Strengthening Third-Party Risk Management: Preparing for FCPA Inquiries
June 6, 2024
![hispanic-female-senior-data-scientist-reviewing-reports-of-risk-management-department-on-big Strengthening Third-Party Risk Management: Preparing for FCPA Inquiries](https://todaysgeneralcounsel.com/wp-content/uploads/2024/06/hispanic-female-senior-data-scientist-reviewing-reports-of-risk-management-department-on-big-768x576.jpg)
According to an article by Navex, the SEC is scrutinizing tech companies’ business relationships with distributors, resellers, and other third parties in high-corruption-risk countries. This SEC sweep aims to identify potential Foreign Corrupt Practices Act (FCPA) violations, potentially leading to investigations and settlements.
Receiving an SEC letter doesn’t imply accusations of corruption but requires companies to accurately detail their third-party business dealings. Thus, robust third-party risk management (TPRM) is crucial.
The article highlights these key Third-party risk management (TPRM) capabilities:
- Due Diligence: Conduct thorough background checks on intermediaries, including their ownership, connections to politically exposed persons, and past misconduct allegations.
- Contract Management: Continuously monitor and govern business relationships through contract clauses that allow auditing and restrict sub-contracting.
- Record-Keeping: Maintain documentation proving prudent governance of third-party relationships, supported by internal audits to ensure compliance.
- Anti-Corruption Training: Educate employees and third parties on the unacceptability of bribes and ensure training is relevant and well-documented.
Effective TPRM requires more than these capabilities; it necessitates strong inter-departmental relationships. Technology plays a vital role, providing screening tools, policy management, and centralized documentation repositories. However, compliance teams must collaborate with procurement and other departments to ensure comprehensive oversight of all intermediaries.
Simple Subscribe, Daily updates newsletter, subscribe page sign-up
To achieve high third-party risk management performance, compliance teams must communicate their needs, facilitated by the urgency of SEC inquiries, and work with other departments to address policy, procedure, contract, documentation, and training gaps. This collaborative approach helps build robust TPRM systems, preparing companies to respond to SEC inquiries and other emerging risks effectively.
Critical intelligence for general counsel
Stay on top of the latest news, solutions and best practices by reading Daily Updates from Today's General Counsel.
Daily Updates
Sign up for our free daily newsletter for the latest news and business legal developments.