How to Make Sure the Periodic Review Gets DONE
/There’s merit in the old cliché, “If it ain’t broke, don’t fix it.” Frankly, it makes sense to leave the pieces of your program that are running effectively alone. After all, there’s always something that needs attention, so why bother reviewing things that are doing just fine?
Why? Because of regulators. In the DOJ’s Evaluation of Corporate Compliance Programs guidance, variations of the word “periodic” appear 12 times in 20 pages. In the UK Ministry of Justice’s Guidance on the UK Bribery Act, variations of “periodic” and “review” appear 37 times. Prosecutors expect a periodic review of how your program is operating. Specifically mentioned is a periodic review of:
The criteria used in risk assessment
The risk assessment process
How lessons learned have altered the program
How investigations/reports have altered the program
How effectively the investigations process is working
Human Nature Gets in the Way
If we know that regulators expect a periodic review of how various pillars of our program are operating, why don’t we do it? Human nature directs our attention to things that aren’t working, rather than spending time memorializing things we decided are fine.
But human nature is a poor defense when sitting across from a prosecutor trying to explain that you did think about whether your risk assessment criteria was good enough, but since it was fine, you didn’t memorialize that conversation with yourself.
Program Review or Periodic Review?
It’s important to note that the review we’re discussing is specific to various program elements as opposed to the program as a whole. Holistic program review (whether internally performed or done by an outside consulting group like Spark Compliance) is very important. In this blog, we’re discussing how to systematize and document an annual review process that will check the adequate procedure boxes and ensure that you’ve got your ducks in a row if the government comes calling.
The 5-Step How-To
Here’s how to get this done…
Read More