Webinar: Gathering materials from y our suppliers to better understand their business practices

September 15, 2016

One of the most effective ways in identifying which risks need to be addressed within your process is to understand your supplier’s stance to the risk issue. However, to be effective you must focus on the right information to collect from suppliers.  Gathering details on your suppliers is always the most time consuming and often most costly part of your risk management programme.

In this webinar we are going to discuss the value in opening a dialog with suppliers to involve them in your process and what information can lead to more effective risk management programmes.  Within this webinar we’ll discuss:

  • Supplier health assessments
  • Effective audit programs

  • The value of involving your suppliers and explaining the impact to the business

Slide deck available

Webinar: Breaking your supply chain into manageable pieces for a risk based approach

18 August, 2016

When considering supplier risk management programmes many companies struggle with where to get started. The sheer volume of suppliers can be one of the biggest deterrents to approaching the issue. Often, this struggle is magnified as companies attempt to apply the same process to all suppliers. Every supplier is different and presents different reisks. There is not such thing as a one size fits all programme to manage risk in large complex supply chains. Your business does not utilise every supplier in the same way nor should your risk management programme treat every supplier the same.

We discuss how to create a manageable approach when faced with large complex supply chains. You will learn:

  • The value supplier categorisation for risk potential
  • How to identify the right level of touch for each supplier used by your business
  • The keys to creating a quality programme that covers the breadth of your supply chain

Slide deck available

Webinar: Combatting modern day slavery through supply chain transparency

Slavery may seem like a thing of the past but is sadly not absent from the modern world. There are still many examples of human trafficking and exploitation in countries such as Thailand. More often than not, exploited individuals end up ‘paying back’ money earned to traffickers by working in factories and manufacturing plants.

Supply chain management and transparency is therefore imperative for companies to ensure that slavery is not being used in the production chain. Emotive issues such as slavery can cause significant reputational damage to companies. And this is before one considers the moral obligation companies have to combat slavery and human trafficking.

This webinar explores the mechanisms that companies can use to ensure that people are not being exploited at any level of the supply chain.

Webinar: Know Your Customer from top to bottom

Managing customer risks is all about knowing your customers, and while banks have been focusing on this for years other types of organisations have not. In a changing world, where companies are now judged on who buys their products, how they sell their products, and what products they allow people to buy, it is vital that every company has an effective and robust know-your-customer (or ‘KYC’) process.

Commercial organisations involved in various industries, including retail, manufacturing and services, need to build customer checks into their screening processes. A robust KYC process involves more than just screening end-user-type customers; it also extends to the companies with whom organisations engage to provide goods or services to the end customer.

Non-financial organisations may not always be legally required to screen customers, but the reputational damage that could result from engaging or associating with a high-risk customer underscores the need for an effective KYC process.

This webinar explores how companies can best manage customer risk through effective screening.

Webinar: Cyber Security Trends

A number of the data breaches involving United States retailers have involved the same infiltration tactics by hackers: the exploitation of third-party contractors. As multinational companies develop longer supply chains in an effort to better leverage the global economy and improve margins, these chains are offering more opportunities for cyber-attacks. With cyber-defence budgets often prioritising company headquarters, organisations are inadvertently driving attacks towards the most vulnerable parts of their chain.

This webinar examines supply-chain due diligence and provide compliance officers with suggestions on remediation steps and prevention controls. In particular, speakers, Jennifer Weedon (Manager, threat intelligence, FireEye) and James Walker (Senior Ethics & Compliance Counsel, Tesco) cover the following best practice tips:

  • Know your third parties
  • Know their business
  • Know their risk
  • Know their access
  • Know your anti-bribery and anti-corruption obligations
  • Learn from the latest data breaches

Webinar: How to succeed in supply chain risk management using a risk-based approach

July 14, 2016

Many companies have focused on anti-bribery and sanctions risks when dealing with their supply chain but today’s range of risks dictate the need for companies to examine an entire new risk universe to have an effective compliance programme. 

Companies should approach risk assessments with a much broader view to identify risk signals ahead of time, and to gain greater visibility into the practices of their suppliers.  But managing these multiple risks begins with collecting the necessary data. The right data. 

We cover how to take a risk-based approach to your supply chain risk management. You will learn:

  • The value of a risk based approach
  • The Red Flag Group’s 23 identified supply chain risk areas and how they might impact your business
  • The keys to creating a manageable approach to supply chain risk 

Webinar: How the Panama Papers and Unaoil scandals have changed the way we do business

June 21, 2016

The Panama Papers and Unaoil scandals are a reminder to compliance officers that compliance is not tick-the-box; it requires thought, skill, experience and business knowledge. Compliance officers will learn from this webinar: 

  • What the two scandals revealed in terms of how due diligence was conducted on business partners
  • How corruption risk is just one of a number of risk areas that need to be considered when assessing the integrity of a third party
  • What improvements can be made to the compliance programme to ensure that your company is not the next entity subjected to trial-by-media

Webinar: Effective Compliance Programme Integration

May 24, 2016

Best Practices for Acquisition Integration Teams to Consider

This session will use a case study approach to walk participants through the key compliance program adoption challenges that often arise when an acquiring company seeks to integrate a newly acquired company.  Discussion will include the following topics:

  • Identification: examining compliance risk profile for the newly acquired company
  • Assessment of acquired company’s:
    •   Risks
    • Existing compliance policies, procedures, systems, and controls
    •  Corporate culture and likely impact on adoption success
  • Implementation:
    •  Planning: what does success look like?
    •  Buy-In
    • Adoption
    • Feedback
  • Measurement and Monitoring:
    • Monitoring and Reporting
    • Feedback
    • Continuous Improvements

Slide deck available

Webinar: Adaptive Compliance Learning: The Era of the Big Training Catalog is Over!

Apr 25, 2016

Conventional wisdom says that to have an effective ethics and compliance programme, you must license an expensive training library and put employees through hours and hours of training every year.

At the same time, there is growing consensus that organizations are spending 1/3 of their time and 1/2 of their budget on what now is regarded as a “check the box” activity, starving investment in areas that would ACTUALLY BENEFIT a programme. So why would you continue to train the same way?

The Red Flag Group introduces an innovative, adaptive training platform, Compliance Interactive®. This programme asks employees “What do you do?” and trains them in EXACTLY what they need to know…in a SINGLE COURSE.

Webinar: Training your key stakeholders on Fair Competition (Antitrust) concepts

Mar 21, 2016

Businesses  are required to be proactive in managing their competition and antitrust risks, from identifying risk areas to setting up self-compliance programmes.

  • Do your sales and marketing teams meet their competitors on a regular basis?
  • Is your company protected when it comes to how your colleagues are sharing company information? 
  •  Do your colleagues know what information is and isn’t safe to share?

Training your key stakeholders (sales, marketing, procurement, HR) on legalistic fair competition concepts can be a daunting task. This webinar provides valuable tips and input allowing you to improve and/or build your fair competition training.

Webinar: Using predictive analytics in the compliance function

Mar 15, 2016

What if…

  •  You could proactively monitor potential FCPA, UK Bribery Act, and other anti-corruption risks?
  • You could access and analyse information from across your entire enterprise in one place in real time?
  • Your company was made aware of misconduct, suspicious or fraudulent transactions hours after they occurred?

This webinar is a walk through a case study demonstrating the value that predictive analytics can add to a compliance program. A step-by-step guide on what it takes to get a predictive system such as IntegraAnalytics up and running at your company will be provided.

Webinar: The Importance of Recurring Due Diligence and Compliance Checks on Third Parties

Feb 29, 2016

Monitoring your third parties such as suppliers and distributors on a regular basis is essential to detecting new risks and changes that could increase your risk exposure. Often, companies will only conduct due diligence and formal compliance checks when a new partnership is established or first contract is signed. However, companies need to be regularly checking up on their third parties.

We cover the practice and importance of continuously monitoring due diligence on your third parties:

  • Does your company have an effective programme to continuously conduct and monitor Due Diligence on third parties?
  • How often should a company run a background check on your third parties?
  • How to understand the result of due diligence and compliance checks to make sense of the reporting findings?
  • How to cope with the necessity of conducting ongoing monitoring in the face of reduced budget and headcount?
  •  What type of information should be looked and how this differs by the type of third party, country and work that is being done?

Webinar: 'Outsourcing your third parties’ compliance management programs

Sep 24, 2015

  • Does your company’s business model heavily rely on a multitude of third parties in many different countries?
  • Does your compliance team spend a lot of time on the administration tasks associated with your third-party compliance program?
  • Would you like to focus your resources on the more important work of reducing risk?

Third-party compliance programs can be difficult to manage and monitor across all risk areas on a daily basis. Many companies have therefore already appointed external professional-services companies to handle the day-to-day responsibilities of managing their third-party compliance programs.

Webinar: Corporate Code of Conducts Evolving Best Practices

Aug 2015

The importance of codes is the cornerstone of the ethics and compliance program. A lot of times when organizations are starting out, they want to establish an ethics and compliance program, and the first document they look at is the code. 

In this webinar, Christopher Sindik, Consultant of Advisory at the Red Flag Group, talks about the importance of the codes of conduct, what makes a good code, and the four points of code evolution (understanding the code, code as an information hub, presentation, and examples and scenarios). 

Webinar: Approval and sign-off

Dec 21, 2015

Once the information gathering and analysis is completed, the next step is to make a final determination about doing business with the third party.  Questions include:

  • How many levels of approval are needed and what exception processes are necessary.
  •  Who will make the final decision, and the role of Compliance in that decision
  • Plans and responsibilities for ensuring that conditions are met where approvals are granted with remediation conditions

Plans and responsibilities for ensuring that where approvals are granted with remediation conditions, those conditions are met.

Webinar: Due diligence and remediation Planning

Dec 7, 2015

Where the assessment of risk indicates that further information is required,  it is important to understand the types of information that are available and necessary to be able to make good business decisions about the third parties.

Questions at this stage include:

  • What depth of further diligence should be undertaken, and what information should that contain,
  • How should these further results be reviewed, including who should review them and what standardization of risk approach is available
  • What actions will be taken to deal with any “Red Flag

Webinar: Things to consider before analyising third party risks

Nov 9, 2015

A Due Diligence process requires data to be able to properly analyse the risk of a particular partner. A common method of starting a process involves asking questions via a form of questionnaire.  Often this stage involves taking an existing physical document and transforming it into a questionnaire fit for an online process.

Considerations at this point include:

  • Who should be asked (internal or external responses)
  • What questions should be asked;
  • How can questions be asked to reduce ambiguity and gain the maximum information.
  • How to design the questionnaires to minimize the time taken to respond.
Follow @TheRedFlagGroup