The Consequences of Inadequate Due Diligence

Adequate Due Diligence

Running worldwide businesses requires effectively recognizing, analyzing and managing risks and ensuring compliance. We have identified that many organizations with third-party relationships conduct inadequate due diligence that might pose significant risks. In this article, we look at the possible risks and the best practices for conducting adequate due diligence and third-party risk management effectively, such as:

1. Planning
2. Documentation
3. Culture

Continuous Risk Management

Today’s global business requires efficiently managing a network of third-party partners that supply product components, run operations in foreign markets, operate call centers, or act as outside consultants or agents.

A well-maintained third-party network’s vast array of capabilities and specialized skill sets make operations easier for the organization and its customers. But many organizations, from small businesses to multi-national corporations, can rarely afford the time and effort required in-house to manage these often-complex third-party relationships.

Because of this, the risk of unethical business practices, bribery and other business corruption potentially increases if inadequate due diligence is conducted on third-party partners. The ramifications of a scandal related to a third-party partner can easily take down an organization, resulting in such risks as a damaged reputation and brand devaluation, regulatory violations, legal proceedings and possible fines and jail terms for directors. Therefore, a solid and viable third-party risk management program is the only way to protect the corporation’s assets fully.

Building a third-party risk management program is not a passive process. It continually requires time and effort as the risks associated with third-party partnerships evolve.

Explore Third-Party Risk Management Solutions

Consider the recent events during which the legislators of three separate nations signed new compliance regulations and standards into law. Suppose your organization’s third-party risk management program cannot quickly adjust to these new regulations (or is not designed to anticipate future legislative movements). In that case, your organization is genuinely at risk.

Cutting Corners Not Worth the Risk: Adequate Due Diligence

Indeed, building a solid risk management program requires a significant investment of time and resources (internally and from the outside). Still, the consequences of not doing it right could be dramatically severe. Still, far too many organizations are willing to tempt fate by cutting corners on developing and implementing their third-party risk management program.

Organizations attempt to cut corners by relying on outdated or stagnant tools to monitor, detect, and prevent risks. Hiring outside industry professionals with proven track records of successful due diligence experience is necessary.

Relying too heavily on “desktop” due diligence is another dangerous shortcut. Desktop due diligence is an essential initial step of the investigative process, involving background checks, lien searches, regulatory filing investigations and environmental reports. And while it is a vital component of any effective due diligence program, it’s not nearly enough to evaluate the third party thoroughly.

Truly understanding a potential partner’s business requires a considerable amount of time spent face-to-face with the outside organization’s leadership, operations management and even current customers. This “boots on the ground” process will detect potential risks, often hidden from a distance and undetectable via web-based discovery tools.

The “boots on the ground” approach also help to establish a relational dynamic required for ongoing negotiations and provides a clear insight into two of the fastest-growing issues in third-party risk management: Bribery and Labor Management.

Bribery As a Compliance Issue

Anti-bribery and anti-corruption compliance is a fast-moving target. New anti-bribery laws and regulations are being decreed worldwide at a relentless pace. Complicating matters further, many countries may have laws in place but cannot enforce them adequately. The responsibility falls to your organization’s adequate due diligence program to ensure detection and protection when this happens.

High profile investigations in recent years have contributed to the rapid emergence of bribery and corruption as a societal issue. Never before has such a contrast been drawn so dramatically on a global stage between those who engage in corruption and those who suffer. Any organization that finds itself mixed up in a scandal involving bribery has more than a legal mess. It has a long battle to win back the trust of its shareholders, employees, customers and the public.

Conducting adequate due diligence surrounded such varying factors is work that must be completed in person. Gaining insight into a potential partner’s company culture requires immersion with the organization’s leadership, management and staff. When evaluating bribery risk, some warning signs can only be discovered on-site.

This e-book explores some critical questions posed to business leaders today: Has your organization implemented reasonable and proportionate measures to prevent bribery? How will you know if your anti-bribery and anti-corruption controls are effective? Are you aware of the latest best practices in avoiding bribery? Download our eBook to find out! READ NOW

Labor Matters and Compliance

From overtime issues and under-age workers to unsafe working conditions and improperly documented accidents, labor compliance represents a significant component of any solid third-party risk management program.

Once again, inadequate attention to risks related to labor compliance can bring on considerable penalties. Understanding which industries, geographic regions, and management structures elevate the organization’s risk is vital to efficiently operate an adequate due diligence program. This understanding is nearly impossible to guarantee via ‘desktop’ due diligence. Spending the necessary time in person is the only way to ensure a potential supplier properly compensates and manages employees while providing a safe workplace environment.

Even if your agreement with a third-party partner places the responsibility of payroll issues firmly upon the vendor, your organization — as a joint employer — can still be held accountable in many countries. After all, the labor conducted at your partner’s facility benefits your organization’s bottom line.

What are the Best Practices?

The demands of identifying and measuring third-party risk, monitoring those potential risks on an ongoing basis, and making recommendations based on empirical research are best met by a dedicated team of outside professionals. And while no two organizations are alike in terms of risk profiles, several factors have become consistent in building a strong, effective and adequate due diligence program:

1. Planning: Without a well thought out plan outlining ongoing monitoring efforts with assigned roles and responsibilities, measures to mitigate risk will be haphazard at best and dormant at worst. With a thoroughly established, management-advocated program that identifies specific risk factors for each affiliation, a process for addressing red flags, and an established mechanism for continual revision, the organization will remain vigilant in its efforts to protect itself from liability.

2. Documentation: Due diligence efforts are only as good as the information and data gathered and secured. Meticulous documentation and reporting enable the organization to recognize trends, communicate analyses, and sustain efforts during any future personnel changes. Effective risk management programs feature established guidelines for capturing data, contracts and research with uniformity.

3. Culture: An organization where leadership, management and workforce do not take the third-party risk seriously will never be adequately protected from risk. Successful organizations in this respect dedicate themselves to building a culture in which every employee feels personally invested in the operation’s risk management. Employees must feel empowered and encouraged to report red flags. Passive engagement is simply not enough.

Done correctly, third-party risk management can effectively save the organization from risk, liability, and other perils often associated with outside entities wanting to engage and transact with your business.

A TPRM Customized Solution that Best Suits Your Needs

CRI Group™’s own exclusive, expert-developed 3PRM™ services help you proactively mitigate risks from third-party affiliations, protecting your organization from liability, brand damage and harm to the business. Whether your organization has a large, well-established third-party program, is in the early stages of development, or is anywhere in between, the 3PRM™ solution can improve the health of your program and future-proof your entire business in many forms.

Our 3PRM™ solution streamlines the third-party risk management process through scalability, and efficiencies – from third-party risk identification to assessment what sets us apart is that our 3PRM™ solution includes:

• العناية الواجبة 360°
• Screening & Background Checks
• Regulatory Compliance
• Business Intelligence: Information Management
• Investigations: i.e. IP, Fraud, Conflict of Interest, etc.
• Anti-bribery & Anti-Corruption (ABAC) Compliance
• Employee auditing training & education
• Monitoring & reporting

Where Should TPRM Sit within an Organization?

TPRM can sit within various business units depending on your organization’s structure. Many organizations involve multiple departments such as procurement, information security, operational risk and compliance to provide input to manage the risks related to engaging third parties. Depending on your business’ internal structure, you may choose to apply a centralized, mixed or decentralized model when focus on TPRM. At CRI Group™ we observed a trend with many of our clients implementing a centralized model when managing their third-party relationships, given the required input from their multiple business lines. A centralized model allows you as an organization to track common risks across departments and identify emerging trends that may require a response from more than one department.

Risk Management Goes Beyond TPRM

CRI Group™ provides the knowledge required to navigate unfamiliar markets and mitigate third party risk by assessing the backgrounds, integrity and character of those with whom you do business. Our 3PRM-Certified™ program is therefore key for managing an organization’s third party risk levels. However, this is only one of the several vital steps towards a robust risk management strategy implementation.

Risk management is the identification, evaluation, and prioritization of risks (defined in ISO 31000 as the effect of uncertainty on objectives) followed by coordinated and economical application of resources to minimize, monitor, and control the probability or impact of unfortunate events or to maximize the realization of opportunities. Risks can come from various sources including your employees.

Getting Started with ISO 31000 Risk Management? Learn more with our “ISO 31000 Playbook”

At CRI Group™, we understand that managing compliance and risk activities might be a daunting task. That’s why we present you with the insights library where you can dive deep into these topics to make your job easier. If you can’t find what you are looking for, just get in touch – we would love to have a chat!

CONTACT INFORMATION

Zafar Anjum | CRI Group™ Chief Executive Officer
t: +44 207 8681415 | m: +44 7588 454959

Filed under:

Don’t let the dominoes fall (ever) with our new TPRM certification…

CRI® Group is launching a third-party compliance verification and certification program – 3PRM-Certified™ – across the Middle East, Europe and Asian region. This Third-Party Risk Management (TPRM) program can help organisations establish the legal compliance, financial viability, and integrity levels of outside partners, suppliers and customers seeking to affiliate with their business.

Third-party relationships are critical in business today, and include partnerships with suppliers, distributors, consultants, agents and other contractors. While such affiliations are essential to the success of your organisation, the consequences of inadequate due diligence cannot be overestimated. The risk of data breaches and supply chain disruptions continue to rise with COVID-19, so does the need for an effective TPRM programs. Whether you’re a TPRM professional looking for a certification to advance your skillset, or the leader of your organisation considering how to better equip your team with the best knowledge and skills, 3PRM-Certified™ program is a all  in solution.

Read more on “How Risk Management and Due Diligence Interlock?”

CRI® Group’s exclusive 3PRM-Certified™ solution provides the very best in third-party risk management. Our 3PRM-Certified™ program provides a proactive approach to mitigating risks from third-party affiliations, protecting the organisation from liability, brand damage and harm to business.

The 3PRM-Certified™ program includes a focus on the following:

• Providing third-party risk assessments
• Meeting contracting requirements
• Conducting due diligence
• Identifying potential fraud risks
• Providing management oversight

Utilising a network of trained professionals positioned across five continents, CRI® Group’s 3PRM services utilise one of the largest multi-national fraud investigation teams the industry has to offer. The 3PRM-Certified™ program is especially critical when your business is performing pre-merger and acquisition research and pre-IPO due diligence, engages new clients, employs, contracts or retains foreign business partners and requires a consistent and audit-worthy Anti-Money Laundering (AML) and anti-corruption compliance program.

Learn more about TRM with our 3PRM-Certified™ brochure!

Your BUSINESS SUCCESS depends on assessing the ongoing behaviour, performance and risk that each  third-party relationship represents to your company. Being 3PRM-Certified™ is especially critical when your business:

• Performs pre-merger & acquisition research
• Conducts due diligence
• Engages new clients
• Employs, contracts or retains foreign business partners
• Requires a consistent & audit-worthy anti money laundering & anti-corruption compliance program

When implementing 3PRM-Certified™ program you can focus on:

• Providing third-party risk assessments
• Meeting contracting requirements
• Conducting integrity due diligence
• Providing management oversight

And avoid:

• Merging with an international business embroiled in behind-the-scenes legal battles
• Getting caught up in making procurement decisions involving the inappropriate influence of government officials who were slated to receive kickbacks
• Partnering with organisations that are potential credit risks, have claimed bankruptcy, have dissolved stated companies or are faced with debtor filings
• Awarding work to an overseas contractor with absolutely no prior experience
• Affiliating with a contracting company owned by a politician with significant influence on future awards

A TPRM customised solution that best suits your needs

CRI® Group’s own exclusive, expert-developed 3PRM™ services help you proactively mitigate risks from third-party affiliations, protecting your organisation from liability, brand damage and harm to the business. Whether your organisation has a large, well-established third-party program, is in the early stages of development, or is anywhere in between, 3PRM™ solution can improve the health of your program and future-proof your entire business in many forms.

Our 3PRM™ solution streamlines the third-party risk management process through scalability, and efficiencies – from third-party risk identification to assessment what sets us apart is that our 3PRM™ solution includes:

• العناية الواجبة 360°
• Screening & Background Checks
• Regulatory Compliance
• Business Intelligence: Information Management
• Investigations: i.e. IP, Fraud, Conflict of Interest, etc
• Anti-bribery & Anti-Corruption (ABAC) Compliance
• Employee auditing training & education
• Monitoring & reporting

Where should TPRM sit within an organisation?

TPRM can sit within various business units depending on your organisation’s structure. Many organisations involve multiple departments such as procurement, information security, operational risk and compliance to provide input to manage the risks related to engaging third parties. Depending on your business’ internal structure, you may choose to apply a centralised, mixed or decentralised model when focus on TPRM. At CRI Group we observed a trend with many of our clients implementing a centralised model when managing their third-party relationships, given the required input from their multiple business lines. A centralised model allows you as an organisation to track common risks across departments and identify emerging trends that may require a response from more than one department.

Risk management goes beyond TPRM

CRI® Group provides the knowledge required to navigate unfamiliar markets and mitigate third party risk by assessing the backgrounds, integrity and character of those with whom you do business. Our 3PRM-Certified™ program is therefore key for managing an organisation’s third party risk levels. However this is only one of the several vital steps towards a robust risk management strategy implementation.

Risk management is the identification, evaluation, and prioritisation of risks (defined in ISO 31000 as the effect of uncertainty on objectives) followed by coordinated and economical application of resources to minimise, monitor, and control the probability or impact of unfortunate events or to maximise the realisation of opportunities. Risks can come from various sources including your employees.

Getting Started with ISO 31000 Risk Management? Learn more with our “ISO 31000 Playbook”

About CRI®

Based in London, CRI® Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening, 

In 2016, CRI® Group launched Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC® for more on ISO Certification and training.[/accordion_son][accordion_son title=”Prove that your business is ethical with a Gap Analysis (FREE)” clr=”#ffffff” bgclr=”#1e73be”]

Filed under: All Industries, All Regions, Resources,

ICC launches an Anti-corruption Third Party Due Diligence guide for small and medium size entities

International Chamber of Commerce (ICC) has launched an Anti-corruption Third Party Due Diligence guide for small and medium size entities. SMEs are often on the receiving end of burdensome due diligence procedures of large multi-national companies. These requirements can be overwhelming and often companies feel they do not have sufficient resources to meet them. This Guide aims to address these concerns and inspire Small and Medium size Enterprises (SMEs) to engage in due diligence by creating achievable and manageable due diligence goals. Following the Guide a company can:

• Know and have confidence in their counterparties;
• Through such knowledge and confidence meet the conditions for responsible investment;
• Avoid prosecution/reputational/financial damage from being implicated in an anti-corruption issue;
• Develop an ethical brand;
• Provide assurance to business partners, in particular larger organisations that they are an ethical
  company.

SMEs must also develop robust anti-corruption ethics and compliance procedures to ensure they minimise the risk of corruption and adhere to international anti-corruption standards. Understandably, many SMEs are overwhelmed by the extensive international anti-corruption legislation and the complex ethics and compliance procedures in place in larger, multi-national companies. However, ethics and compliance does not necessarily need to be on a grand scale and supported by a dedicated legal department. There are manageable ways in which smaller companies can protect themselves by better managing corruption risks. A key element to a simple but effective ethics and compliance programme is due diligence. This is the focus of this Guide which sets out what due diligence is, why it is necessary, when it is necessary and how it can be implemented to protect a company from the risk of corruption as much as possible.

It provides practical advice on how SMEs can cost-effectively conduct due diligence on third parties they engage to perform services on their behalf. It focuses on corruption risks associated with engaging third party suppliers, contractors and consultants in an international and domestic setting and how those risks can be managed. This tool will also assist SMEs create an effective due diligence procedure that fits into an overall ethics and compliance programme. For SMEs that do not have any ethics and compliance procedures in place, it can be considered a good starting point. The Guide can be used by any SME, of any size (even very small companies) or industry and it can be adapted so that the due diligence programme is tailored to the specifics needs and industry in which the company operates.

ICC is the institutional representative of more than 45 million companies in over 100 countries. Through a unique mix of advocacy, solutions and standard setting, ICC promotes international trade, responsible business conduct and a global approach to regulation, in addition to providing market-leading dispute resolution services. ICC members include many of the world’s leading companies, SMEs, business associations and local chambers of commerce. Read more about ICC here!

Adoption of this Guide by SMEs will provide reassurance to prospective customers and can be used as evidence of an overall compliance commitment; the commercial benefits of which should not be underestimated.

GET THE DOCUMENT HERE

This guide is also available in:

• Spanish version: CCI AUDITORÍA LEGAL ANTI-CORRUPCIÓN SOBRE TERCEROS: GUÍA PARA PEQUEÑAS Y MEDIANAS EMPRESAS 
• Swedish version: Anti-korruption Due diligence på externa aktörer

[/vc_column_text][vc_empty_space][accordion_father][accordion_son title=”Speak up – report any illegal, unethical, or improper behaviour” clr=”#ffffff” bgclr=”#1e73be”]Ethics and Compliance Hotline is an anonymous reporting mechanism that facilitates reporting of possible illegal, unethical, or improper conduct when the normal channels of communication have proven ineffective, or are impractical under the circumstances. At CRI Group, we are committed to having an open dialogue on ethical dilemmas regardless.

REPORT HERE!

We would like to introduce a new Ethics & Compliance Hotline. This hotline is available to all employees, as well as clients, contractors, vendors and others in a business relationship with CRI Group and ABAC Group. If you find yourself in an ethical dilemma or suspect inappropriate or illegal conduct, and you feel uncomfortable reporting through normal channels of communication, or wish to raise the issue anonymously, use CRI Group’s Compliance Hotline in below mentioned ways or provide us with your complaint online on the form below. The Compliance Hotline is a secure and confidential reporting channel managed by an independent provider. When reporting a concern in good faith, you will be protected by CRI Group’s Non-Retaliation Policy.

READ MORE!

[/accordion_son][accordion_son title=”Prove that your business is ethical.” clr=”#ffffff” bgclr=”#1e73be”]Complete ABAC® FREE Highest Ethical Business Assessment (HEBA) and evaluate your current Corporate Compliance Program. Find out if your organisation’s compliance program is in the line with worldwide Compliance, Business Ethics, Anti-Bribery and Anti-Corruption Frameworks. Let ABAC® (powered by CRI Group) experts prepare a complimentary gap analysis of your compliance program to evaluate if it meets “adequate procedures” requirements under UK Bribery Act, DOJ’s Evaluation of Corporate Compliance Programs Guidance and Malaysian Anti-Corruption Commission.

The HEBA survey is designed to evaluate your compliance with the adequate procedures to prevent bribery and corruption across the organisation. This survey is monitored and evaluated by qualified ABAC® professionals with Business Ethics, Legal and Compliance background. The questions are open-ended to encourage a qualitative analysis of your Compliance Program and to facilitate the gap analysis process.

The survey takes around 10 minutes to complete. TAKE THE SURVEY NOW!

[/accordion_son][accordion_son title=”About CRI Group” clr=”#ffffff” bgclr=”#1e73be”]Based in London, CRI Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening,

In 2016, CRI Group launched Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC® for more on ISO Certification and training.[/accordion_son][/accordion_father]

Have you read…

[/vc_column_text][vc_basic_grid post_type=”post” max_items=”12″ style=”pagination” items_per_page=”3″ item=”234″ initial_loading_animation=”none” grid_id=”vc_gid:1605689308060-9e4edd68-a073-0″ taxonomies=”41, 43″][/vc_column][/vc_row]

Filed under: All Industries, All Regions,

Third-party risk: how to survive in a brave new world?

Third party risk management, how to survive in a brave new world?

Third party risk management. The Current Business Climate Requires a Review and Reassessment of Your Organisation’s Third-Party Relationships. We won’t soon forget the year 2020 and the myriad ways worldwide business was derailed over a microscopic virus that caused a global pandemic. From layoffs and shutdowns to shortages and closures, the long-term effects of the pandemic have yet to be determined. But one thing is certain: The disruption to the global supply chain has wreaked havoc in virtually every business sector. third party risk management

Automobile manufacturing in Korea has been suspended due to a lack of parts from China. The fashion industry in the United States is struggling over sourcing as garment producers in Asia reduce output. U.K. aerospace manufacturer Rolls-Royce has announced it is cutting 9,000 jobs as a result of the coronavirus. And sharp declines in consumer demand have adversely affected global manufacturers who, in turn, are idling production to curb losses.

Find out how anti-bribery and anti-corruption management plays an important part in your third-party risk management strategy. This free ebook analyses the performance of Rolls-Royce in terms of ABAC policies within the scope of the ISO 37001 provisions.

DOWNLOAD EBOOK NOW

Global sourcing has been greatly impacted as suppliers have ceased operations, and multinational organisations have had to scramble to locate replacement supply sources. This gloomy picture has been made all the more daunting as opportunists, bad actors and other sanctioned, restricted, or unreputable parties have set up operations to take advantage of unsuspecting and desperate businesses by producing inferior goods, missing contractual deadlines, or operating in ways that could raise flags in the areas of ethical conduct, business integrity or jurisdictional compliance. As such, multinational companies need to be on high alert for such nefarious outside operations, lest they put their reputations, stakeholders, directors and bottom lines at risk.

Now is the time to identify alternative supply scenarios and re-evaluate contractual terms and performance metrics with those parties in the sourcing network. And to accomplish this, a risk-based approach to diligence, screening and vetting present and potential third-party suppliers is more important now than ever before.

Get your guide for risk prevention, detection and compliance. Download our Risk Management and Anti-Bribery Anti-Corruption Playbook

DOWNLOAD PLAYBOOK NOW

What is third party risk management?

Threats are increasing on several levels for organisations that rely on outside third parties, such as agents, brokers, vendors and suppliers.  While depleted inventories, idle production, inferior products and delayed delivery have greatly impacted the marketplace worldwide, multinational businesses are feeling the brunt of these pandemic-induced supply chain disruptions on a greater scale:

• Organisations are suffering financial loss as the supply chain falters;
• Companies are losing customers because of poor-quality products and services from third parties;
• Organisations are opening the doors to litigation by working with third parties that may be engaging in bad labour practices or forcing workers to produce in unsafe work conditions;
• Company data systems are being exposed and breached because of poor security practices by third parties;
• Companies are experiencing a greater level of supply chain issues due to poor disaster recovery procedures enacted by third parties;
• Organisations and boards are increasingly being exposed to litigation because of relationships with outside providers that may have violated contractual terms, potentially resulting in regulatory exposure;
• Such organisations are being targeted by story-hungry media sources determined to expose the company to a global audience.

The result of these increased risks can be highly problematic:

• Business litigation has skyrocketed;
• Corporate reputations are negatively impacted on a larger scale;
• Organisations have had to continually review, reassess and adapt risk management frameworks to adjust and acclimate to an ever-changing global business environment;
• Board members are becoming increasingly subjected to intense scrutiny from outside watchdogs and critics;
• Unfortunately, a highly educated market responds to the above scenarios accordingly with their pocketbooks.

From supply and production disruptions to regional compliance issues and bad media exposure, multinational corporations face increased scrutiny working with unscrupulous third-party partners.  Thus, the an intense need to remain vigilant in conducting due diligence and vetting those outside affiliations.

VIEW 3PRM^TM BROCHURE

Don’t let the dominoes fall, ever, with our 3PRM certification

CRI® Group’s third-party compliance verification and certification program – 3PRM-Certified™ – can help organisations establishing the legal compliance, financial viability, and integrity levels of outside partners, suppliers and customers seeking to affiliate with your business. Third-party relationships are critical in business today and include partnerships with suppliers, distributors, consultants, agents and other contractors.

While such affiliations are essential to the success of your organisation, a business cannot overestimate the consequences of inadequate due diligence. As the risk for data breaches and supply chain disruption continues to rise with COVID-19, so does the need for effective third-party risk management (TPRM) programs.

Whether you’re a TPRM professional looking for a certification to advance your skillset, or the leader of your organisation considering how to better equip your team with the best knowledge and skills, 3PRM-Certified™ program is an all-in solution.

When is it time to conduct third-party screening?

CRI® Group’s exclusive 3PRM-Certified™ solution provides the very best in third-party risk management. Our 3PRM-Certified™ program provides a proactive approach to mitigating risks from third-party affiliations, protecting the organisation from liability, brand damage and harm to the business. The 3PRM-Certified™ program includes a focus on the following:

• Providing third-party risk assessments
• Meeting contracting requirements
• Conducting due diligence
• Identifying potential fraud risks
• Providing management oversight

Utilising a network of trained professionals positioned across five continents, CRI® Group’s 3PRM services utilise one of the largest multi-national fraud investigation teams the industry has to offer. The 3PRM-Certified™ program is especially critical when your business is performing pre-merger and acquisition research and pre-IPO due diligence, engages new clients, employs, contracts or retains foreign business partners and requires a consistent and audit-worthy AML and anti-corruption compliance program.

Who is CRI® Group?

Based in London, CRI® Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening, 

We have the largest proprietary network of background screening analysts and investigators across the Middle East and Asia. Our global presence ensures that no matter how international your operations are, we have the network needed to provide you with all you need, wherever you happen to be. CRI® Group also holds BS 102000:2013 and BS 7858:2012 Certifications, is an HRO certified provider and partner with Oracle.

In 2016, CRI® Group launched the Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification.

ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI® Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC® for more on ISO Certification and training.

Meet our CEO and Author

Zafar I. Anjum is Group Chief Executive Officer of CRI® Group (www.crigroup.com), a global supplier of investigative, forensic accounting, business due diligence and employee background screening services for some of the world’s leading businesses organisations.

Headquartered in London (with a significant presence throughout the region) and licensed by the Dubai International Financial Centre-DIFC, the Qatar Financial Center-QFC, and the Abu Dhabi Global Market-ADGM, CRI® Group safeguards businesses by establishing the legal compliance, financial viability, and integrity levels of outside partners, suppliers and customers seeking to affiliate with your business.

CRI® Group maintains offices in UAE, Pakistan, Qatar, Singapore, Malaysia, Brazil, China, the USA, and the United Kingdom. Contact us to learn more about the third-party risk management strategy program and discover an effective and proactive approach to mitigating the risks associated with corruption, bribery, financial crimes and other dangerous risks posed by third-party partnerships.

Zafar Anjum, MSc, MS, CFE, CII, MICA, Int. Dip. (Fin. Crime)

CRI® Group Chief Executive Officer
t: +44 207 8681415 | m: +44 7588 454959
e: zanjum@crigroup.com

Filed under: All Industries, All Regions,

The Role of a Fraud Investigator

Fraud investigators are the front line of establishing the facts of suspected fraud or other unethical business behavior. A fraud investigator’s skillset and wide knowledge of fraud laws, evidence gathering and interviewing make them the go-to expert for investigating insurance fraud, financial fraud, procurement fraud, asset recovery, cyber fraud, healthcare fraud, retail fraud and other areas.

A fraud investigator can either be part of a team of experienced investigators, or the leader of such a team. If part of a team, the fraud investigator generally works with the other team members to handle reports of suspicious activity. If in charge of a team, the fraud investigator would typically report to the head of a department, such as corporate security, compliance or audit. A fraud investigations manager at a typical retail business, for example, would be responsible for the day-to-day monitoring, investigation and resolution of fraudulent activity relating to delays in the repayment and refunds processes. They will take the lead on the implementation of strategies to prevent fraud and financial crime, thereby mitigating risk to the business.

Fraud Investigator Key Functions

Fraud investigators provide subject matter expertise on claims and associated fraud risks, helping to ensure effective resolution of investigations. The effective fraud investigator adheres to relevant security standards, internal and external procedures and legislative requirements. Their role often involves developing and maintaining close working relationships with relevant law enforcement agencies, ensuring that cases are developed and prosecuted to a criminal standard.

When working with an organization in a preventative fashion, a fraud investigator will perform fraud risk assessments across the business relating to both external and internal threats; implementing mitigation measures as required. They also build appropriate fraud prevention and detection processes and implement them. Some fraud investigators manage the day-to-day operation of an expanding fraud team, ensuring that KPIs are met and regular reports produced for the management team. In this capacity, they will also work closely with the senior management team to ensure that operational capacity is correctly aligned to combat a variety of fraud types.

Here are some of the other key functions performed by fraud investigators:

• Evaluate potential fraud indicators and the impact of current fraud trends and make recommendations as to appropriate mitigation.
• Conducting investigations into allegations of fraud, waste or abuse committed by clients against our company
• Reviewing and researching evidence/documents to analyze the overall fact pattern of a claim and synthesize data into a professional report with recommendations
• Preparing and coordinating field assignments to obtain relevant evidence and information
• Conduct objective, fair, thorough, unbiased and timely investigations into allegations of fraud, waste or abuse committed by clients against our company
• Review and research evidence/documents to analyze the overall fact pattern of a claim and synthesize data into a professional report with recommendations
• Prepare and coordinate field assignments to obtain relevant evidence and information
• Coordinate with defense attorneys to provide deposition strategies and use law enforcement resources for assistance
• Manage and priorities a large and varied caseload effectively and efficiently to achieve positive results
• Prepare prosecution packages and restitution proposals.

Responsibilities

As a fraud investigator often wears many different hats, they also have many ongoing responsibilities. These include monitoring transaction reports to identify any suspicious transactions and conducting detailed investigations as required. They must also proactively identify financial crime trends through data analysis and share findings with leadership as and when needed. A few other responsibilities of a fraud investigator include:

• Working to a high standard, meeting strict time-frames whilst working under pressure.
• Communicating directly with customers as part of ongoing fraud investigations through in-app messages or via telephony with potential victims of fraud to establish circumstances and additional information, before providing a fair and logical decision, with supporting rationale.
• Work as part of a team and supporting colleagues as and when required to reduce workload(s).

Personality Traits of a Fraud Investigator

There are some common traits among the most successful fraud investigators. This includes being a self-starter who is results-driven with high levels of self-motivation, energy and initiative. An effective fraud investigator has a proven ability to work under pressure to and meet tight deadlines, without compromising the quality of output. One key trait that can’t be overlooked is the ability to be an effective communicator – a fraud investigator must have excellent written and verbal skills. Here are some other key traits among successful fraud investigators:

• An ability to thrive under pressure amidst changing business priorities
• Effective cost management and analytical integrity
• Experience in leading and developing a team
• Keen interest in stopping fraud whilst considering the impact of how an investigation can impact customers

Knowledge and Skills

A successful fraud investigator brings to the table a broad range of security/ fraud detection and prevention experience. A fraud investigator must be a subject matter expert on fraud for their related field, such as insurance fraud, financial fraud, procurement fraud, asset recovery, cyber fraud, healthcare fraud, retail fraud and other areas.

Many fraud investigators have specialized skills such as:

• Experience of interviewing in accordance with the Police and Criminal Evidence Act following the PACE framework.
• Strong knowledge of cyber risk and common fraud typologies, along with the emerging trends affecting fraud and financial crime.
• Familiarity with key AML, TF, Financial Crime and Sanctions legislation and associated Regulatory Guidance.
• Demonstrated experience working with customers on fraud prevention and detection strategies.
• Sound understanding of the customer impact of a transaction monitoring system; able to balance fraud prevention with the need to provide an excellent customer experience.

As previously mentioned, an effective fraud investigator must have strong interpersonal and communication skills, including the ability to interact with clients, upper management and law enforcement. They also need to have an ingenuity and persistence to obtain case information not readily available with an eye for detail. Dealing with various different cases and different types of evidence requires strong organizational skills. For insurance fraud, investigators must be proficient with the insurance procedures, regulations and investigation methods

Perhaps most important, fraud investigators must set a positive example for their colleagues. They need to be honest and ethical, with high levels of integrity and confidentiality.

A fraud investigator has many different responsibilities, and the role requires an individual with some specific traits. CRI Group’s fraud investigators are experts at uncovering the facts and evidence of a case, but they also implement proactive anti-fraud measures to help an organisation be better protected against future incidence of fraud. Fraud investigators specialise in insurance fraud, financial fraud, procurement fraud, asset recovery, cyber fraud, healthcare fraud, retail fraud and other areas. It’s important that organisations hire trained, qualified fraud investigators who understand the laws, are effective at evidence collection and fact-finding, and are good communicators (since interviewing is one of the key processes of fraud investigation). A fraud investigator might work with a team, or they might lead their team and report to another division. Being able to work under pressure and meet deadlines is critically important. Properly evaluating and securing evidence is of equal importance. CRI Group has only the best expert fraud investigators to meet these challenges.

Are you a fraud investigator? Tell us about your day-to-day job, we would love to hear it.

Who is CRI Group?

Based in London, CRI Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening,

In 2016, CRI Group launched Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organizations. Contact ABAC® for more on ISO Certification and training.

Filed under: Automotive, Aviation, Background Investigation, Compliance Solution, Finance & Professional services Industry, Insurance, Insurance Fraud Investigation, Investigative Solution, IT & Telecommunications, Oil, Gas & Energy, Pharmaceutical & Healthcare, Property, Resources,

Q&A session with our CEO: United Arab Emirates fighting Fraud and corruption

Middle east corruption is a threat to the world. The United Arab Emirates (UAE) is a land of complex extremes where fabulous wealth and supercars live right next to staggering poverty. This is generally a recipe for fraud and corruption. However UAE has been talking the right steps towards a fraud free future. This Financier Worldwide Q&A session with our CEO discusses United Arab Emirates role in fighting fraud and corruption. Read the answers to the following questions:

• To what extent have you seen a notable rise in the level f corporate fraud, bribery and corruption uncovered in United Arab Emirates in recent years?
• Have there been any legal and regulatory changes implemented in United Arab emirates  designed to combat fraud and corruption? What penalties do companies face for failure comply?
• Do regulators in United Arab Emirates have sufficient resources to enforce the law in this area? Are they making inroads in this area?
• If a company finds itself subject to a government investigation or dawn raid, how should it respond?
• and much more…

Q. To what extent have you seen a notable rise in the level of corporate fraud, bribery and corruption uncovered in United Arab Emirates (UAE) in recent years?

ANJUM: Some recent, high profile cases have affected companies and countries in the Middle East. Embraer’s bribery scandal, involving sales of its aircraft, included officials in Saudi Arabia, among others. Further, there have been suspicions of corruption surrounding the awarding of the 2022 FIFA World Cup to Qatar, suspicious which have been worsened by allegations of human rights abuses involving migrant workers. In general, however, it is still issues like data theft, e-commerce fraud, information security and other high tech threats that pose serious risks to organisations in the Middle East. We live in an increasingly connected world, so while anti-fraud laws and controls in one country may be robust, a company might find itself doing business abroad in a location where laws and enforcement are more lax, and risk is heightened.

Q. Have there been any legal and regulatory changes implemented in UAE designed to combat fraud and corruption? What penalties do companies face for failure to comply?

ANJUM: the UAE has a strong reputation for being tough on corruption, and a new law enhances this stance. The recently approved, and highly anticipated, Anti-Commercial Fraud Law will strengthen protections of intellectual property rights (IPR) and will impose stricter penalties anon counterfeiters. For example, a fraud offence related to counterfeiting could now result in up to 2 years in prison, as well as a fine of up to Dh1m. Overall, corruption is still a low risk for companies operating in the UAE. Laws against corruption are enforced, and they cover bribery, facilitation payments, embezzlement and other types of fraud and abuse. However, when concerning the Middle East as a whole, there are indications that fraud and corruption are the rise, which means we must be ever vigilant in protecting investments throughout the region.

Q. In your opinion, do regulators in UAE have sufficient resources to enforce the law in this area and fight corruption? Are they making inroads in this area?

ANJUM: When considering the Middle East region, there can be no ignoring war-ravaged areas like Syria, Iraq, Libya and Yemen. It is an understatement to say that countries embroiled in conflicts and crisis usually do not have the resources or manpower to properly prevent and detect fraud. But according to Transparency international’s most recent  Corruption Perceptions Index, a few of the other more stable and affluent countries in the region are experiencing some difficulty preventing fraud, as well. Different factors can contribute to these struggles, be they politics, autocratic leadership, weak laws or judiciary bodies. However, the UAE still ranks as the least corrupt country in the Middle East, and other countries might take heed of the country’s Anti-Commercial Fraud Law and other existing laws, not to mention the UAE’s enforcement measures, as a possible model for future efforts.

Q. If a company finds itself subject to a government fraud and corruption investigation or dawn raid, how should it respond?

ANJUM: A company that finds itself in such as crisis should immediately cooperate with authorities and work quickly to gather the facts. What are the allegations? What is the scope of the investigation? Was the raid expected, or has the company been taken completely by surprise? In the early stages, it is crucial that the company engages in a good-faith effort to be transparent and cooperative. Of course, retaining legal counsel, is a must at this an every stage of an investigation, If an employee or employees have engaged in fraud, the company should support the fact-finding process and let justice run its course. Company leaders should also evaluate their internal controls and ensure that additional fraud or corruption is not occurring under the radar.

Q. What role are whistle-blowers playing in the fight against corporate fraud and corruption? How important is it to train staff to identify and report potentially fraudulent activity?

ANJUM: The statistics on fraud, such as in the Association of Certified Fraud Examiners Report to the Nation on Occupational Fraud & Abuse show that fraud is most often uncovered by tips, more so than audits, surveillance, account reconciliation, document examination and other methods. Accordingly, a company’s own employees are their first line of defence against fraud. But to encourage whistle blowing, two critical measures need to be in place. First, employee should be trained to identify the red flags of fraud, and to know what does, and what does not, constitute fraudulent behaviour. Second, a reporting mechanism should be in place; an anonymous system by which whistle-blowers can submit their tips without fear of retaliation or negative consequences.

Q. What advice can you offer to companies on conducting an internal investigation to follow up on suspicions of fraud or corruption?

ANJUM: In any situation where fraud is suspected, it is crucial that experts be brought in as quickly as possible to help unravel the facts of the case, if the company does not have anti-fraud professional among its staff, It is critical to remember that there are various laws, depending on your country or region, which govern the rules of gathering evidence and interviewing witnesses. Any evidence that is mishandled or collected improperly can negatively impact an investigation and hurt the chances of a resolution. If an investigation is bungled from the start, it is nearly impossible to then ‘wind it back’ and correct mistakes later. Also, if criminal behaviour is suspected, legal authorities should be quickly notified and provided with the company’s findings and reasons for the allegation.

Q. What general steps can companies take to proactively prevent corruption and fraud within their organisation?

ANJUM: Every organisation, large or small, should have a plan in place for preventing and detecting fraud. The first step is to communicate the organisation’s zero-tolerance stance against fraud. An ethical code of conduct, signed by every employee, can be effective in this regard. A fraud risk assessment should be conducted to find vulnerabilities. The company’s hiring policy should include pre- and post-employment background screening. Job responsibilities should include segregation of duties, so that no single employee has too much control over finances or assets. The company should conduct audits and encourage whistle-blowing with an anonymous reporting system. With a comprehensive fraud prevention system in place, business owners can sleep a little easier, knowing that their organisation has reduced risk and increased their ability to prevent and detect fraud.

Speak up – report any illegal, unethical, or improper behaviour

If you find yourself in an ethical dilemma or suspect inappropriate or illegal conduct, and you feel uncomfortable reporting through normal channels of communication, or wish to raise the issue anonymously, use CRI® Group’s Compliance Hotline. The Compliance Hotline is a secure and confidential reporting channel managed by an independent provider. When reporting a concern in good faith, you will be protected by CRI® Group’s Non-Retaliation Policy.

About CRI®

Based in London, CRI® Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening,

In 2016, CRI Group launched Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI® Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC® for more on ISO Certification and training.

Meet our CEO

Zafar I. Anjum, is Group Chief Executive Officer of CRI® Group (www.crigroup.com), a global supplier of investigative, forensic accounting, business due diligence and employee background screening services for some of the world’s leading business organisations.  Headquartered in London (with significant presence throughout the region) and licensed by the Dubai International Financial Centre-DIFC, the Qatar Financial Center-QFC, and the Abu Dhabi Global Market-ADGM, CRI® Group safeguards businesses by establishing the legal compliance, financial viability, and integrity levels of outside partners, suppliers and customers seeking to affiliate with your business. CRI® Group maintains offices in UAE, Pakistan, Qatar, Turkey, Singapore, Malaysia, Brazil, China, USA, and the United Kingdom.

Contact CRI® Group to learn more about its 3PRM-Certified™ third-party risk management strategy program and discover an effective and proactive approach to mitigating the risks associated with corruption, bribery, financial crimes and other dangerous risks posed by third-party partnerships.

CONTACT INFORMATION

Zafar Anjum, MSc, MS, CFE, CII, MICA, Int. Dip. (Fin. Crime) | CRI Group Chief Executive Officer

37th Floor, 1 Canada Square, Canary Wharf, London, E14 5AA United Kingdom

t: +44 207 8681415 | m: +44 7588 454959 | e: zanjum@crigroup.com

This Q&A article is based on a 2017 Financier Worldwide interview.

Since 2001, Financier Worldwide has provided valuable information on corporate finance and board-level business issues through its monthly magazine and exclusive website content. As a leading publisher of news and analysis on this dynamic global market, the organisation is recognised as a valued source of intelligence to the corporate, investment and advisory community. More from Financier Worldwide:

• Corporate resilience: managing third party risks, April 2013  |  SPECIAL REPORT: MANAGING RISK 
• Contract fraud: is your organisation at risk?, February 2013  |  SPECIAL REPORT: CORPORATE FRAUD & CORRUPTION
• Fraud & Regulatory Enforcement 2013, April 2013  |  FRAUD & CORRUPTION

Download 2018 annual reviews by Mr. Zafar Anjum, CEO, and Ms. Fatima Farrukh, Compliance professional at CRI® Group.

• Click here to download the review of UAE (Mr. Zafar Anjum, CEO at CRI® Group)
• Click here to download the review of UK (Mr. Zafar Anjum, CEO at CRI® Group)
• Click here to download the review of Pakistan (Ms. Fatima Farrukh, 2018 Compliance professional at CRI® Group)

Filed under: Compliance Solution, Leadership Insights, Middle East, Resources,

Responsible Management and CEOs

As of 13 August 2020, COVID-19 has affected more than million people globally, including 744,385 deaths, reported to WHO. The virus has also had severe economic implications, leaving organizations facing a unique set of new challenges that can only be summed up in one word: uncertainty. And the only way to navigate these uncertain times is through leadership. This is critical right now, as COVID-19 has magnified societal vulnerabilities. Good leaders can and should lead society into a new “normal”. However when Harvard economist Greg Mankiw argued in a New York Times opinion piece that CEOs are qualified to make profits, not lead society this is somewhat inadequate to the times we live in now. Furthermore, Doug Sundheim, contributor at Forbes, has argued in his article “CEOs Have A Responsibility To Help Lead Society” that Greg’sc arguments just simply do not fit today’s business models. This “shareholder-first business model” originated from 1970, however 50 years on a lot has changed and at a time when over 70% of the largest entities on earth are corporations, not nations, Mankiw’s view is troubling. 

The sheer number of corporations around the world should make us understand that business impacts societies on a global scale; therefore, business leaders have the responsibility to at least consider those societies and how they impact them. The singular management goal of CEOs is no longer about maximizing returns to shareholders, but to support society as business has grown more interconnected and complex. Today, business and society are weaved together in an intricate way, both depending on the other for stability and success. 

The COVID-19 pandemic has also changed businesses and created a surge in the number of positive collaborations between companies, institutions and governments. Our article “COVID-19 prompted innovative leadership” reflects how Mankiw fails to grasp the world in which CEOs are now in fact leading communities and helping societies.

Mankiw asks the reader to imagine having to make an executive decision and how effective and simplier it is when your only priority is profits, and not the wider set of stakeholders – i.e., employees, suppliers, communities, and shareholders. Mankiw defends the idea that corporate management’s mandate should be the narrow self-interest of achieving greater profits for shareholders, not broad social welfare. He goes on to list several additional hypothetical questions. A social-driven leader would have to consider:

• How do you weigh those losses against the gains to the would-be workers at the new plant?
• How much will the closure of the old plant hurt its workers and their community?
• Does it matter whether the new plant is in South Carolina, providing jobs for American workers, or in Mexico, providing jobs for Mexican workers?
• How should you weigh the benefit of electric cars in mitigating climate change? 
• How should you balance these concerns against the interests of shareholders, who entrusted you to invest their savings?

However, the above questions are now part of the many new demands from consumers, talent and governments. 

Consumers have changed; they are no longer only interested in the end product. Consumers are demanding more from companies for their buy-in. And every corporate leader has to include some version of the above questions in their considerations if they want to succeed. Top CEOs say social responsibility should be prioritised over profits proving that social responsibility planning; it’s officially basic business planning. Last year the bosses of 181 Leading US’s biggest companies dropped the shareholder-first principle – they changed the official definition of “the purpose of a corporation” (from making the most money possible for shareholders) to “improving our society.”

Most successful CEOs and corporate leaders have profit in mind, and they always will; but they are also considering the needs of a variety of stakeholders, including the communities they impact. In this day and age, CEOs and corporate leaders are rising up to social expectations and are balancing the demands of multiple stakeholders.

Mankiw questioned CEOs’ and corporate leaders’ ability to be broadly competent social planners.  Paul Polman (former Unilever CEO) talks about creating collective courage. He rightly argues that it’s difficult for one industry player to impact an issue like reducing greenhouse gases because of the loss of competitiveness. However, if 20% of industry players come together, they can begin tipping the scales.  It’s starting to happen. In this way, by unifying their efforts, corporations, governmental agencies, and NGOs can partner to lead society.

CEOs and other leaders now find themselves in a changed world … they can and should play a variety of leadership roles that move beyond narrow profit maximization. This is a social responsibility, not broad social planning. Short-term earnings no longer feature in the top of the mission statement for most successful companies. We’re starting to find our way back to a more balanced view, and we need CEOs’ leadership in the process.

Mankiw admits that the world needs people to look out for the broad well-being of society – elected leaders who are competent and trustworthy – but those people are not CEOs. However, Mankiw fails to acknowledge just how much influence CEOs and corporate leaders have over our elected officials and the legislative process. Today, large corporations and their associations outspend labour and public interest groups 34 to 1 on lobbying efforts in the US.

In today’s high-risk environment, businesses have to pay attention to their social and environmental roles not only due to demand, but out of responsibility for the damage they (can) cause. For example, companies that contribute to, but then deny, climate change – the attorneys general of several American states launched investigations into ExxonMobil and whether they had committed fraud by sowing doubts about climate change – even as its own scientists knew it was taking place to firms involved in botched Grenfell Tower revamp refusing to accept responsibility for tragedy. Then there is Chamath Palihapitiya, former Facebook executive, who expressed regret for his part in building tools that destroy ‘the social fabric of how society works’. Companies are responsible for causing great damage on a human scale. We have to hold companies, CEOs and brands accountable for their destructive impact in today’s society; while they have a responsibility to support and help lead society.

CEOs and corporate leaders are exerting immense influence behind the scenes; therefore, qualified CEOs and corporate leaders should step up and help lead on the thorny economic issues of the day. However, with great power comes great social responsibility. Not all of the corporate leaders are equipped to lead societies; therefore, they should take a significant weight off the scale. Contrary to what Mankiw and others of his mindset might think, we must continue to demand more from our corporations, their boards, and their CEOs and leaders. Corporate leaders can make a unique and lasting positive impact, too.

About us…

Based in London, CRI® Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening, 

In 2016, CRI® Group launched the Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI® Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organizations. Contact ABAC® for more on ISO Certification and training.

MEET THE CEO

Zafar I. Anjum is Group Chief Executive Officer of CRI® Group (www.crigroup.com), a global supplier of investigative, forensic accounting, business due to diligence and employee background screening services for some of the world’s leading business organizations. Headquartered in London (with a significant presence throughout the region) and licensed by the Dubai International Financial Centre-DIFC, the Qatar Financial Center – QFC, and the Abu Dhabi Global Market-ADGM, CRI® Group safeguard businesses by establishing the legal compliance, financial viability, and integrity levels of outside partners, suppliers and customers seeking to affiliate with your business. CRI® Group maintains offices in UAE, Pakistan, Qatar, Singapore, Malaysia, Brazil, China, the USA, and the United Kingdom.

Contact CRI® Group to learn more about its 3PRM-Certified™ third-party risk management strategy program and discover an effective and proactive approach to mitigating the risks associated with corruption, bribery, financial crimes and other dangerous risks posed by third-party partnerships.

CONTACT INFORMATION

Zafar Anjum, MSc, MS, CFE, CII, MICA, Int. Dip. (Fin. Crime) | CRI® Group Chief Executive Officer

37th Floor, 1 Canada Square, Canary Wharf, London, E14 5AA United Kingdom

t: +44 207 8681415 | m: +44 7588 454959 | e: zanjum@crigroup.com

Filed under: Background Investigation, Compliance Solution, COVID-19 Insights,

7 Traits of a Resilient Leader

Every successful leader has encountered a challenging scenario at some point in their career. The unprecedented COVID-19 pandemic, however, has forced leaders to face unforeseen new challenges. With the pandemic’s colossal impact on operations, workforces, profits and supply chains across the globe, all eyes are on leadership to guide their businesses through this crisis. Resilient Leader

Resilient leaders are generally seen as more effective, making them an asset to any business; but what is resilience and how can it be applied to your management skills?

What is Resilience?

Resilience is the capacity to recover quickly from difficulties; it is a further evolution of stress management. This makes it a “no brainer” as to why resilience is such a popular concept in today’s business environment. Many businesses are pushing the concept of resilience as a way of helping workers better cope with the stresses and strains of the modern-day office and unlock their performance potential.

In this article, we look at seven essential qualities that characterise resilient leaders, and how to increase your resilience. In general, resilient leaders:

1. Show empathy
2. Are adaptable and able to improvise
3. Are self-aware and open to feedback
4. Take calculated risks
5. Keep a positive attitude
6. Develop others
7. Communicate effectively

1. Resilient Leaders Show Empathy

COVID-19 has generated one of the greatest challenges and, simultaneously, one of the greatest opportunities for resilient leaders – at all levels. According to a Gallup U.S poll, six in 10 people are “very” or “somewhat worried” that they or a family member will be exposed to COVID-19 (Gallup, 2020). During this crisis, emotional management is even more crucial than ever. According to studies carried out by Development Dimensions International (DDI), empathy is the most critical leadership skill. Leaders who display compassion, authenticity and vulnerability – and are capable of apologising when they’re wrong and handle criticism without blame – create strong emotional bonds with their teams (DDI, 2020).

The most resilient (and effective) leaders can demonstrate empathy and a high level of emotional intelligence. When your team feels understood, they feel more motivated and more confident to contribute cultivating stronger conversations, ideas and debate. As Mark Cuban shared in a recent interview: “How you treat your employees today will have more impact on your brand in future years than any amount of advertising, any amount of anything you literally could do” (Just Capital, 2020).

2. Resilient Leaders Are Adaptable

With COVID-19 infecting approximately 311,641 people in the UK alone, health officials suggested using hand sanitiser as the easiest way to prevent the spread of the disease. Consequently, these announcements led to panic buying (Euronews, 2020). In this type of situation, a resilient leader should be able to visualise this action as an opportunity – for example, dozens of spirit manufacturers across the UK started to produce hand sanitisers (i.e. BrewDog and Leith Gin). This is a classic example of an instant attitude adjustment – looking at what they can do as opposed to what they can’t (Telegraph, 2020).

When faced with change, resilient leaders can focus on the things within their business that they can still control. Whether impacted by new technologies, environmental challenges or even ethical dilemmas, the modern business landscape is always changing. A resilient leader needs to be flexible and adaptable to succeed. Is flexibility part of your leadership style?

3. Resilient Leaders Are Self-Aware and Coachable

According to Health Care Business Today, self-awareness and coachability are “The Two Most Important Leadership Traits” (Health Care Business Today, 2019). We think so, too. Resilient leaders are self-aware, confident, and most of all, able to recognise their strengths and overcome their weaknesses. Resilient leaders are open to feedback, ask for feedback and are always demonstrating a real effort to improve.

4. Resilient Leaders Take Calculated Risks

Successful leaders earned their success through taking calculated risks. When Amazon CEO Jeff Bezos launched AmazonFresh, he was scrutinised by others because he didn’t choose a successful delivery or supermarket executive to run the venture. Instead, Bezos selected a team that had previously run a web-based food delivery service in the ‘90s (which collapsed after two years in business). Why? Bezos knew that the team had learned from their failure, which made them the perfect choice to succeed with a new project.

Resilient leaders like Bezos take calculated risks while accepting that failure is a by-product of innovation and success. They learn to become comfortable with being uncomfortable, and flourish as the world changes around them.

5. Resilient Leaders Can Keep a Positive Mindset

The impact of COVID-19 is tough to manage. It is vital to have a positive mindset that can influence fellow professionals and raise team morale while maintaining business momentum.

Under the challenging circumstances posed by the COVID-19 crisis, a resilient leader needs to be enthusiastic, offer praise for success, and give credit when it’s due. American psychologist Carol Dweck has stated in her book “Mindset: The New Psychology of Success” that “a change of mindset must happen before other positive transformation can occur.”

Resiliency is needed when we encounter failure. As a resilient leader, you shouldn’t view failure as final, but as a necessary step to move further along your journey.

6. Resilient Leaders Develop Others

The most resilient leaders are concerned about the development of their teams. Developing others helps everyone to learn from their mistakes. We continue to find that leaders who want and accept honest feedback for themselves are more likely to give productive feedback and coaching to others.

7. Resilient Leaders Communicate Effectively

Effective communication helps teams understand changes, expectations and new directions. This understanding is the key to the success of any team. The most resilient and best leaders always communicate their intentions effectively to others and are willing to help their teams understand a new strategy or direction.

The COVID-19 pandemic is proving to be the ultimate test for business leadership. In times of crisis, only certain individuals can adapt and stand tall amongst the crowd. When it comes to leaders, being able to implement resilience tools and strategies will not only make you a better leader but help the company overall.

Who is CRI Group?

Based in London, CRI Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening,

In 2016, CRI Group launched Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC® for more on ISO Certification and training.

Filed under: Automotive, Aviation, Background Investigation, Compliance Solution, COVID-19 Insights,

TPRM: When is it time to conduct third-party screening?

When to conduct third-party screening?

Why do organisations screen their employees but not the companies they work with? Failing to screen third-party screening to the same level as permanent staff will increase your risks on many levels – from brand reputation to loss of money.

The nature of business today is largely shaped by our connected world. Many organisations conduct business across international borders and/or overseas and as part of various strategic and beneficial partnerships. In fact, the technology revolution and other factors that have removed barriers from business make it more essential than ever to have suppliers, vendors and other supporting companies helping to establish supply chains in various locations. And while they can be a great benefit to an organisation, these partnerships also represent an inherent security risk.

Third-party screening in compliance perspective

Vendors, suppliers and other third-party partners are entities largely outside of your control. While your organisation might have a high level of internal controls and stringent standards for ethical conduct, the entities that you partner with might not share those controls or values. Therefore, if something goes wrong, their failings can affect your organisation in terms of financial loss, liability, and damage to reputation.

Europe’s horse-meat scandal in 2013 or Quest Diagnostics data breach in 2019 is strong examples. Major organisations like Tesco were caught up in financial and PR disaster when they found that some of their suppliers were using horse meat in products sold as 100 per cent beef. Consumers were outraged, and many of the larger companies caught up in the scandal admitted that they had not performed proper due diligence or closely monitored their suppliers and their standards. And in the case of Diagnostics, the exposed records of 11.9 million patients.

When is the right time to conduct due diligence?

While third-party risk management should be an ongoing process, there are certain times when it is absolutely crucial for any organisation. At CRI® Group, we counsel our clients always to use third-party screening when doing any of the following:

• Performing pre-merger and acquisition research
• Conducting pre-IPO due diligence
• Engaging new clients
• Employing, contracting or retaining foreign business partners
• Implementing a consistent and audit-worthy AML and anti-corruption compliance program

Dodging trouble

Conducting 3PRM due diligence investigations at the right time has helped our clients avoid some major pitfalls, including the following:

• Merging with an international business embroiled in several behind-the-scenes legal battles
• Getting caught up in making procurement decisions involving the inappropriate influence of government officials who were slated to receive kickbacks
• Partnering with organisations that were potential credit risks, have claimed bankruptcy, have dissolved stated companies or were faced with debtor filings.
• Awarding work to an overseas contractor with absolutely no prior experience
• Affiliating with a contracting company owned by a politician with significant influence on future awards

With a network of trained professionals positioned across five continents, CRI® Group’s third-party risk management (3PRM™) services will provide your business with a comprehensive approach toward managing all third-party management risks. Contact us today and learn more about how we can help you address all of your third-party screening and due diligence needs – get a FREE QUOTE now!

VIEW OUR RISK MANAGEMENT SOLUTIONS BROCHURE

GET FREE QUOTE

About CRI® Group

Based in London, CRI® Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening, 

We have the largest proprietary network of background screening analysts and investigators across the Middle East and Asia. Our global presence ensures that no matter how international your operations are, we have the network needed to provide you with all you need, wherever you happen to be. CRI® Group also holds BS 102000:2013 and BS 7858:2012 Certifications is an HRO certified provider and partner with Oracle.

In 2016, CRI® Group launched the Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification.

ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI® Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC® for more on ISO Certification and training.

اتصل بنا

Filed under: All Industries, All Regions,

Ethical code of conduct: What should be covered?

Business leaders are usually quick to communicate their expectations to employees, especially when it comes to financial goals or tasks that they want to be accomplished. However, what is often lacking is a clear, concise explanation of what the organisation expects in terms of ethical behaviour. The recent article “Puffery or Not? Courts Examine Corporate Codes of Conduct” explains that although a number of federal courts have found code of conduct statements to be non-actionable puffery, given the uncertainty in the face of the novel CODIV19 pandemic, public companies are ought to review their codes of conduct and revise them if necessary to mitigate litigation risk. Ethical code of conduct:

Does your organisation have an ethical code of conduct? If not, you might be making assumptions that your employees know to conduct themselves in an ethical manner, when, in fact, this expectation only exists in a grey area in their minds – if at all. In fact, some employees who have engaged in fraud, corruption or other unethical situations have claimed that while they knew their behaviour was wrong, they thought it was implicitly accepted by their bosses and, in some cases, their company overall.

Rather than assume that ethical rules “go without saying,” every organisation should spell out what they expect of their employees when it comes to ethical behaviour. At CRI Group, we counsel business leaders on the principle that every organisation should have a written, carefully considered ethical code of conduct as part of their fraud prevention strategy. CRI’s Certification program through the ABAC Center of Excellence includes developing an ethical code of conduct as part of the training and development phase for clients.

What should be covered?

An ethical code of conduct should be tailored to your company and your organisation – no two will be the same. What are the risks inherent in your organisation? What about in your industry? A pharmaceutical company will have some different risk areas than a retail store, for example. A nonprofit organisation might have concerns that relate to fundraising, a government agency might be focused on preventing bribery or collusion.

The goal of an ethical code of conduct is to help all employees understand the expectation that they always behave in a legal and ethical manner, and that the organisation has zero tolerance for unethical behaviour. It should include the following focal points:

1. Business values

This can include your organisation’s mission and vision and should help set the tone for how the organisation relates to its clients, partners, its own employees and the public at large.

2. Guiding principles

The principles that guide your company include customer satisfaction, financial success and profitability, improvement and growth. Your company might also follow policies of corporate responsibility, such as respect for social and environmental issues, and support of the community and/or nonprofit efforts.

3. Role of leadership

This section of the code of conduct should state that management has clearly endorsed the code and that employees can approach any manager or executive with ethical concerns or complaints.

4. Regulatory and compliance

This section should communicate the organisation’s commitment to meeting all compliance requirements, from OSHA and EPA to Sarbanes-Oxley and Dodd-Frank. This reinforces leadership’s expectation that employees must act diligently and ethically to uphold those standards, as well.

5. Employee responsibility

Every employee, from top to bottom, shares the responsibility toward upholding the ethical standard defined in the code. Contractors and volunteers are also expected to follow the standard of behaviour.  Furthermore, the code should make clear that if the unethical behaviour is detected, turning a blind eye or deciding “it’s not my problem” is unacceptable. That is a breach of the ethical code.

CRI Group can help your organisation with the finer points of drafting and implementing an ethical code of conduct. ABAC Center of Excellence includes this critical piece as a part of any robust fraud, bribery and corruption prevention program.

After the ethical code of conduct is approved by company leadership, it should be read and signed by all employees (with the signed copies kept on file by the organisation). And it should be displayed prominently in the office. Unethical behaviour, including fraud and other corruption, is everyone’s problem, and it must be prevented, detected and reduced. Staying one step ahead of any critical risk to your organisation is part of being an effective business leader.

ISO 37001:2016 Anti-Bribery Management System certification is offered under CRI Group’s ABAC® Centre of Excellence, an independent certification body established for Anti-Bribery Management System training and certification, ISO 37301 Compliance Management Systems and Risk Management System certification. The program will be tailored to your organisation’s needs and requirements. For assistance in developing and implementing a fraud prevention strategy, contact ABAC today or get a FREE QUOTE now!

Who is CRI® Group?

Based in London, CRI® Group works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening, 

In 2016, CRI® Group launched the Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC® operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI® Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC® for more on ISO Certification and training.

Filed under: Automotive, Aviation, Background Investigation, Compliance Solution, COVID-19 Insights,