Wednesday, January 27, 2021
Corporate Compliance Insights
  • Home
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Articles
    • See All Articles
    • NEW: COVID-Related
    • Compliance
    • Ethics
    • Risk
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Leadership and Career
  • Vendor News
  • Jobs
  • Events
    • Webinars & Events
    • Submit an Event
  • Downloads
    • eBooks
    • Whitepapers
  • Podcasts
  • Videos
  • Subscribe
No Result
View All Result
  • Home
  • About
    • About CCI
    • Writing for CCI
    • NEW: CCI Press – Book Publishing
    • Advertise With Us
  • Articles
    • See All Articles
    • NEW: COVID-Related
    • Compliance
    • Ethics
    • Risk
    • FCPA
    • Governance
    • Fraud
    • Internal Audit
    • HR Compliance
    • Cybersecurity
    • Data Privacy
    • Financial Services
    • Leadership and Career
  • Vendor News
  • Jobs
  • Events
    • Webinars & Events
    • Submit an Event
  • Downloads
    • eBooks
    • Whitepapers
  • Podcasts
  • Videos
  • Subscribe
No Result
View All Result
Corporate Compliance Insights
Home FCPA

FCPA Compliance for SMEs: How Smaller Companies Meet Enforcement Agency Expectations

by Matteson Ellis
May 23, 2014
in FCPA
FCPA Compliance for SMEs: How Smaller Companies Meet Enforcement Agency Expectations

This article was republished with permission from FCPAméricas Blog, for which Matteson Ellis is founder, editor and regular contributor.

FCPA compliance expectations for multinational corporations (MNCs) are relatively clear. Enforcement authorities regularly describe them in FCPA resolutions and public statements,.

But how should small- and medium-sized enterprises (SMEs) apply these standards, especially smaller companies that still have significant corruption risk profiles? SMEs’ resources, personnel and capacity are usually much more limited that those of MNCs. Does a privately held oil and gas services company with 100 employees in Texas and 250 on-site in Angola need a standalone compliance officer? How robust a third-party due diligence and monitoring program does a small technology company with 300 to 400 distributors worldwide need to have in place?

This post provides some importance perspectives on this issue:

U.S. Sentencing Guidelines: Section 8B2.1 of the U.S. Sentencing Guidelines provides a description of compliance expectations for smaller companies, explaining that SMEs “shall demonstrate the same degree of commitment to ethical conduct and compliance with the law as large organizations.” It states that SMEs can meet these requirements with “less formality and fewer resources” than larger companies. This can mean reliance on existing resources or systems that are simpler than those of larger companies. The Sentencing Guidelines provide four examples:

  1. The governing authority’s discharge of its responsibility for oversight of the compliance and ethics program by directly managing the organization’s compliance and ethics efforts.
  2. Training employees through informal staff meetings and monitoring through regular “walk-arounds” or continuous observation while managing the organization.
  3. Using available personnel rather than employing separate staff to carry out the compliance and ethics program.
  4. Modeling its own compliance and ethics program on existing, well-regarded compliance and ethics programs and best practices of other similar organizations.

FCPA Guidance: The FCPA Guidance states, “small- and medium-size enterprises likely will have different compliance programs from large multinational corporations, a fact the DOJ and SEC take into account when evaluating companies’ compliance programs.” Chuck Duross, who headed the DOJ’s FCPA Unit from 2010 to 2014, recently explained that one of the main reasons for producing the FCPA Guidance was to help provide information for smaller companies. “In October 2010, the OECD proposed that we provide better guidance as to both our enforcement priorities, our interpretations of the statute and the like, particularly aimed towards small and medium enterprises … the Guide was the ultimate product of that.” This insight suggests that Chapter Five of the FCPA Guidance’s description of the “Hallmarks of Effective Compliance Programs” should be read, understood and followed, not only by MNCs, but by SMEs, as well.

Enforcement Officials: Recently, at Momentum’s Global Anti-Corruption Conference in Washington D.C., Charles Cain, Assistant Director of the SEC’s FCPA Unit, and Jeffrey Knox, Chief of the DOJ’s Fraud Section, discussed SMEs in the context of FCPA enforcement. Mr. Cain confirmed that, while the SEC recognizes that companies have different resources, smaller companies still need to find ways to manage risk:

“I can’t give specific examples how, but it generally involves the creative use of existing resources. While not the same as big companies, they are addressing the same risks and need to be creative. They need to make it a standard part of business. If compliance is part of the culture, the compliance program overlay doesn’t need to be as big.”

Mr. Knox noted that authorities would still ask, “Were the [compliance] actions taken reasonable? Was there management involvement? Was the misconduct pervasive? What is the culture of the company?”

Transparency International: A report on SMEs by Transparency International offers advice on how SMEs should focus their approaches on “principals” of compliance to ensure business integrity. The report gives practical guidance on implementation.

The opinions expressed in this post are those of the author in his or her individual capacity and do not necessarily represent the views of anyone else, including the entities with which the author is affiliated, the author`s employers, other contributors, FCPAméricas or its advertisers. The information in the FCPAméricas blog is intended for public discussion and educational purposes only. It is not intended to provide legal advice to its readers and does not create an attorney-client relationship. It does not seek to describe or convey the quality of legal services. FCPAméricas encourages readers to seek qualified legal counsel regarding anti-corruption laws or any other legal issue. FCPAméricas gives permission to link, post, distribute or reference this article for any lawful purpose, provided attribution is made to the author and to FCPAméricas LLC.


Tags: anti-corruptiontone at the top
Previous Post

CryptoLocker Goes Spearphishing, Infections Soar, Warns KnowBe4

Next Post

LRN305 – A Conversation with David Greenberg, Former Head of Ethics & Compliance at Altria

Matteson Ellis

Matteson Ellis serves as Special Counsel to the FCPA and International Anti-Corruption practice group of Miller & Chevalier in Washington, DC.  He is also founder and principal of Matteson Ellis Law PLLC, a law firm focusing on FCPA compliance and enforcement. He has extensive experience in a broad range of international anti-corruption areas. Previously, he worked with the anti-corruption and anti-fraud investigations and sanctions proceedings unit at The World Bank. Mr. Ellis has helped build compliance programs associated with some of the largest FCPA settlements to date; performed internal investigations in more than 20 countries throughout the Americas, Asia, Europe and Africa considered “high corruption risk” by international monitoring organizations; investigated fraud and corruption and supported administrative sanctions and debarment proceedings for The World Bank and The Inter-American Development Bank; and is fluent in Spanish and Portuguese. Mr. Ellis focuses particularly on the Americas, having spent several years in the region working for a Fortune 50 multinational corporation and a government ethics watchdog group. He regularly speaks on corruption matters throughout the region and is editor of the FCPAméricas Blog. He has worked with every facet of FCPA enforcement and compliance, including legal analysis, internal investigations, third party due diligence, transactional due diligence, anti-corruption policy drafting, compliance training, compliance audits, corruption risk assessments, voluntary disclosures to the U.S. government and resolutions with the U.S. government. He has conducted anti-corruption enforcement and compliance work in the following sectors: agriculture, construction, defense, energy/oil and gas, engineering, financial services, medical devices, mining, pharmaceuticals, gaming, roads/infrastructure and technology. Mr. Ellis received his law degree, cum laude, from Georgetown University Law Center, his masters in foreign affairs from Georgetown’s School of Foreign Service, and his B.A. from Dartmouth College. He co-founded and serves as chairman of the board of The School for Ethics and Global Leadership in Washington, D.C. He is a member of the District of Columbia, Texas, New York, and New Jersey bar associations. Mr. Ellis is also author of The FCPA in Latin America: Common Corruption Risks and Effective Compliance Strategies for the Region.

Related Posts

invisible man in black on neutral background

The Curious Absence of Corporate Monitors

January 27, 2021
The Vitol Enforcement Action

The Vitol Enforcement Action

January 7, 2021
J&F FCPA Resolution

J&F FCPA Resolution

November 11, 2020
The Criminal FCPA Plea by Sargeant Marine

The Criminal FCPA Plea by Sargeant Marine

October 26, 2020
Next Post
LRN305 – A Conversation with David Greenberg, Former Head of Ethics & Compliance at Altria

LRN305 - A Conversation with David Greenberg, Former Head of Ethics & Compliance at Altria

Access realtime data
Dynamic Risk Assessments with Workiva

Special Coverage

Special COVID page graphic

Jump to a Topic:

anti-corruption anti-money laundering/AML Artificial Intelligence/A.I. automation banks board of directors board risk oversight bribery CCPA/California Consumer Privacy Act Cloud Compliance communications management Coronavirus/COVID-19 corporate culture crisis management cyber crime cyber risk data analytics data breach data governance decision-making diversity DOJ due diligence fcpa enforcement actions financial crime GDPR GRC HIPAA information security internal audit KYC/know your customer machine learning monitoring regtech reputation risk risk assessment Sanctions SEC social media risk supply chain technology third party risk management tone at the top training whistleblowing
No Result
View All Result

Privacy Policy

Follow Us

  • Facebook
  • Twitter
  • LinkedIn
  • RSS Feed

Category

  • CCI Press
  • Compliance
  • Compliance Podcasts
  • Cybersecurity
  • Data Privacy
  • eBooks
  • Ethics
  • FCPA
  • Featured
  • Financial Services
  • Fraud
  • Governance
  • GRC Vendor News
  • HR Compliance
  • Internal Audit
  • Leadership and Career
  • Opinion
  • Resource Library
  • Risk
  • Uncategorized
  • Videos
  • Webinars
  • Whitepapers

© 2019 Corporate Compliance Insights

No Result
View All Result
  • Home
  • About
  • Articles
  • Vendor News
  • Podcasts
  • Videos
  • Whitepapers
  • eBooks
  • Events
  • Jobs
  • Subscribe

© 2019 Corporate Compliance Insights