Please feel free to contact me anytime to share your thoughts: +1 612.357.1544 (cell), +1 952.567.6215 (direct), gerry.zack@corporatecompliance.org.
One of the best methods of learning about compliance and ethics programs is to review enforcement actions. And some recent actions provide very useful guidance regarding one of the most important elements of any compliance and ethics program: the risk assessment.
I won’t bother naming the companies involved—that only gets me in trouble anyway, and the lessons are clear. Instead, I’ll just describe three of the common themes I’ve noticed in reviewing several recent cases.