Anti-Money Laundering Services: Why Do Organisations Need it?

Anti-Money Laundering Services: Why do Organizations Need it?

The Anti-Money Laundering (AML) service or check is a character and identity evaluation conducted on third-party members, such as investors, to certify that each third-party member is who they assert to be. The Anti-Money Laundering check can also be used to make certain that the investor(s) are not financing on behalf of somebody else. In most cases, such checks will be accomplished in the background set by utilizing electoral data.

Why do you need Anti-Money Laundering (AML) Services?

The objective of the anti-money laundering (AML) service is to better identify and report dubious pursuits that an investor may make; this can consist of the base infractions of money laundering to radical backings to conducting security deception and market manipulation.

As an international corporate unit comprising of subsidiary partner functions that cross numerous diverse corporate sectors (including but not limited to telecommunicationfinancial services, petrochemicals, energy production/ distribution, chemicals, fertilizers, and food), it is vital that your organization acknowledges that it is pursued by intimidating bodies seeking to gain from your market authority.

CRI™ Anti-money laundering (AML) advisory solution better aid in investigating systems and acquiring efficient solutions that reduce your organization’s risk of becoming privy to operative, contractor or external corporate and financial crimes. CRI’s extensive Anti-Corruption and Compliance network seeks to deliver the security your organization needs when producing vital baseline judgments which are crucial to its success in the trade. Download our AML Advisory brochure to find out more about our scope of services in AML.

What Challenges could You Face?

One of the major challenges in accomplishing the anti-money laundering check is corporate finance’s management and progress towards guaranteeing that active Anti-Money Laundering (AML Framework) practices and methods are in place. Repudiation to accept that the risks of not having a proper AML framework in place can lead your organisation to become explicitly subjected to:

  • corporate fraud
  • corruption
  • exploitation from the theft of money and other assets

Why is having an effective AML framework crucial?

An important aspect of functioning well as an organization is meeting stakeholder expectations and safeguarding your corporate reputation and competitive positioning. You need to comply with national, regional, and international legislative frameworks such as:

More profoundly, money that is unknowingly, inadvertently or (in the case of fraud and corruption) even consciously ‘laundered’ through the organization could at the proper time support, finance and promote international terrorism and the drugs trade.

An effective AML framework is a testament to your organization position against crime. As global corporate citizens aware of their responsibilities, any international organization must comprehensively address these concerns and implement policies, procedures, and associated risk assessment mechanisms.

What are the consequences of an absent AML framework?

To have insufficient controls and be charged with engaging in money laundering can have any of the following negative consequences:

  • Damaged corporate reputations & brand devaluation
  • Eroding employee morale
  • Potential consumer boycotts
  • Negative investor perceptions
  • Possible legal action
  • Fines and potential jail terms for directors

What are the Solutions for an Effective AML Framework?

CRI Group™ specializes in dissuading, sensing and investigating crimes against organizations. We achieve success using a global network of professionals specially trained in anti-corruption, risk management and compliance due diligence, and corporate investigations. More importantly, our technical capabilities and multi-national resources enable us to perform the following scope of work for your organization to demonstrate adequate procedures:

  • In-Depth Anti-Money Laundering Risk Assessment.
  • GAP Analysis for the scope of ISO 37301 Compliance Management System.
  • Provision of AML Framework
  • Global Sanction Screening and Third-Party Risk Management

GET A FREE QUOTE

 

Time to get ISO 37001:2016 Certified – The Process, Part 2

Shifting a light on anti-Bribery and anti-corruption methods, our sister brand ABAC™ Centre of Excellence tells us how key is ISO 37001:2016 Anti-Bribery Management System Certification is for public, private, and non-profit organisations across the globe and explains the process behind certification. At CRI™, we believe it is important as it provides a key layer against threats of bribery, corruption, fraud and other security concerns. It also sets an organisation apart from its peers as a model for ethical behaviour and compliance.

In a recent guest blog, ABAC™ Centre of Excellence discussed the first part of getting ISO 37001:2016 certified. ABAC™ covered the initial engagement and the first four steps, including the audit confirmation, pre-assessment, and stage one and two audit processes. Today our sister brand ABAC™ will discuss the rest of the certification process and the path to getting your organisation better protected and fully compliant in addition to CRI Group’s corporate due diligence services.

Step 5: Follow up Audit (optional)

If a major non-conformity is raised or remains outstanding from Stage 1, an additional visit will need to be booked. For major non-conformity raised during Stage 2, a revisit will be required within 30 days of submitting the CAP to confirm the implementation of an effective CAP.

Step 6: Awarding of Certificate

If the organisation is compliant with the standard conditions, a recommendation for certification will be made.

  • For minor non-conformities: This will not delay the certificate if an organisation has a CAP. The certificate is granted within 04 weeks from the time of CAP submission.
  • For major non-conformities, the organisation must submit and implement CAP within 180 days maximum. Once the auditor has verified the CAP, the certificate is granted within six weeks (from the time of CAP submission by the Client). However, all major non-conformities will need to be addressed before a certificate can be published.

Step 7: Continual improvement and surveillance audits

Surveillance is planned over three years and will ensure that the organisation complies with the standard.

Step 8: Re-certification Audit

The registration period is three years from the date on the certificate. After the initial registration period, renewing your Anti-Bribery Management System Certification is relatively seamless. Once the second surveillance visit has been completed, you will be sent a registration renewal/re-certification proposal detailing the process and associated costs and assessment days for the next three years. A re-certification audit will require Stage 1 and Stage 2 audit. The depth of the audit and time required would be determined as per your performance (during the certification period) and any planned changes to your system. It’s that easy. Now is the time to move forward with ISO 37001:2016 certification.

What comes next? 

For assistance in developing and implementing an Anti-Bribery Management System, go to www.abacgroup.com, contact ABAC™. today or get a FREE QUOTE!

In 2016, CRI Group™ launched Anti-Bribery Anti-Corruption (ABAC™) Center of Excellence – an independent certification body that provides education and certification services for individuals and organisations on a wide range of disciplines and ISO standards, including ISO 31000:2018 Risk Management- GuidelinesISO 37000:2021 Governance of OrganisationsISO 37002:2021 Whistleblowing Management System, ISO 37301:2021 (formerly ISO 19600) Compliance Management systemAnti-Money Laundering (AML) and ISO 37001:2016 Anti-Bribery Management Systems

 

Who is CRI Group™?

Based in London, CRI Group™ works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk ManagementEmployee Background ScreeningBusiness IntelligenceDue DiligenceCompliance Solutions and other professional Investigative Research solutions provider. We have the largest proprietary network of background-screening analysts and investigators across the Middle East and Asia. Our global presence ensures that no matter how international your operations are, we have the network needed to provide you with all you need, wherever you happen to be. CRI Group™ also holds BS 102000:2013 and BS 7858:2012 Certifications, is an HRO certified provider and partner with Oracle.

Time to get ISO 37001 Certified – The Process, Part 1

Shifting a light on anti-Bribery and anti-corruption methods, our sister brand ABAC™ Centre of Excellence tells us how key is ISO 37001:2016 Anti-Bribery Management System Certification is for public, private, and non-profit organisations across the globe and explains the process behind certification. At CRI®, we believe it is important as it provides a key layer against threats of bribery, corruption, fraud and other security concerns. It also sets an organisation apart from its peers as a model for ethical behaviour and compliance. After all, consider the benefits: Certification adds a distinct level of credibility to the organisation’s management systems and ensures that the organisation implements a viable anti-bribery management program utilising widely accepted controls and systems.

It assures management, investors, business associates, personnel and other stakeholders that the organisation is actively pursuing internationally recognised and accepted processes to prevent bribery and corruption. ISO 37001:2016 certification also protects the organisation, its assets, shareholders and directors from the effects of bribery. But what, exactly, is the process for getting ISO 37001:2016 certified by ABAC Group™? Once your organisation has submitted questionnaire information and completed the approval and contract stage, the certification cycle is ready to begin.

Step 1: Audit confirmation

An audit plan will be developed with your organisation and confirmed to the Certification’s Body Assessment Team at least three months before the organisation’s first audit.

Step 2: Pre-assessment audit (optional)

The organisation can opt to perform a pre-assessment audit to identify any possible gaps between its current management system and the standard requirements. This audit is optional and helps the organisation check its preparedness for the stage 1 and 2 assessments by identifying any major non-conformities that have not been addressed.

Step 3: Stage 1 audit

Review the results of the audit, including:

  • General observations
  • Non-conformities (major or minor, see below)

Minor non-conformities: These are not seen as serious. The organisation must complete an internal Corrective Action Plan (CAP) before Stage 2. CAP is not required to be sent to the Assessment Team at Stage 1.

Major non-conformities: These are more serious. The organisation will need to submit a CAP within ten days of receiving the audit report, with all actions scheduled to be completed before Stage 2. The CAP should be sent to the Assessment Team. The major non-conformities raised during Stage 1 will be re-assessed during Stage 2 Audit.

Step 4: Stage 2 audit

This is an on-site audit and takes place after the organisation has successfully completed Stage 1 and corrected any major non-conformities identified during the Stage 1 audit. Stage 2 confirms that the organisation’s management system is fully aligned to the standard. The evaluation is of management system implementation and its effectiveness.

Outcome: The audit report will detail the following:

  • Any positive observations
  • Opportunities for improvement – suggestions for improvement and any findings that could lead to potential non-conformities.
  • Non-conformities (Major or Minor)
  • Recommendation for Certification

Minor non-conformities: The organisation must complete an internal Corrective Action Plan (CAP) and submit this to the Assessment Team within 45 working days of receiving the audit report. The Assessment Team will review the CAP; it must detail the non-conformity, the cause, the proposed corrective action, who is responsible and the date the action will be implemented. Based on the evaluation of CAP, the recommendation for certification will be made.

For minor non-conformities, if an organisation has a corrective action procedure, this will not delay the certificate.

Major non-conformities: The organisation must complete an internal Corrective Action Plan (CAP) and submit it within 90 days (or 180 days depending on the number and risk of major non-conformities) of receiving the audit report be sent to the auditor.

What Comes Next?

Stay tuned for the second instalment in our two-part series about the ISO 37001:2016 certification process: sign up for our newsletter HERE!

In 2016, CRI Group™ launched Anti-Bribery Anti-Corruption (ABAC™) Center of Excellence – an independent certification body that provides education and certification services for individuals and organisations on a wide range of disciplines and ISO standards, including ISO 31000:2018 Risk Management- GuidelinesISO 37000:2021 Governance of OrganisationsISO 37002:2021 Whistleblowing Management System, ISO 37301:2021 (formerly ISO 19600) Compliance Management systemAnti-Money Laundering (AML) and ISO 37001:2016 Anti-Bribery Management Systems

Who is CRI Group™?

Based in London, CRI Group™ works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk ManagementEmployee Background ScreeningBusiness IntelligenceDue DiligenceCompliance Solutions and other professional Investigative Research solutions provider. We have the largest proprietary network of background-screening analysts and investigators across the Middle East and Asia. Our global presence ensures that no matter how international your operations are, we have the network needed to provide you with all you need, wherever you happen to be. CRI Group™ also holds BS 102000:2013 and BS 7858:2012 Certifications, is an HRO certified provider and partner with Oracle.

Meet Samia El Kadiri; Gifted Consultant, Author & Trainer

CRI Group™ is delighted to welcome Samia El Kadiri as an Auditor at our sister brand the Anti-Bribery Anti-Corruption (ABAC™) Center of Excellence. Samia provides audit services and expertise on existing compliance and Anti-bribery Anti-corruption management systems to assess effectiveness and vulnerabilities while ensuring compliance with Internal Standards, FCPA rules, UK Bribery Act laws, Anti-Money Laundering regulations, and all other global, regional and local regulations. For this reason, we are also delighted to announce that Ms El Kadiri will be a guest speaker on our upcoming webinar with our sister brand ABAC® titled “Building a Culture of Compliance and Trust Through ISO 37301:2021 Compliance Management Systems”.

MORE ON THE WEBINAR HERE

Widespread trust is built on a company culture of doing the right thing, where every employee contributes because they understand and believe in its importance. Don’t miss out!

Meet Samia

Samia El Kadiri Headshot

Samia El Kadiri

Consultant , Author & Trainer

6σGB |IRCA- QMS Lead Auditor | TOT

Auditor | Anti-Bribery Anti-Corruption (ABAC®) Center of Excellence

 

She brings in over eight years of progressive experience working in private and government owned entities in compliance, management, quality assurance and excellence functions. Possess keen understanding, oversight and reporting mechanisms on Financial Crimes – Anti-Money Laundering, UAE Central Bank regulations, Dubai and UAE federal government mandates. She Developed and delivered various number of workshops and awareness sessions to leaders and decision makers on “Good Corporate Governance Practices”, “Development of Strategic Plan and Effective Policies” and “Financial Ethics” (AML&CFT according to local Guidelines). She authored reports and research papers on Compliance and the evolution of CG in the MENA region.

She participated in the ESG Index; MENA wide Environment, Social and Governance (ESG) Index in cooperation with Standard & Poor’s with the support of the International Finance Corporation (IFC).

She is a Consultant at DIFC – Hawkamah Institute for Corporate Governance charged with leading entities consultancy and advisory engagements in identifying the relevant controls, processes and frameworks and recommend areas of improvements. She works closely with clients in assessment and development, advisory and succession planning across multiple industries (Dubai and Federal Government entities, Healthcare, Financial institutions including Banks, and Real Estate) and functional topics (Ethics, Strategic excellence, ESG, Clinical Governance, Regulatory Compliance, Audit & Risk , Policies & Procedures…etc.).

Prior to joining Hawkamah she was the Regulatory Compliance Officer and Chief Editor of Compliance newsletter at Wall Street Exchange, a member of Emirates Post Group where she developed systems, policies and procedures for compliance of relevant UAE laws. Prior to that she worked with the American Clinics for Psychiatry and Neurology where she focused on health care compliance of Dubai Healthcare Authority’s mandates. Prior to ACPN she worked at Roads and Transport Authority (RTA) in Dubai where she focused on government excellence, quality management, and customer happiness.

She is Graduated with a BSC in Economics. She is a Certified Train the Trainer – Institute of Leadership and Management (UK), In addition to other accreditations related to Anti-Money Laundry (AML) and Counter Financing Crimes. She is fluent in English, Arabic and French.

WATCH SAMIA AT OUR UPCOMING WEBINAR

Samia is our guest speaker at our upcoming WEBINAR “Building a Culture of Compliance and Trust – an essential part of a corporate compliance program”. Our intention with this free webinar is to be able to provide resources on corporate compliance to organisations around the globe that will aid them in expansion and an ethical working environment. Widespread trust is built on the corporate culture and understanding of making the morally correct decision and we want to aid organisations to reach a degree to which every employee contributes towards this because they understand and believe in its importance. Our Building a Culture of Compliance and Trust Through ISO 37301:2021 CMSwebinar will highlight all essential parts of a corporate compliance program.

SAVE YOUR SEAT NOW!

Our webinars, resources and other events are always designed with our clients in mind. Expect to be provided detailed insights and expert opinions to all of your questions and queries in regards to compliance adequate due diligence for third-party risk management, corporate compliance program and what it means for your organisation.

Check out some of Samia’s publications:

  • “HOW SHOULD BOARD MEMBERS OVERSEE CRISIS COMMUNICATIONS” – Thought leadership piece published on April 2020 with a comprehensive review of GCC Corporate Governance regulations on crisis communication.
  • “CORPORATE GOVERNANCE AND DATA PROTECTION DEVELOPMENTS ACROSS THE GCC” – A study report in partnership with a leading Corporate Governance software provider company, it provides an overview of recent developments in corporate governance and data protection landscape in the MENA region.
  • UAE Business Magazine, Article “The Benefits of Good Governance in Times of Crisis”
  • “COMPLIANCE FUNCTION; Reporting lines and Effectiveness” – Survey report about the role of Compliance function in the MENA region- July 2021

Employee Background Checks: A Requisite for all Businesses

Employee Background Check Concepts

Employee Background check concepts are inescapable for your organisation if you are looking to minimise risks surrounding a bad hire. The concept of an employee background check has become one of the most significant phases in the recruitment process.

The escalating figure of crime scenes and fraudulence incidents is a key justification why organisations take up this step as aside from the rising crime rates, organisations are also becoming hyperaware of their employee turnover rate, employee burnout, employee retention, etc. Employee Background Checks are a highly effective method of ensuring that organisations are recruiting the finest. What are the key concepts of conducting an employee background check and why is it substantial for corporations of all sizes and statures?

Concepts of Employee Background Check

In wake of the digital development, it is fair to say that the recruitment process has become quite demanding, and an employee needs to cross numerous phases to at the right time reach the finishing point. The Employee Background Check is quite a time-consuming concept as employers strive to have the greatest pick from the numerous candidates who have come up for the recruitment process. After the interview sessions are over, it needs some time to let the employee know about their joining since this is the time when most organisations go through the employee background check procedure. Some companies opt to perform this procedure in-house while some others hire external service providers to conduct a comprehensive check of the employee’s academic, professional, and even social presence. After the employer is gratified with the check, the employee is offered an appointment letter to join them.

CRI Group’s EmploySmart™ can be tailored into specific screening packages to meet the requirements of each specific position within your organisation. Ensure a safe work environment for all. Download our EmploySmart brochure or get a free quote.

Significance of The Employee Background Check and its Advantages

Organisations carry out such checks due to a myriad of reasons, some of these include:

1. Knowing the validity of the resume

Many candidates tend to embellish their experiences on their resumes and make use of such methods to obtain their desired job through such falsified recognitions. If a candidate does obtain their role through this method, they will not be able to handle the position well making this a complicated situation for the employee and the employer concurrently. Therefore, it is incredibly valuable to know what the candidate has falsified on their resume. An appropriate and comprehensive verification of the employee’s background can unveil all such truths in front of the employer. After knowing the true details, employers can make a judgment that will be more beneficial for the organisation as well as the employee.

2. Knowing about the nature of the candidate

Like the falsified details on the resume, candidates also tend to wear somewhat of the false mask of confidence on their faces while attending the interview. It is tricky to distinguish and judge a person in a conversation of a few minutes. If it is a career profile where the pressure is going to be intense, it is crucial to know whether the candidate can handle such pressure or not. Knowing the authentic behaviour and personality aids in evading bad hires. The experts of the verification check get you an appropriate note about the personality, nature, and behaviour of the candidate to determine whether they can match up to the demands of the needed position.

3. Knowing experiences at the past offices

Candidates produce diplomatic answers about their past experiences when a question is thrown at them about said experiences. Many of the experts suggest cracking this during the interview session as the employers must verify the factual scenario at the previous offices. It may turn out that the candidate had a terrible record at the last office, or it may also happen that the employer had fired the candidate from the last job. There can be a few things that can happen. You can of course offer the candidate a chance to clarify, but it is imperative to get the verification done before this.

4. Knowing criminal experience and legal support

Having an employee background check is also about having an awareness of any criminal experience a candidate could have potentially had. It can be unsafe for the organisation to hire an employee with such a background and place them amid unharmful employees. It is just as vital to know whether the candidate has legal support or not. If yes, it should be checked whether the candidate has misused the support in the past or not. If the candidate has misused the support in the form of a lawsuit or so in the past, they do the same for your organisation too.

What to include in Employee Background Check?

  • History of employment: Verify the reference given by the candidate as it confirms their behavioural and working patterns with previous employers. This way, their overall performance, commitment, and proclivities can be assessed.
  • Criminal background: It is essential to determine that the candidate does not have a criminal history. It is inevitable, principally for the profiles related to defence or trust.
  • Credit history: Knowing the credit rating of your candidate is also important as this reveals the integrity of the employees. This can be done by completing an employee background check for the credit history.
  • Terror Watch List: For the businesses running in countries like the USA, checking the Terror Watch List of their candidates is especially critical. Again, it is a necessity for security positions.
  • Checking Social Security: Organisations should check the legitimacy of Social Security Number. Proper background checks of distinct names, aliases, date of birth, history of addresses, etc. This way, it can be found out if the candidate has been living with other names or anything else questionable which is not accessible in criminal records.
  • Checking public/court records: This is done to check if the candidate has been or is implicated in any sort of court proceedings or not. This is incredibly significant in picking the right candidate that can offer comprehensive devotion to the job profile you are proposing to extend.
  • Reference checks: There are two types of reference Employee Background Checks: personal and employment. Both facilitate in confirming the integrity, reliability, steadiness, and personality of the employee.
  • Checking Sex Offender Registry: Sex Offender Registry check must be an integral part of the employee background check as you must not endanger other employees or consumers, especially in roles surrounding children and other susceptible individuals, by hiring a sexual predator.
  • Education check: This sort of background check is carried out to determine the authenticity of the various credentials provided by the candidate you are planning to recruit.
  • Driving Records: If your candidate is required to drive a company-owned vehicle, then checking driving records and license is essential for you.
  • Record of Military Service: You need to pay attention to some key measures while hiring a candidate with a military service record. That is why checking the military service records of your candidates is also important.
  • Compensation Record: Checking the candidate’s compensation claims from past employers is also significant before hiring an employee.

Measures to take for Employee Background Checks

Having a proper flow chart of different steps

  • Organisations must have a consistent policy for the employee background check, and for this, responsible authorities should know about the different steps they need to follow for background verification. A flow chart of all the steps is often used for this measure as they are easily comprehensible across the board. 

Legal Assistance to understand the role of Local Laws in Employee Background Check

  • An assortment of confidential data is involved in the background check which is why taking legal Assistance will help avoid many sorts of legal complications.

Opt for FCRA Compliant Employee Background Check

  • As FCRA (Fair Credit Reporting Act) determine what you can and cannot do in your employee background check proceedings and govern all the background checks, organisations must ensure that they follow FCRA’s rules and regulation.

In case of any mistake or misunderstanding, allow a candidate to Clear Up that.

  • There are instances in which the data an employer has received can be incorrect; it is important to offer the chance to a candidate to rectify those misunderstandings as it determines a prudent and productive practice.

Being aware of the difference b/w Investigative Consumer Reports and Reference Checks

  • If you reject a candidate because of the Investigative Consumer Report, the candidate needs to be provided with a copy of that report. However, if the information was obtained via reference check, such as asking past employers, you need not give such details to the candidate.

Academic references Checking

  • Academic circles and experience are easily exaggerated and manipulated areas in recruitment and can be problematic and at times difficult to identify. Therefore, the prospective employer ought to start their reference check from this point. Undeniably, there is no need whatsoever to employ an applicant who is not honest regarding their academic qualification as they would not be productive and are likely to have ill motives. Consequently, they could be a liability to your organisation. This kind of candidate cannot be trusted at all, and therefore there is no need why the employer should. However, it would be to think such an individual for their interest in your organisation, but never should one hire them.

Call current and former supervisors.

  • At times, it can prove difficult to extract any information about an applicant due to some legal handles and the fear of being sued for character defamation or even libel where the information which would be given might be negative, especially from either the current or former employers of your prospective candidate. However, it is worthwhile to find out as the data available at your disposal allows for sound and appropriate decisions to be made for the benefit of both the organisation and other members of staff.

Checking one’s network of associates

  • Undeniably, for those who have been in the personnel management department, it is most likely that they have a vibrant network of associates, friend colleagues and family members who would be willing to share information about a prospective employee. It is therefore essential and significant to gather information from them. It would not be surprising that one might even get more information from such people.

Browse online sites

  • With the use of the internet and using several search engines or numerous social sites, one is likely to find crucial and critical information that would go a long way in facilitating the employer get sufficient data about either the applicant or the organisation that they have worked or claim to have worked for.
  • This information might range from positive to negative, thereby allowing the employer to make the right decision. Undoubtedly, the internet is a sure and free source of data that any prospective employer should employ in doing a background check.

In conducting employee background checks, there are some golden rules that one needs to observe to avoid any legal and challenges in executing the duties of their human resources and making the background check most effective and efficient. These do and don’ts include but are not limited to:

Do’s

  • Having a consistent background checks policy and detailing how the policy should be used.
  • Getting legal advice on how to conduct background checks under the local legal framework.
  • Giving the applicants a chance to clear up any faults or misconstructions appearing on their documentations and during the interview process is inconsistent with your background check.
  • Employing the services of background check services compliant with the legal frameworks of your region
  • Understanding the difference between background checks vis-à-vis investigative consumer reports.

Don’ts

  • Avoid making decisions on using the background checks on an applicant-by-applicant basis.
  • Avoid the assumption that some parts of the background check process routine
  • Avoid making decisions without letting the applicant a chance to respond.
  • Avoid assuming that any companies seeking information about an individual are legally compliant.
  • Avoid requesting information about the character or personal and private of an individual while verifying the historical employment facts.

Fundamentally, employee background checks are not too viewed superficially as they play an important role in ensuring that neither the employer nor the organisation encounter loss or legal handles in exercising their mandate and role. Consequently, by attracting competency and matching the skills with the tasks, employers ensure that their organisations remain profitable and are sustainably produced and competitive in their respective fields.

Finally, the most critical information that these background checks elicit are vital and are diversified in range and scope depending on the tasks to be performed and are as follows:

Criminal Records

Indeed, background checks are instrumental in providing information about the individual, which would inevitably be vital, especially where the candidate is required to handle or maintain important levels of trust, confidentiality, and security. Consequently, this kind and level of reliability would not be forthcoming from a criminal record person.

Social Security Validation

Apart from and the individual being tax compliant, background checks guarantee the legitimacy of the applicant’s social security number. The Social Security Validation facilitates in and discovering of all the names, as well as aliases and any variations thereof, dates of birth in addition to the history addresses associated with the applicant.

This limits the incidents of the employer contracting an individual who has a criminal record or does not have any legal status of seeking and getting employed in that country or region. Further still, it provided information on whether the candidate has ever lived in unrevealed places or under other pseudonyms that could divulge unlawful records that wouldn’t have otherwise been established.

Address History

Address History background checks help in tracing prior addresses where the applicant could have resided and facilitated the establishment of where else the applicant could have lived, making it easier in the verification of their true identity and may form the basis of further interview questions as well as getting to know the candidate better.

Terror Watch List

With the prevalent threat of terrorism and the global danger posed by terrorists, a thorough background check is more likely to establish if your potential employee could have been involved in terror acts or whether they are in any country or even states terror watch list. Although this was explicitly imperative for security jobs, it has been deemed necessary in almost every profession due to the changing dynamics and tactics employed by terrorists and other criminal syndicates in the twenty-first century.

Sex Offender and human trafficking Registry Check

With the ever-increasing levels of human trafficking, child pornography, organ harvesting, paedophilia and sexually related abuse globally, it is paramount that for positions dealing with minors, the marginalised and the most vulnerable through background checks are a necessity rather than just an option to ascertain the credibility of the applicant to avert and reduce the prevalence of the vices above.

Necessities for conducting Employee Background Checks

  • You need to have your full name, date of birth, and Social Security Number for doing a background check.
  • If you want to check credit reports, military records, and school transcripts, you need the candidate’s permission.
  • If you hire an outside company to do the background check, you need to take the candidate’s permission.
  • If the candidate denies the permission, you will be entitled to take the candidate out of consideration for that job profile.

Are There Any Disadvantages?

One of the major disadvantages that you can see is the wastage of time and money. The organisation invests large sums of money in conducting such investigations, and most of the time, the person turns out to be a genuine one and with the time it takes to conduct these checks, the candidate may think that the organisation is not interested and hence, they may join some other organisation in this period.

Judging a candidate on their background deeds may not always prove to be fruitful either. It may happen that a candidate got trapped in a criminal, offence and in an actual sense, they are a gem of a person. But when you do not know the candidate personally, you will focus on the verification reports and let a genuine person go.

Opting for an employee background check depends on the type of your business and the kind of job profile you are going to hire that candidate. Getting an employee background check has become eminent today because there have been so many instances each day.  They are getting the verification done to get the employer the satisfaction that they are selecting a genuine person and will not hamper the reputation and environment of the company.

If there is still any uncertainty in your mind about conducting employee background checks, why not reach out to us? CRI Group has experts across the globe from all backgrounds who are trained to provide you with specialised, expert advice fit for your business needs. Get in touch today!

GET IN TOUCH

What is Business Intelligence? Investigative Operations vs Intelligence Operations

What is Business Intelligence?

What is Business Intelligence? How are Investigative operations are compared to Intelligence operations? Business Intelligence (BI) is a phrase coined for the analytical procedures an organisation commences. Business Intelligence is known to be a successful method of conducting market research as it merges data derivative from the peripheral environment (i.e., market and industry) in which an organisation operates with data from the core environment of the organisation as fiscal and controls data. When combined, this data can deliver a complete image of any business decisions a firm can make as a means of benefit to themselves; this ranges from operational decisions such as product positioning to strategic decisions such as pricing.

What is Counted as Business Intelligence Solutions?

Business Intelligence (BI) Solutions can take on numerous forms and structures in today’s complex corporate environment. BI solution investigates everything from assets to the exterior disputes facing an organisation. It can also appraise an organisation’s employees to ensure that the organisation’s integrity, reputation, and bottom-line profits are safeguarded from any malice and illicit activities.

CRI Group™ Takes Two Approaches to BI Solutions:

  • Intelligence operations (via market research and analysis): we focus on researching the future and potential growth of your business – i.e. determine the commercial viability and potential for success in the market, analyse consumer behaviour and business trends in that market, etc.
  • Investigative operations (via commercial investigations): we focus on the status of your business – i.e. location of assets, financial information, identification of unmet needs of any market, gauge brand awareness and identity in the market, etc.)

Why not check out our BI solutions brochure to know more about our approach.

What are Intelligence Operations?

Investigation and Evaluation facilities are constructed to aid clients during the business intelligence procedure. Intelligence operations are highly acclaimed for organisations of all industries as the service aids the preliminary phases of detecting the necessary components for a suitable corporate policy to the closing phases of execution. At CRI Group™ we know that data is your greatest advantage when performing enterprise on several degrees.

Our market research will collect the statistics mandatory to make significant corporate decisions; everything varying from registering into other markets or industries to associating or partnering with other organisations (i.e., Mergers and Acquisitions) is covered in our BI Solutions. CRI Group™ is proficient in understanding and transmitting this data in a way that allows you to implement it into your corporate development; our experts are trained to the highest degree and understand how to get the proper data promptly.

CRI™’s methodology is to assist the organisation in tracing corporate movements and market changes which in turn, will aid in steering them through the practice of successfully conveying their brand in the larger market to then be able to market their goods and services accordingly. With representatives in nations across the globe, CRI Group™ is distinctively situated to assist you in traversing cultural and regulatory environments to maximise your market potential in the regions you seek to trade.

Gaining insight into how your brand reputation affects potential buyers and understanding what motivates the market to purchase will enable you to establish effective marketing programs that impact your audiences and build brand loyalty among buyers.

What are Investigative Operations?

It is no secret that every industry has its issues. Some matters, however, such as Employee Theft, Company Fraud, rivalry, continuous malingering, or Industrial Espionage, can start on a moderately trivial scale but as time advances, the culprit becomes brasher in their endeavours (typically due to an absence of discovery) instigating the situation to develop out of control and start being detrimental your commerce.

As an organisation, you have every right to be involved with the internal activities of your firm hence, carrying out commercial investigations on your employees as a means of curtailing threats is not out of the question. Our team of experts can support you to do this in a manner that is equally as ethical as it is providing as it delivers you the data you so greatly pursue.

Commercial investigations can be achieved for any form of an enterprise including commercial, industrial, legal, and public sector corporations. Our team hail from a range of diverse backgrounds, including military and fraud investigators which is why CRI Group™ is so adaptable in its approach to help you with intelligence and investigative operations.

A little bit overwhelmed and wanting to learn more? Get in touch and let us know how we can help!

GET IN TOUCH

 

Who is CRI Group™?

Based in London, CRI Group™ works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk ManagementEmployee Background Screening, Business Intelligence, Due Diligence and other professional Investigative Research solutions provider. We have the largest proprietary network of background-screening analysts and investigators across the Middle East and Asia. Our global presence ensures that no matter how international your operations are we have the network needed to provide you with all you need, wherever you happen to be. CRI Group™ also holds BS 102000:2013 and BS 7858:2012 Certifications, is an HRO certified provider and partner with Oracle.

Risk Management New Approach. All Explained in this Free Playbook!

Risk Management New Approach. All Explained in this Free Playbook!

Risk management new approach. How do you manage risk? Managing risk effectively is essential to ensure businesses succeed and thrive in an environment of constant uncertainty.  All types and sizes of organisations face internal and external factors that directly impact whether an organisation can achieve their objectives or not. CRI Group™ can help you simplify risk management through a wide range of solutions that can be fully customised, regardless of the size, nature, or location of a business.

Risk management new approach. All explained in this free playbook.

An organization can implement risk management across the entire company, and it can do so at any time. Risk management plans, such as ISO 37001 Audit Process, can offer several benefits that make them a worthwhile endeavor for every business. For example, risk management plans help companies to identify the potential risks they may face. Being aware of these risks allows businesses to make plans to avoid specific risks or deal with them when they arise. There are many benefits of implementing a risk management strategy:

  • Can be used by organizations to compare their risk management practices with an internationally recognized benchmark, providing sound principles for effective management and corporate governance.
  • Leads to more satisfied customers is a clear indicator to your customers and other stakeholders that as an organization, you are committed to managing risks in every part of your business.
  • Increases public confidence in the organization as it demonstrates your management capabilities in protecting your business from internal and external threats.
  • Gives you a healthier bottom line.
  • Makes for consistent and efficient operations.
  • In competitive bidding for commercial tenders, it will enhance your company’s reputation and give you a competitive advantage.

This playbook covers everything you need to know about Risk Management. Here’s a quick rundown of the playbook structure:

  • What is Risk?

  • What is Risk management?

  • How is risk management evolving to tackle modern challenges?

  • Business Risks Every Organization Should Plan For

  • Principles of Risk Management

  • How Risk Management and Due Diligence Interlock?

  • and more

DOWNLOAD THE EBOOK FOR FREE

In a risk environment that continues to grow more hazardous and expensive, companies need to consider implementing strategic risk resources throughout their organization as a means of developing buoyancy and gaining a competitive edge in the market.

If you’re still unsure, why not arrange a free consultation with one of our risk management experts today? CRI Group™ has worked with clients from all over the globe and ensures that each client receives personalized advice in accordance with their needs.

CRI offers a wide variety of risk management solutions to meet the needs of different companies. Please contact us today to learn more about the importance of a risk management plan, general risk assessment or to know about our solutions.

Who is CRI Group™?

Based in London, CRI Group™ works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening, Business IntelligenceDue Diligence, Compliance Solutions and other professional Investigative Research solutions provider. We have the largest proprietary network of background-screening analysts and investigators across the Middle East and Asia. Our global presence ensures that no matter how international your operations are we have the network needed to provide you with all you need, wherever you happen to be. In addition, CRI Group™ also holds BS 102000:2013 and BS 7858:2012 Certifications, is an HRO certified provider and partner with Oracle.

 

Risk Assessment Breakdown: Identification, Analysis, and Evaluation

Risk management is a full-time, ongoing endeavour for organisations in today’s business world, and it poses constant challenges. Unfortunately, fraud, bribery and corruption are major factors affecting businesses and agencies of all sizes and industries. Being proactive against these risks can mean the difference between success and ruin. Whatever your reasons or motivations might be, if your organisation’s objective is to have an effective risk assessment management strategy in place. This article discusses the importance of Risk Assessment. There are two important building blocks that form the core of risk management:

  • Risk assessment
  • Risk treatment

Each of these stages can stand on their own – in this article we will go into detail about best practices for identifying risks, how to analyse them in terms of probability and severity, and how they can be evaluated in terms of the company’s risk appetite.

What is Risk Assessment?

Risk assessment is the overall process of identification, analysis and evaluation of any given risk. It can be a systematic examination of a task, job or process that a risk professional carries out at work for the purpose of identifying significant hazards. For example, the risk of someone being harmed and deciding what further control measures to take to reduce the risk to an acceptable level. The process will vary between organisations, but it should start with identification of hazards, analysis of who and what might be harmed, evaluation of the risk, documentation of the risks, taking action and review. Your organisation should conduct a risk assessment systematically, interactively and collaboratively, drawing on the knowledge and views of stakeholders. It should use the best available information, supplemented by a further inquiry as necessary.

Risk assessment breaks down into:

  • Step 1: Identification
  • Step 2: Analysis
  • Step 3: Evaluation

Business Intelligence (BI) Solutions can help during this stage. BI take many shapes and forms in today’s complex business environment. Budgets are stretched and the challenges facing a business and its employees can sometimes lead to issues that start off small, but then lead to wider spread problems which can affect the very fabric of your organisation and damage both your credibility, reputation and bottom line profits. CRI Group™ takes two approaches to BI solutions:

  • Intelligence operations (via market research and analysis): we focus on researching the future and potential growth of your business – i.e. determine the commercial viability and potential for success in the market, analyse consumer behaviour and business trends in that market, etc.
  • Investigative operations (via commercial investigations): we focus on the current status of your business – i.e. location of assets, financial information, identification of unmet needs of any market, gauge brand awareness and identity in the market, etc.)

CHECK OUT OUR BI SOLUTIONS  or  DOWNLOAD BROCHURE

 

Risk Identification

The purpose of risk identification is to find, recognise and describe risks that might help or prevent an organisation achieving its objectives. Relevant, appropriate and up-to-date information is important in identifying risks. The organisation can use a range of techniques for identifying uncertainties that may affect one or more objectives. The following factors, and the relationship between these factors, should be considered:

  • Tangible and intangible sources of risk;
  • Causes and events;
  • Threats and opportunities;
  • Vulnerabilities and capabilities;
  • Changes in the external and internal context;
  • Indicators of emerging risks;
  • The nature and value of assets and resources;
  • Consequences and their impact on objectives;
  • Limitations of knowledge and reliability of information;
  • Time-related factors;
  • Biases, assumptions and beliefs of those involved.

Your organisation should identify risks, whether or not your sources are under your control. Consideration should be given that there may be more than one type of outcome, which may result in a variety of tangible or intangible consequences.

Risk Analysis

Risk analysis allows you to understand the nature of risk, its characteristics and level. Because an event can have multiple causes and consequences and can affect multiple objectives a risk analysis should involve a detailed consideration of uncertainties such as risk sources, consequences, likelihood, events, scenarios, controls and their effectiveness.

Risk analysis can be undertaken with varying degrees of detail and complexity, depending on the purpose of the analysis, the availability and reliability of the information, and the resources available. Analysis techniques can be qualitative, quantitative or a combination of both, depending on the circumstances and intended use. Risk analysis should consider factors such as:

  • The likelihood of events and consequences;
  • The nature and magnitude of consequences;
  • Complexity and connectivity;
  • Time-related factors and volatility;
  • The effectiveness of existing controls;
  • Sensitivity and confidence levels.

A risk analysis is likely to be influenced by a wide range of variables, from any divergence of opinions, biases to perceptions of risk, from judgements, quality of the information used to the assumptions and exclusions made and any limitations of the techniques and how they are executed. These influences should be considered any risk analysis, documented and communicated to any decision-makers involved in the process.

It is important to remember that any highly uncertain event can be difficult to quantify, and this is an issue. If you find yourself in such a situation, using a combination of techniques generally provides greater insight. Risk analysis provides input to risk evaluation, to decisions on whether risk needs to be treated and how, and on the most appropriate risk treatment strategy and methods. The results provide insight for decisions, where choices are being made, and the options involve different types and levels of risk.

Risk Evaluation

Risk evaluation can support your decisions. Risk evaluation involves comparing the results of the risk analysis with the established risk criteria to determine where additional action is required. This can lead to a decision to:

  • Do nothing further;
  • Consider risk treatment options;
  • Undertake further analysis to better understand the risk;
  • Maintain existing controls;
  • Reconsider objectives.

Any decisions should take into account the wider context and the actual and perceived consequences to external and internal stakeholders. The outcome of risk evaluation should be recorded, communicated and then validated at appropriate levels of the organisation.

Who should do Risk Assessments?

Well, by law, every employer must conduct risk assessments. Risk assessments should always be carried out by a professional who is familiar to risk, a person who is experienced and competent to do so.  Competence can be expressed as a combination of knowledge, awareness, training, and experience. Remember competence does not mean you have to know everything about everything, competence also means knowing when you know enough or when you should call in further expert help.

But we all like to think that all of our employees will be trustworthy, but this is not always the case. There have been many instances in which an employee has been dishonest about their job history, qualifications or even criminal history. A dishonest employee could be unqualified for the position, possibly endangering others on the job. Or they might be a fraud risk, willing to bend the truth in other ways in order to enrich or advance themselves on your dime. No organisation can afford to have employees or staff who aren’t what they claim to be. Even a seemingly innocent embellishment can indicate more background problems under the surface, and the potential for future problems down the road so remember, trust your employees but, verify them too. 

CHECK OUT OUR EMPLOYEE BACKGROUND SCREENING SOLUTIONS  or  DOWNLOAD BROCHURE

Risk Assessment and ISO 31000 Certification with ABAC™

While the team at CRI® do not deliver any training or certification on ISO 31000, our partner ABAC™ Center of Excellence do. ISO 31000 can provide the principles, framework and a process for managing risk. ISO 31000 is not a certifiable standard; the standard is a set of guidelines which provide guidance for internal or external audit programmes. However we recommend taking ISO 31000 Awareness training, this will enable you to fully understand Risk Management activities and mitigate risk. 

ISO 31000 was developed by hundreds of experts in risk mitigation, from thirty countries. This international effort produced a standard that is worldwide and represents best practices and leading operations for risk management. Organisations can trust that they are following a tested, robust standard to increase success. The standard converts risk management into a set of “friendly” and actionable – and straightforward to implement – guidelines, regardless of the size, nature, or location of a business. 

The training helps establish an ethical culture by educating your personnel on the following:

  • What constitutes fraud, corruption, and bribery, and why these are so damaging to business
  • How to identify red flags of fraud, corruption, and bribery
  • The process for reporting fraudulent and unethical acts
  • The organization’s zero-tolerance attitude toward unethical behaviour and willingness to terminate employees for breaches, and prosecute unethical acts
  • The serious ramifications for committing fraud or bribery, the legal consequences, and the negative impact on one’s career

The ISO certifications helps us at ABAC™ to provide appropriate anti-bribery training to personnel across various industries. This standard helps to assess bribery risks, perform the appropriate due diligence required for your business and to take reasonable and proportionate steps to ensure that controlled organizations and business associates have implemented appropriate anti-bribery controls.

> Find out more about ISO 31000 Risk Management and other standards now!

Other Solutions

While CRI™ may not offer the ISO certification, we do offer other services. We specialise in solutions regarding compliance, working as trusted partners to businesses and institutions across the globe. Our experts work with energy, insight and care to ensure we provide a positive experience to everyone involved – clients, reference providers and candidates. CRI’s unique identity and vision evolved from our fundamental desire to support our clients and their candidates, thus creating the DueDiligence360™.

The DueDiligence360TM reports to help organisations comply with anti-money launderinganti-bribery, and anti-corruption regulations. This service also proves beneficial ahead of a merger, acquisition, or joint venture as it can be used for a third-party risk assessment, onboarding decision-making, and identifying beneficial ownership structures. Identifying key risk issues clearly and concisely helps enhance your knowledge and understanding of the customer, supplier, and third-party risk, helping you avoid those involved with financial crime.

Why not consider our background investigative solutions? Employee Background Checks can aid in reducing the risk of hiring an employee who does not live up to their supposed skill set and could cause irrevocable damage. Firms spend years, thousands, even millions to brand their products and services – it only takes one bad hire to cause loss of capital and reputation. It can go as far as bringing a business to fail – especially if the employee holds malice towards the organisation. EmploySmart™ is CRI’s own solution aiming to expose vulnerabilities and threats within your organisation. Much like the ISO certification, our EmploySmart™ is a risk management measure which can be used to significantly reduce business and financial crime, fraud and malpractice within your workplace.

Our solutions are also certified by the British Standard Institute BSI for the scope of BS 7858:2019 Screening of individuals working in a secure environment, Code of practice (the only BS 7858 certified background screening services provider in the UAE and across the Middle East); and BS 102000:2018 Code of practice for the provision of investigative services.

Another risk management solution to consider from CRI® is our Third-Party Risk Management solution (TPRM),  also known as 3PRM™. In wake of the global pandemic, the 3PRM™ was developed in a bid to aid organisations to accurately determine the legal compliance, financial viability, and integrity levels of external parties, vendors, and customers who seek to be affiliated with and represent the business.

The 3PRM-Certified™ program consists of gap analysis and investigative due diligence on the targeted above parties.  This highly thorough program reveals anti-corruption, compliance and risk management discrepancies associated with the international regulatory framework helping your business to flourish at any scale. Find out more about CRI Group’s Solutions here.

If you’re unsure of what solution may be best for you and your business, how about connecting with one of our experts for a free consultation? Receive tailored advice from the top analysts and investigators across the globe.

CONTACT US

About CRI Group™

Based in London, CRI™ works with companies across the Americas, Europe, Africa, Middle East and Asia-Pacific as a one-stop international Risk Management, Employee Background Screening, Business IntelligenceDue Diligence, Compliance Solutions and other professional Investigative Research solutions provider. We have the largest proprietary network of background-screening analysts and investigators across the Middle East and Asia. Our global presence ensures that no matter how international your operations are we have the network needed to provide you with all you need, wherever you happen to be. CRI™ also holds BS 102000:2013 and BS 7858:2012 Certifications, is an HRO certified provider and partner with Oracle.

In 2016, CRI™ launched Anti-Bribery Anti-Corruption (ABAC™) Center of Excellence – an independent certification body established for ISO 37001:2016 Anti-Bribery Management Systems, ISO 37301 Compliance Management Systems and ISO 31000:2018 Risk Management, providing training and certification. ABAC™ operates through its global network of certified ethics and compliance professionals, qualified auditors and other certified professionals. As a result, CRI® Group’s global team of certified fraud examiners work as a discreet white-labelled supplier to some of the world’s largest organisations. Contact ABAC™ for more on ISO Certification and training.

WEBINAR | Breaking Down The ISO 37001 Audit Process

There is no “one-size-fits-all” method to the ISO 37001 Audit Process to achieve the anti-bribery management systems certification

There’s been much discussion surrounding ISO 37001:2016 Anti-Bribery Management Systems and the ways that attaining certification to the standard can enhance an organisation’s existing anti-corruption compliance program.

The ISO 37001:2016 standard specifies a series of measures and controls to help organisations prevent, detect and address bribery.  These measures include adopting an anti-bribery policy, appointing an individual to oversee anti-bribery compliance, training, risk assessments and due diligence on projects and business associates, implementing financial and commercial controls, and instituting reporting, investigation and monitoring procedures.

CRI Group’s ABAC™ will be hosting a paid webinar on the 30th of September exploring the Pitfalls Most Organisations Often Commit – the importance of implementing Anti-Bribery Management System (ABMS). Being a part of the solution means being able to share our expert knowledge on what would be best for your organisation.

Registration Expired

Our webinar will have a rundown of the following:

  • What are the core Bribery and Corruption Risks for Financial Institution?
  • How to protect financial institutions and corporations from bribery and corruption risk
  • Reparations from bribery that could affect the businesses, clients, and employees
  • Successful regulations to mitigate risk for bribery and corruption.
  • What can be done if bribery is detected?
  • Internationally recognised solutions laid forth by ISO 37001: Anti-Bribery Management System that gives businesses effective controls to mitigate risk
  • Components of risk management at a financial institution

Certification of compliance with the standard is based on an impartial, independent third-party review, assessment and audit of the organisation’s anti-bribery management system and the versatility, effectiveness and proactive nature of said system.

Registration Expired

The compliance audit itself has too often been referred to as a “one-size-fits-all” or “check-the-box” subjective process, which couldn’t be further from the truth.  Proper certification to the standard requires a substantial amount of preparation and self-assessment beforehand; a highly involved review, interview and audit process (often involving a sampling of affiliated or regional offices); and an evaluation and monitoring phase which is annually conducted over the three-year certification cycle.

Let’s take a brief look at the audit process and examine why large multi-national companies such as Walmart, Microsoft, Alstom and a host of others have weighed the costs and benefits, and subsequently committed to attaining ISO 37001:2016 certification.

An Evidence-Based Review; A Risk-Based Approach

The ABMS audit is a diligent approach that links auditing activity to an organisation’s overall risk management framework, providing assurance to top management that risk management processes are effectively addressing all bribery risks throughout the organisation and its operations.

It should be noted that the certification audit isn’t solely structured on a review of paper-based controls.  As you’ll read below, the process assesses the organisation’s overarching stance on anti-bribery and how that stance is conveyed — tangibly and intangibly — from the board of directors right down to lower-level staff members.

Employing interviews, policy reviews, sampling, due diligence and testing of methods and techniques, the audit will produce sufficient evidence of a sound anti-bribery management system, while spotlighting specific areas of risk that demand attention and subsequent improvement to adhere to the standard.

Certified Auditors; ISO 37001 Anti-Bribery Experts

First and foremost, ISO 37001:2016 auditors must be specifically certified and credentialed in order to lead and conduct such audits.  Auditors are guided by the requirements of ISO 17021-9 to conduct an ABMS assessment.  To attain this status, auditors must undergo intensive training to fully comprehend the concepts and principles behind the various ISO management systems compliance, and the corresponding specifications and auditing techniques associated with those ISO guidelines.  From that training, auditors will gain the necessary knowledge and skills to effectively plan and perform related audits.

Further — and just as vital — auditing professionals must possess considerable experience in the areas of anti-bribery and anti-corruption, and have deep-seated knowledge of the industry sectors and the respective geographic regions (with a familiarity of the legal jurisdictions) served by the organisation being certified.

And finally, the ISO 37001:2016 auditor must be qualified to serve as a helpful, non-confrontational advocate during the entire audit process, expertly guiding the organisation through the process with the shared goal of achieving outcomes that will ultimately fortify the organisation’s commitment to battling instances of bribery in the global marketplace.

The ISO 37001 Audit Process

The process, which adheres closely to ISO 19011 requirements, begins well in advance of the on-site visit, with the auditor conducting a thorough analysis of news, social media and other public domain information pertaining to the organisation.  This outside review oftentimes helps the auditor determine the organisation’s perceived “culture of compliance” prior to initiating the audit.

The audit process itself is a critical assessment of a number of crucial elements that are required by the ISO 37001:2016 standard, and a determination of how the overall policy is represented by the various roles and responsibilities throughout the organisation.  The process entails:

  • A review of the organisation’s anti-bribery policies, procedures and controls;
  • An assessment of the organisation’s plan for communicating its polices to all employees worldwide;
  • In-depth interviews with compliance personnel, leadership, management, and legal, finance, procurement, human resource and communications staff members to assess familiarity with the policies and comprehension levels for identifying and responding to red flag events;
  • A review of all procedures and instructors involved with the organisation’s anti-bribery training;
  • Performing risk assessments specific to particular projects, industries, regions, jurisdictions and third-parties associated with the organisation;
  • Conducting due diligence on third-party partners (by region);
  • Assessment of monitoring, reporting and investigation procedures as related to anti-bribery events;
  • Bench-marking the organisation’s overall commitment to its anti-bribery policy and management systems;
  • Assessment of the organisation’s financial controls to detect and prevent incidences of bribery;
  • Review of all corrective actions to the policy following a bribery investigation;
  • Confirmation of the organisation’s attempt at continuous improvement of the anti-bribery management system.

And throughout the various processes of observation, document review, sampling, interviews, technical verification and evaluation, the audit team is constantly meeting and communicating through the proper channels to assist the organisation in identifying risks and improving its processes and procedures.

The audit process can take weeks or months to complete, and needless to say, this process varies widely between organisations, industry sectors and geographic regions.

 

Reporting & Documentation

Post-audit, the team convenes an oversight board comprised of anti-bribery experts to review the audit reports and findings, and makes recommendations to both the organisation and the certification committee.

The ensuing documentation covers a host of topics, including risk areas (by project, personnel group, and geographic region), training recommendations, investigative techniques, reporting processes, and other areas of improvement.

 

Follow-Up Surveillance Audits to Ensure Continuous Improvement

The certification process doesn’t end after the initial audit phase. Certification to the standard requires verification of continuous improvement and confirmation of how outcomes are implemented, documented, monitored and assessed over time.  To achieve this, the audit team will conduct annual surveillance audits of the organisation’s anti-bribery system over the three-year certification cycle.  Surveillance audits verify the organisation’s continued adherence to the standard, evaluate any prescribed corrective action plans, and review what the organisation is doing to improve its anti-bribery management systems.

Certification in ISO 37001:2016 symbolises an organisation’s unrelenting commitment to fight corruption and pursue best practices in an ongoing quest for compliance to the widely-accepted anti-bribery standards.  And the in-depth process involved in achieving certification to the standard — together with the counsel, risk assessment, and improvement recommendations that result from the audit — can make the certification process well worth the investment.

This paid webinar will be running from the following times on Thursday the 30th of September;

  • 08:00 to 10:00 GMT
  • 15:00 to 17:00 MYT
  • 12:00 to 14:00 GST

Your turnout with come with a certificate of Attendance (COA) as well as a complimentary webinar ABMS Awareness for 2 Pax per company. While you’re there, why not attain a Continuing Professional Development (CPD) certificate and stay on top of your industry?

Register your place for this webinar here and find out how to tackle the issue of bribery and corruption in your workplace before it has time to manifest itself into a greater issue. Finance is the greatest asset to the economy after all.

Complete Registration (Expired Now)

Why Financial Services Firms Need ISO 37001 ABMS?

When Société Générale, a global financial services institution based in France, agreed to pay a combined total penalty of more than $860 million for an alleged bribery and corruption scheme, it served as a warning shot to financial firms worldwide that a culture of enforcement has arrived. Société Générale was accused of paying bribes to officials in Libya and committing violations in manipulating the London InterBank Offered Rate (LIBOR), one of the world’s leading benchmark interest rates. Together with other regulatory penalties faced by the financial services giant, the total amount to be paid exceeds $1 billion. (The United States Department of Justice, 2018)

Bribery and corruption often go together with money laundering – and, as such, the financial sector faces new Anti-Money Laundering (AML) rules and legislation that is strict and increasingly enforced. Remaining in compliance through implementing proper prevention controls is a must. Failing to do so can mean a loss of business, trust and reputation: Banking giant Citibank was fined $70 million in the US for failing to address shortcomings in its anti-money laundering policies. We at CRI intend on being apart of the solution. Therefore, CRI Group’s ABAC™ will be hosting a webinar on the 30th of September exploring the Pitfalls Most Organisations Often Commit – the importance of implementing Anti-Bribery Management System (ABMS). Being a part of the solution means sharing our knowledge so society is one step closer to an ethical reality.

Registration Expired

In the US alone, more than 100 bribery investigations were in progress at the end of last year, with the financial services industry facing the most investigations. (Wall Street Journal, 2019)

Having layers of safeguards in place is required both from a legal and compliance standpoint. One of the most critical layers is an effective anti-bribery management system (ABMS).

Prevent Corruption and Promote Compliance

There is a solution that financial services organisations can implement to take a proactive stance against bribery and corruption: The ISO 37001:2016 Anti-Bribery Management System standard. ISO 37001 ABMS is designed to help global organisations implement an anti-bribery management system (ABMS), as the standard specifies a series of measures required by the organisation to prevent, detect and address bribery, and provides guidance relative to that implementation.

For financial services firms, this is a critical layer of protection that provides both anti-bribery controls and a system for compliance with various anti-corruption legislation, such as the FCPA and UK Bribery Act. The UK Bribery Act’s adequate procedures requirement dictates that all companies need to have ongoing monitoring, training, surveillance and risk assessments – ISO 37001 ABMS is designed to fulfil these criteria and more.

CRI Group’s ABAC™ Certification Services is accredited to offer independent ISO 37001 certification to ensure that an organisation is in compliance with the standard, which is recognised and practised in more than 160 countries worldwide. CRI Group’s auditors and analysts work with financial services organisations to develop measures that integrate with existing management processes and controls, and include:

  • Adopting an anti-bribery policy
  • Establishing buy-in and leadership from management
  • Training personnel in charge of overseeing compliance
  • Communicating the policy and program to all personnel and business associates
  • Providing bribery and corruption risk assessments
  • Conducting due diligence on projects, business associates and other third-party affiliations
  • Implementing financial and commercial controls
  • Developing reporting and investigation procedures

Our paid webinar will have a rundown of the following:

  • What are the core Bribery and Corruption Risks for Financial Institution?
  • How to protect financial institutions and corporations from bribery and corruption risk
  • Reparations from bribery that could affect the businesses, clients, and employees
  • Successful regulations to mitigate risk for bribery and corruption.
  • What can be done if bribery is detected?
  • Internationally recognised solutions laid forth by ISO 37001: Anti-Bribery Management System that gives businesses effective controls to mitigate risk
  • Components of risk management at a financial institution

We will also be exploring how the implementation of such a standard aids in examining and dealing fittingly with any actual or suspected bribery within the corporation and also how to implement appropriate financial, procurement and other commercial controls so as to help prevent the risk of bribery in financial services as these organisations face unique challenges.

Register Here (Expired)

Among them are maintaining proper internal procedures as they relate to bribery and AML regulations. These measures can be logistically challenging, especially in the auditing process – but keeping accurate books and records is a key provision of the UK Bribery Act. ISO 37001 ABMS standard makes this a key provision in cultivating proper due diligence and reporting procedures.

Another major challenge involves monitoring third-party risk. The due diligence practices and risk assessments implemented through ISO 37001 ABMS are critical in this area. Financial services firms, more than any other sector, must conduct effective vetting and ongoing monitoring of third-parties. This goes beyond “on-boarding” and relates to how companies continually assess risk from outside partners – including brokerage firms, introducers, agents, joint-venture relationships, even clients – as borrowers, for example, represent a major risk on the balance sheet.

Some financial services companies do not properly score or assign risk profiles to third-party partners, and this can represent a major weak point in efforts to prevent bribery, corruption and money laundering. Regulators understand this, too. That’s why ISO 37001 ABMS dictates thorough and comprehensive due diligence in regards to all third-parties and especially in the case of mergers and acquisitions.

Once certified, an organisation must continue surveillance and undergo a recertification audit over three years to ensure that the organisation still complies with the ISO 37001:2016 ABMS standard. During this time, any changes to processes, the addition of new partners and expansion/acquisition of new assets or energy contracts, etc. are carefully reviewed.

Long-lasting Benefits of Certification

ISO 37001 ABMS provides a strong framework for addressing and isolating risk factors, and the benefits of certification are far-reaching, impacting not just the primary organisation but also influencing contractors, clients, and raising the profile of the company as an ethical entity that is a good trading partner. By achieving ISO 37001:2016 ABMS certification, a financial services firm will:

  • Ensure that the organisation is implementing a viable anti-bribery management system utilising widely accepted controls and systems.
  • Assure management, investors, business associates, personnel and other stakeholders that the organisation is actively pursuing internationally recognised and accepted processes to prevent bribery and corruption.
  • If needed, provide acceptable evidence to prosecutors or courts that the organisation has taken reasonable steps to prevent bribery and corruption.

Cases like Société Générale are not isolated, but more and more, we are seeing companies punished for not taking proper preventative action with a robust anti-bribery management system (ABMS). Financial services firms need to be aware and stay in front of increased anti-bribery and corruption legislation given that such regulations have, in most cases, achieved a global reach. For ownership and management, the stakes are especially high – accountability now includes criminal liability for organisation personnel as individuals, beyond (and in addition to) liabilities faced by the organisation. This trend will only continue as governments, and their publics become increasingly intolerant of fraud, bribery and corruption. Significant media coverage and the real and perceived threat to governments’ economies contribute to this changing landscape of public opinion.

As the ISO 37001 International standard document states, “Conformity with (ISO 37001) cannot provide assurance that no bribery has occurred or will occur in relation to the organisation, as it is not possible to eliminate the risk of bribery. However, (the standard) can help the organisation implement reasonable and proportionate measures designed to prevent, detect and respond to bribery”. With this in mind, It’s important to note that ISO 37001 certification, on its own, is not a “safe harbour” from prosecution should bribery or corruption be discovered. Significantly, ISO certification is, as the above explains, a potential mitigating piece of evidence to regulators or even prosecutors and the courts that the entity has taken meaningful steps in its efforts to prevent bribery and corruption.

Financial Services Firms Need ISO 37001 ABMS

It is critical that any financial services organisation have a proper, comprehensive strategy to prevent and detect bribery and corruption, and remain in compliance with all regulations – on the local, regional, and international levels. The ISO 37001 ABMS standard is an established, tried and tested program to address those issues head-on through a comprehensive program of training and certification. The training process is tailored to the organisation while still following the developed curriculum and documented best practices. Due diligence procedures and risk assessments are applied in a thorough, comprehensive manner. Certification requires the demonstration that processes have been implemented effectively, with follow-up evaluations.

Worldwide developments in laws and regulations have demonstrated that there isn’t time to wait to implement controls and compliance procedures – the next investigation and/or prosecution may be too late. The harm caused by bribery and corruption to an entity’s reputation, investments and business can be far-reaching and long-lasting.

This paid webinar will be running from the following times on Thursday the 30th of September;

  • 08:00 to 10:00 GMT
  • 15:00 to 17:00 MYT
  • 12:00 to 14:00 GST

Your turnout with come with a certificate of Attendance (COA) as well as a complimentary webinar ABMS Awareness for 2 Pax per company. While you’re there, why not attain a Continuing Professional Development (CPD) certificate and stay on top of your industry?

Register your place for this webinar here and find out how to tackle the issue of bribery and corruption in your workplace before it has time to manifest itself into a greater issue. Finance is the greatest asset to the economy after all.

Complete Registration (Expired)