Please feel free to contact me anytime to share your thoughts: +1 612.357.1544 (cell), +1 952.567.6215 (direct), gerry.zack@corporatecompliance.org.
In November 2021, the Organisation for Economic Co-operation and Development (OECD) issued a significant update to its guidance on combating bribery of foreign public officials, replacing its previous recommendations from 2009.[1] The scope of changes goes far beyond what I could address here, but one change is found in Annex II, which updates OECD’s 2010 “good practice guidance” on internal controls. This guidance has also been improved, including a recommendation that internal controls be periodically reviewed by considering a company’s “evolving risk profile.” Makes sense. Risks are dynamic, so our controls should evolve with them.