20%

6.00%

8.20%

11.20%

2.30%

5.00%

3.90%

6.80%

7.40%

3.90%

4.60%

5.30%

0% 10% 20% 30% 40% 50%

External Audit

Document Examinatin

Account Reconciliation

By Accident

Government

Public Corporation

Private Corporation

Non-profit

Source: 2010 ACFE Report to the Nations on Occupational Fraud and Abuse

Page 14: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

13

Hotline Planning, Implementation, Execution

Administration—Internal or External

Multiple Reporting Methods (telephone, web, mobile, etc.)

Anonymity

ANTI-FRAUD HOTLINES

37 l Confidential and Proprietary

24-hour availability

Multilingual capability

Toll-free access

Ability for reporter to inquire about response or actions following report

Hotline is one of the multiple reporting channels

Drive awareness

Support from the top

Don’t refuse callsBest

Practices

HOTLINE BEST PRACTICES

38 l Confidential and Proprietary

Provide interactive tools tailored to your employee base

Underscore anonymity of reporting (where you can)

Underscore privacy of information

Test and audit

FRAUD PREVENTION—HOTLINE JUSTIFICATION

Where a hotline was in place: The average duration of a fraud scheme was reduced by 7 months*

and The median loss was reduced by 59%*

39 l Confidential and Proprietary

Note: Confidential and anonymous reporting is a requirement for publicly traded corporations under the Sarbanes-Oxley Act of 2002

Source: 2010 ACFE Report to the Nations on Occupational Fraud and Abuse

Page 15: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

14

6. CENTRALIZED DATA REPOSITORY

Electronic “archive” of all received reports of fraud and other business misconduct

Permission based

24/7/365 real-time availability

Online accessibility from anywhere, anytime—Internet access

40 l Confidential and Proprietary

Viewing of reports

Posting of report responses

Entry of incremental reports

Data searchingIntegration of all report intake (hotline and direct internal entry)

7. STANDARDIZED INVESTIGATION, CASEMANAGEMENT, DISPOSITION

Standardized and consistent investigations processes and procedures in line with legislation and data privacy requirements

Highly trained investigators who uphold the highest standards of confidentiality

Timely response and completion

41 l Confidential and Proprietary

Automated and collaborative workflow

Permission-based, access to all case details including disposition and disciplinary action

Disciplinary action proportionate to offense

8. DATA ANALYTICS

Tracking and trending of all reports of fraud and other business misconductInterpretation and benchmarking of your data

What does data tell you?Continually high number of reports out of one geography

42 l Confidential and Proprietary

Excessively high number of reports of a single type (i.e., harassment, violence?)“Where there’s smoke, there’s usually fire”

Use of data to enhance anti-fraud program components and deliverables—communications, training, etc.

Page 16: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

15

Programs must be regularly evaluated and validatedQuantitative and Qualitative Measurement

Measurement of:Awareness and comprehension of program

Trust and confidence in program

9. EVALUATION AND VALIDATION—ASSESSING EFFECTIVENESS

43 l Confidential and Proprietary

Perception of organization’s culture and integrity of executive management

Comparison of program relative to industry statisticsProgram changes and updates must be incorporated as a result of evaluation

AGENDA

Responsibility for Fraud Protection

The Economic Climate and Fraud

Building an Effective Anti-Fraud Program

Impact of an Effective Anti-Fraud Program

44 l Confidential and Proprietary

Impact of an Effective Anti-Fraud Program

ACFE Anti-Fraud Program Offerings

PREVELANCE OF BUSINESS MISCONDCUT

Q: Have you personally seen or do you have firsthand knowledge of misconduct within your organization in the last 12 months?

74%2008

45 l Confidential and Proprietary

Source: KPMG Integrity Survey 2008/2009

76%

74%

0% 20% 40% 60% 80% 100%

2000

2005

Page 17: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

16

SERIOUSNESS OF MISCONDUCT

46%2008

Q: Could the misconduct observed cause a “significant loss of public trust” if discovered?

46 l Confidential and Proprietary

49%

50%

0% 25% 50% 75% 100%

2000

2005

Source: KPMG Integrity Survey 2008/2009

DRIVERS OF BUSINESS MISCONDUCT

47%

49%

34%

Policies or procedureseasily bypassed

Fear of job loss for notmeeting target

Stealing for personal gain

Q: What factors might cause employees and management to engage in misconduct?

47 l Confidential and Proprietary

59%

51%

51%

50%

52%

0% 10% 20% 30% 40% 50% 60%

Must "do what it takes" tomeet targets

Job standards not clearlyunderstood

Code of Conduct nottaken seriously

Lack of resources forcescutting corners

Rewarded for results, notmeans to achieve

Source: KPMG Integrity Survey 2008/2009

Formally Informally Unsure Not at All

Has a code of conduct that articulates the values and standards of the organization 82% 7% 9% 1%

Provides communication and training to employees on its code of conduct 77% 13% 7% 3%

Audits and monitors employee compliance with its code of conduct 49% 20% 23% 8%

Has policies to hold employees and managers accountable for code of conduct violations 72% 9% 15% 4%

PREVELANCE OF ANTI-FRAUD PROGRAMS

48 l Confidential and Proprietary

accountable for code of conduct violations

Provides incentives for employees to uphold the code of conduct 26% 10% 27% 37%

Has policies to investigate and take corrective action if misconduct is alleged 71% 9% 16% 3%

Performs background investigations on prospective employees 67% 7% 21% 4%

Has a senior-level ethics or compliance officer 58% 6% 28% 8%

Has confidential/anonymous hotline employees can use to report misconduct or seek advice 60% 5% 21% 14%

Source: KPMG Integrity Survey 2008/2009

Page 18: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

17

IMPACT OF ANTI-FRAUD PROGRAMSPrevalence of Misconduct

72%

55%

100%

Observed “misconduct” in the prior 12 months

55%

100%

Observed violations of “organizational values and principles” in the prior 12 months

49 l Confidential and Proprietary

0%

50%

Without Program

WithProgram

32%

0%

50%

Without Program

WithProgram

Source: KPMG Integrity Survey 2008/2009

IMPACT OF ANTI-FRAUD PROGRAMSRoot Causes of Misconduct

55%

100%

Feel pressure to do whatever it takes to meet targets

53%

100%

Believe policies and procedures are easy to bypass and override

50 l Confidential and Proprietary

46%

0%

50%

Without Program

WithProgram

37%

0%

50%

Without Program

WithProgram

Source: KPMG Integrity Survey 2008/2009

IMPACT OF ANTI-FRAUD PROGRAMSUncovering Misconduct

51%

88%

100%

Would feel comfortable reporting misconduct to a supervisor

63%

92%100%

Believe they would be doing the right thing

51 l Confidential and Proprietary

51%

0%

50%

Without Program

WithProgram

0%

50%

Without Program

WithProgram

Source: KPMG Integrity Survey 2008/2009

Page 19: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

18

IMPACT OF ANTI-FRAUD PROGRAMSFaith and Trust in Program

68%

100%

Believe appropriate action would be taken

77%

100%

Believe they would be protected from retaliation

52 l Confidential and Proprietary

41%

0%

50%

Without Program

WithProgram

34%

0%

50%

Without Program

WithProgram

Source: KPMG Integrity Survey 2008/2009

IMPACT OF ANTI-FRAUD PROGRAMSPerceived Tone from the Top

75%

100%

Believe CEO and other executives are approachable with ethics concerns

85%

100%

Believe CEO and other senior executives set the right “tone” for ethics and integrity

53 l Confidential and Proprietary

40%

0%

50%

Without Program

WithProgram

39%

0%

50%

Without Program

WithProgram

Source: KPMG Integrity Survey 2008/2009

IMPACT OF ANTI-FRAUD PROGRAMSPerceived Executive Values

88%

100%

Believe CEO and other senior executives would respond appropriately if they became aware of misconduct

81%

100%

Believe CEO and other senior executives value ethics and integrity over short-term business goals

54 l Confidential and Proprietary

44%

0%

50%

Without Program

WithProgram

WithProgram

32%

0%

50%

Without Program

Source: KPMG Integrity Survey 2008/2009

Page 20: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

19

IMPACT OF ANTI-FRAUD PROGRAMSEveryday Workplace Impact

90%100%

People feel motivated and empowered to do the right thing

89%

100%

People apply the right values to their decisions and behaviors

55 l Confidential and Proprietary

43%

0%

50%

Without Program

WithProgram

44%

0%

50%

Without Program

WithProgram

Source: KPMG Integrity Survey 2008/2009

IMPACT OF ANTI-FRAUD PROGRAMSEveryday Workplace Impact

81%

100%

The opportunity to engage in misconduct is minimal

83%

100%

The willingness to tolerate misconduct is minimal

56 l Confidential and Proprietary

44%

0%

50%

Without Program

WithProgram

45%

0%

50%

Without Program

WithProgram

Source: KPMG Integrity Survey 2008/2009

AGENDA

Responsibility for Fraud Protection

The Economic Climate and Fraud

Building an Effective Anti-Fraud Program

Impact of an Effective Anti Fraud Program

57 l Confidential and Proprietary

Impact of an Effective Anti-Fraud Program

ACFE Anti-Fraud Program Offerings

Page 21: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

20

ETHICSLINE®

- Core element in an effective ethics and compliance program

EthicsLine®—the official hotline of the ACFE

EthicsLine is powered by Global Compliance, the leading global hotline provider

EthicsLine package includes:

Hotline (telephone, web, mobile)—anonymous, confidential, 24/7/365, l b l h

58 l Confidential and Proprietary

global reachCase Management (Web-based desktop, mobile)—for management of investigations from open through closed statusAnalytics—for tracking and trendingCommunications Campaign Materials—to increase awareness and comprehension of reporting obligations

EthicsLine is scalable to meet an organization’s needs—regardless of industry, size, or geography of operation

ETHICSLINE® HOTLINE ATTRIBUTES

Reflects all attributes of an “effective” hotline

Availability 24/7/365

Multiple means of entry: phone, desktop web, mobile web

Multilingual; culturally adapted

Secure and confidential with ability to provide anonymous tips

59 l Confidential and Proprietary

Secure and confidential—with ability to provide anonymous tips

Accessible to key stakeholders: employees, executives, agents, vendors, contractors, customers, patients, shareholders, board of directors

Centralized repository of reports

Case Management functionality

Analytics functionality

ETHICSLINE® CASE MANAGEMENTView reports from all intake sources; enter new reports

Review initial and follow-up report details; view file attachments; submit non-English reports for translation (authorized users)

Respond to and request additional information from reporters

Assign Case Manager and Case Investigator roles per case

60 l Confidential and Proprietary

Investigator roles per case

Document case investigation and resolution details; attach documents

Track case progress; receive e-mail notification of case activity; view audit trail of case updates; archive closed cases

Search for reports; download results for l formatting and analysis

Analyze report counts and trends; view summary data; print management reports

Page 22: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

21

ETHICSLINE® ANALYTICS

Unsurpassed reporting options and capabilities including:

Standard Monthly management reports

Standard Dashboard charts and graphs

61 l Confidential and Proprietary

charts and graphs

Management report library

Data searching and filtering

Ad-hoc charting, graphing

ASSESSMENTS AND CONSULTING

The Ethical Leadership GroupTM, Global Compliance’s in-house team of expert advisors, have unmatched experience:

Served on the U.S. Sentencing Commission Advisory Panel that guided a rewrite of the U.S. Sentencing Guidelines; act as corporate monitors on behalf of the U.S. government; served as ethics and compliance officers; led the Ethics and Compliance Officer Association. The United Nations selected our expert advisors to consult on revisions to its investigation procedures

62 l Confidential and Proprietary

investigation procedures

Define and develop ethics and compliance risk assessments Consult and develop Codes of Conduct and other key ethics and compliance policiesEngagements in over 50 countries, including India, China, Japan, United Kingdom, Germany, and Russia

ABOUT GLOBAL COMPLIANCE®

The Power Behind EthicsLine

Pioneered the original ethics/compliance reporting hotline in 1981

Provides a comprehensive set of ethics/compliance offerings:

Hotlines/Case Management SolutionsTraining and EducationConsulting and AssessmentI ti d V lid ti

63 l Confidential and Proprietary

Inspections and Validations

Serves 4,000+ clients and their 25+ million employees in more than 200 countries and territories

Serves 50% of Fortune 100, 45% of Fortune 500, 35% of Fortune 1000, and 25% of Global 500

Page 23: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

22

SUMMARY

“Effective” fraud prevention is the responsibility of many departments with each one sharing the same goal and working together in an integrated fashion

Who Owns Fraud?

64 l Confidential and Proprietary

Photo courtesy of ACFE

Nick CiancioChief Compliance Officer

THANK YOU

65 l Confidential and Proprietary

Chief Compliance Officer704-564-6633

[email protected]

APPENDIX

Page 24: COMPLIANCE, ETHICS AND WALKING A FINE LINE CREATING AN ... · added diligence 17 l Confidential and Proprietary Of particular importance for organizations operating in highly regulated

5/25/2011

23

SURVEY METHODOLOGYErnst & Young Study – 11th Global Fraud Survey

Survey to get executive views on how corporations are managing the risks associated with fraud, bribery and corruption

1409 interviews between November 2009 and February 2010

Senior decision makers from large corporations across 36

67 l Confidential and Proprietary

countries who have responsibility for tackling fraud

CFOs

Heads of Internal Audit

Heads of Legal

Heads of Compliance

SURVEY METHODOLOGYKPMG Study – 2008/2009 Integrity Survey

Survey to understand prevalence and nature of corporate fraud and effectiveness of efforts to prevent, detect and respond to wrongdoing

5,065 interviewsAll job levels across 13 industry sectors

61% individual contributors13% supervisors12% mid-level managers5% senior management executives etc

68 l Confidential and Proprietary

5% senior management, executives, etc.4 thresholds of organization size

28% = 200 to 999 employees24% = 1,000 to 4,999 employees11% = 5,000 to 9,999 employees38% = more than 10,000 employees

U.S.-based and multinational organizations34% U.S. operations only66% multinational operations

SURVEY METHODOLOGYACFE 2010 Report to the Nations on Occupational Fraud and Abuse

Study to gain details on largest cases of fraud 1,843 survey respondentsCases involved internal fraud or fraud committed by person against the organization for which he/she workedInvestigation was completed and occurred between January 2008 and October 2009

69 l Confidential and Proprietary

2008 and October 2009Perpetrator was identified in most cases