third-party risks Archives - Radical Compliance

Another day, another report looking at challenges of third-party risk management. This time the report is from software firm Prevalent, and it’s worth some attention for the conflicting perceptions about third-party risk that it calls out. Foremost, the report is interesting because it defines third-party risk as a cybersecurity and supply chain issue, rather than…

Commonwealth Edison, a subsidiary of energy giant Exelon Corp. and the largest utility in the state of Illinois, agreed Friday to pay $200 million to settle federal corruption charges that also involve one of the state’s most powerful politicians. The case is a reminder to compliance officers that FCPA-like misconduct can happen right here within…

Today we revisit Wynn Resorts and the report its compliance monitor released last month. As you might recall, that report is a sweeping review of how Wynn has tried to rectify its operations after a sexual harassment scandal forced the departure of its founder and long-time CEO, Steve Wynn. Last month we took a deep…

One of the nation’s top banking regulators just dropped some fresh guidance about third-party risk management, well worth any compliance professional’s time if you’re looking for advice on regulatory compliance or just good insight on third-party risk generally. The Office of the Comptroller of the Currency, regulator for the country’s community banks, published the guidance…

The Justice Department’s top criminal prosecutor talked FCPA compliance at conference in Washington this week, raising a few points to consider about oversight of third parties and the importance of compliance program. Let’s get into them. Assistant attorney general Brian Benczkowski, head of the Criminal Division, made his remarks at the annual FCPA Conference happening…

I always welcome questions from compliance and audit professionals, and the following came to me last week: “What type of third party falls under ‘dealer’ for FCPA purposes?” The compliance officer who posed this question works at a company under settlement with the Justice Department for overseas bribery. He’s building up the company’s third-party oversight…

I was reading the New York Times this weekend when an article jumped out at me: yet another example of misconduct in a large company’s supply chain suddenly bursting into public view, bringing grief to a company that clearly hadn’t known trouble was afoot. Ethics and compliance officers should take note. When we dissect exactly…

Uneasy with your company’s third-party risk? Looking for some validation that your organization is normal? No worries — a fresh survey from Deloitte confirms that plenty of other organizations have only a precarious grip on their third parties, too. The report, released Tuesday and based on data from a Deloitte webcast held in October, found…

Texas-based Vantage Drilling International has agreed to pay $5 million in disgorgement to the Securities and Exchange Commission for sloppy FCPA accounting controls that let the company’s largest outside director and various third parties pay bribes to Brazilian government officials in the 2000s. The SEC’s settlement order recounting the failures reads like a long, torturous…

Another year, another report confirming what most compliance and IT security officers already know: third-party vendors are an enormous security and privacy risk, and oversight of those parties is a mess. That’s the message of a report released Thursday by Opus and the Ponemon Institute, which surveyed more than 1,000 IT and data security professionals…

Posts Tagged ‘third-party risks’

The Cracks in Third-Party Risk Management

ComEd Pays $200M on Domestic Bribery

Wynn, Part II: Third-Party Oversight

Some Good Guidance on Third-Party Risk

DOJ on FCPA and Agent Liability

Dealers, Drugs, and FCPA Insight

Supply Chain Risk: We’re Looking at It Wrong

Stats on Third-Party Oversight

SEC Dings Vantage $5M on FCPA Issues

Survey: Third-Party Data Risk Still a Mess