Governance, Risk & Compliance: Future Trends & Strategies

As we all know, governance, risk, and compliance (GRC) are the three core elements in the corporate world referring to an organization’s strategy for handling the interdependencies among corporate governance policies and framework, risk management and mitigation approach along with regulatory and compliance requirements of companies. The objective of this article is to understand the future of corporate governance with compliance and risk management mechanisms and explore strategies through which companies can adopt future dynamics.

Governance Risk Compliance

Source:  Germane Analytics for GRC

Governance Framework

Governments worldwide are embracing digital transformation, leveraging technologies such as artificial intelligence, blockchain, and big data analytics to enhance service delivery, transparency, and citizen engagement. Additionally, the rise of decentralised governance models facilitated by technologies will empower direct citizen participation, reducing reliance on central authorities. Further, there is a shift towards e-governance and online services implying responsive, accountable, and transparent governance.

Addressing global challenges such as climate change and cybersecurity threats will require enhanced global cooperation and governance structures. Crucially, the future of governance will be shaped by the ethical choices of governments, policymakers, and citizens, emphasising inclusivity and the protection of individual rights as critical factors in shaping a responsible and effective governance paradigm worldwide.

Compliance Standards

The future landscape of compliance standards is poised for transformation, driven by dynamic factors such as technological advancements, global business shifts, and evolving societal expectations. Multiple trends are likely to shape the future of compliance standards.

Digital compliance will be pivotal as businesses increasingly operate online, prompting the evolution of standards to address cybersecurity, data protection, data privacy, and digital ethics. This will lead to the emergence of new regulations ensuring the secure and ethical utilisation of technology across sectors. The globalisation of businesses will necessitate efforts towards global harmonisation, aligning regulations internationally to create a more consistent compliance landscape for multinational corporations.

Additionally, compliance standards will reflect the growing emphasis on environmental and sustainability considerations, with businesses facing stringent regulations on carbon emissions, waste management, and sustainable practices. Supply chain transparency and ethical sourcing will be focal points, requiring companies to disclose information about labour practices, environmental impact, and raw material sourcing. Social and human rights compliance will gain prominence, emphasising ethical business conduct, and adherence to social responsibility standards. It is crucial to recognise that compliance standards will have to continually adapt to the changing global landscape.

Risk Factors

The key risk factors in the future of governance and compliance include cybersecurity threats, encompassing data breaches, hacking, and ransomware attacks, as the reliance on technology grows. The evolving regulations emphasise the need for dynamic compliance management strategies to adapt to changing requirements and avoid non-compliance. Further, global operations pose cross-border compliance challenges, as organisations must navigate diverse international regulations, legal frameworks, and cultural nuances. Additionally, risks associated with financial fraud, embezzlement, or mismanagement can have severe consequences on an organisation’s stability and reputation. Effectively addressing these risk factors necessitates a proactive and adaptive approach to governance and compliance.

Strategies to Adopt Future Dynamics

Here are some strategies and forward-thinking initiatives that could be employed by organisations to harmonise the governance framework, compliance standards, and risk factors for adopting to the future dynamics: –

  1. Understanding the Organisation’s Governance Structure

It is pertinent for organisations to gain a deep understanding of their governance frameworks, including board structure, decision-making processes, and the roles and responsibilities of key executives and stakeholders. The failure of governance structure and procedures may lead to the collapse of the entire system as in the case of Yes Bank where poor governance led to an inability to raise capital due to under-reporting of NPA of the bank.

  1. Identify Governance and Compliance Risks

The next strategy involves the evaluation of governance practices against industry best practices, corporate governance codes, and regulatory guidelines to identify gaps and potential risks and carrying out a thorough review of existing policies, procedures, and processes to identify compliance risks. Failure to comply in this regard may lead to huge penalties. An example from recent times is the JPMorgan case wherein a fine of $125 Million was imposed by the Securities and Exchange Commission due to ‘widespread and longstanding failures’ by the firm in maintaining and preserving written communications.

  1. Risk Assessment and Prioritisation

Organisations should identify and assess governance and compliance risks, considering financial, legal, operational, reputational, and strategic risks associated with governance and compliance failures, using risk scoring methods to prioritise identified risks based on their impact, likelihood, and speed of occurrence and focusing on high-impact, high-likelihood risks for mitigation efforts. The Volkswagen emissions scandal in 2015 is an example where the company failed to assess and manage the risks associated with alleged cheating on emissions tests, resulting in a major scandal and huge financial losses.

  1. Mitigation Strategies

Developing detailed mitigation plans for high-priority governance and compliance risks and clearly outlining the steps, responsibilities, timelines, and resource requirements, is necessary to ensure alignment with the organisation’s strategic objectives which strengthens the existing policies and procedures in line with regulatory requirements and industry standards. As an example to address the risk of water scarcity, Infosys has a strategy in place, with its sustainability team and enterprise risk management (ERM) conducting assessments at the facility and enterprise levels.

  1. Monitoring and Reporting

It is equally important for organisations to implement continuous monitoring mechanisms to track adherence to governance and compliance policies and prepare regular reports for management and the board. The significance of reporting is also stated in the guidance note prepared by the Organisation for Economic Cooperation and Development and Basel Institute on Governance, which emphasises the need for designing a High-Level Reporting Mechanism for businesses.

  1. Stakeholder Engagement

This can be implemented by maintaining open communication channels with stakeholders, encouraging reporting of potential governance and compliance issues, establishing a confidential reporting mechanism to protect whistleblowers, setting up feedback mechanisms within the organisation to gather insights from employees, and using the feedback to refine governance and compliance strategies and improve internal processes. The Coca-Cola company has a different engagement strategy for customer retention wherein the company interacted with its consumers to create brand value and gained huge revenue through marketing and promotion strategies.

  1. Continuous Improvement

  • Conducting periodic reviews of governance and compliance practices.
  • Assessing the effectiveness of implemented strategies and making necessary adjustments to enhance the organisation’s governance framework.
  • Comparing the organisation’s governance and compliance practices with industry peers and best practices.

By following these strategies and learning from these examples, one can systematically assess and mitigate governance and compliance risks, ensuring that the organisation operates ethically, legally, and in alignment with industry standards and regulatory requirements.

Conclusion

The future of GRC is intricately tied to the ongoing and accelerating digital transformation of the business landscape. As organisations continue to embrace advanced technologies, it is evident that GRC functions must evolve to meet the challenges and opportunities presented in this dynamic environment. The integration of digital tools, data analytics, and automation into GRC processes holds the promise of increased efficiency, better risk management, and enhanced compliance. However, this transformation comes with complexities such as data quality and integrity, dynamic regulatory landscape, lack of standardisation, difficulty in change management, and more.

References:

https://www.oceg.org/ideas/what-is-grc/

https://www.techtarget.com/searchsecurity/definition/governance-risk-management-and-compliance-GRC

https://www.icsi.edu/media/webmodules/GOVERNANCE_RISK_MANAGEMENT_COMPLIANCES_AND_ETHICS.pdf

https://www.cgi.org.uk/knowledge/governance-and-compliance

https://core.ac.uk/download/pdf/216957836.pdf

http://www.germane-analytics.com/corporater-grc.php     

https://www.ndtv.com/india-news/yes-bank-fraud-rs-5-000-crore-fraud-by-yes-banks-rana-kapoor-wadhawans-probe-agency-2913012 

https://www.sec.gov/news/press-release/2021-262 

https://www.bbc.com/news/business-34324772

https://www.wbcsd.org/Programs/Redefining-Value/Making-stakeholder-capitalism-actionable/Enterprise-Risk-Management/Resources/Enterprise-Risk-Management-case-studies/Infosys

https://baselgovernance.org/sites/default/files/2019-01/Designing_a_HLRM_EN.pdf

https://www.campaignindia.in/article/consumer-engagement-how-coca-cola-fosters-human-connections/418266

Image Credits:

Photo by Melpomenem on Canva

Developing detailed mitigation plans for high-priority governance and compliance risks and clearly outlining the steps, responsibilities, timelines, and resource requirements, is necessary to ensure alignment with the organisation’s strategic objectives which strengthens the existing policies and procedures in line with regulatory requirements and industry standards. As an example to address the risk of water scarcity, Infosys has a strategy in place, with its sustainability team and enterprise risk management (ERM) conducting assessments at the facility and enterprise levels.

Related Posts

POST A COMMENT

A Guide to Conquer the Cross-Border Compliance Challenges

Cross-border compliance is a critical aspect of business operations in an increasingly globalized economy. As companies expand their activities across international borders, they face the many challenges of legal and regulatory requirements that a company must comply with during cross-border transactions. This article provides an overview of cross-border compliance, highlighting its importance, challenges and strategies for effective implementation and states the consequences of failure in implementation, along with many examples of leading companies that have succeeded or failed to meet the cross-border compliance requirements.

Introduction

Cross-border compliance refers to the compliance and management of regulatory requirements and compliance obligations by organizations operating in different jurisdictions. It includes ensuring that companies comply with the laws, regulations and standards of each jurisdiction in which they do business. Operating in multiple jurisdictions further introduces complexities due to differences in legal and regulatory frameworks, cultural norms and business practices. Cross-border compliance aims to address these challenges and ensure that organizations operate within the boundaries of applicable laws and regulations while maintaining ethical and responsible business practices.

The key aspects of cross-border compliance include regulatory compliance, risk management, internal controls, due diligence, monitoring and reporting, cultural and ethical considerations, and cross-border data transfers. Cross-border compliance is an ongoing endeavour that requires a comprehensive understanding of each jurisdiction’s legal and regulatory requirements. It involves implementing robust compliance programs, conducting regular assessments and adapting to the evolving regulatory environment to ensure organizations operate responsibly and ethically in the global marketplace.

Cross-Border Compliance Issues

Cross-border compliance challenges are the difficulties and complexities that arise when companies operate in different jurisdictions and must comply with different regulatory frameworks, laws and cultural norms. These challenges can present significant hurdles for organizations, requiring them to navigate various legal, regulatory and operational aspects to ensure compliance across jurisdictions. Here are some common cross-border compliance issues: –

  1. Regulatory Variation

Each country or region has its own unique set of laws and regulations governing areas such as data protection, anti-corruption, labour practices, environmental standards and product safety. Companies operating in different jurisdictions must understand and comply with these variations, which can be complex and time-consuming. In addition, regulatory areas are constantly evolving, and new laws and regulations are introduced or amended. Such companies need to keep abreast of regulatory changes and adapt their compliance programs to ensure ongoing compliance. Every company involved in cross-border transactions usually faces this challenge.

  1. Language and Cultural Differences

Doing business across borders often involves language barriers and cultural differences. Accurately translating legal and compliance documentation, understanding local customs, and adapting compliance programs to local cultural norms can be challenging, but critical to effective compliance. Companies like Walmart, McDonald’s etc. face many language and cultural challenges because they operate in different countries with different languages ​​and different cultures.

  1. Privacy and Security

Data protection and privacy regulations vary from jurisdiction to jurisdiction. Companies must comply with various requirements related to collection, storage, transmission and privacy rights. Ensuring compliance with these regulations while maintaining effective data management practices can be particularly challenging in a global business environment. An example of a company with this problem is Facebook, which has faced several compliance issues related to privacy and user consent and has been under scrutiny for how it handles user data. These non-compliances have led to regulatory investigations, fines and increased public scrutiny of Facebook’s privacy practices.

  1. Supply Chain Complexity

Cross-border operations often involve complex global supply chain arrangements. Ensuring compliance throughout the supply chain, including vetting suppliers, managing third-party risks and monitoring compliance at each stage, can be challenging, especially when dealing with different legal and regulatory frameworks. The company Nike is an example that has faced criticism and legal challenges in the past related to labour practices and working conditions in its supply chain.

Overcoming Challenges & Risk Management in Cross-Border Compliance

Overcoming cross-border compliance challenges requires a proactive and strategic approach. Some of the steps that organizations can take to effectively address and mitigate these challenges are as follows: –

  1. Companies may carry out comprehensive compliance risk assessments to identify potential cross-border compliance issues specific to the organization and the jurisdictions in which they operate. This assessment should take into account regulatory variances, cultural factors and enforcement practices to identify areas of potential non-compliance and develop a comprehensive compliance program.
  2. Robust internal controls such as monitoring, auditing and reporting mechanisms can be implemented to detect and prevent violations. These controls should be designed to address specific cross-border compliance issues and adapt to the evolving regulatory environment. It should also establish a clear incident response plan to address violations or incidents that may occur in different jurisdictions and develop protocols for prompt and effective reporting, investigation and remediation of compliance issues by implementing corrective actions and monitoring their effectiveness to prevent future occurrences.
  3. Regularly monitoring regulatory changes and being informed of developments and changes in legislation in the jurisdictions where the organization operates is essential to deal with cross-border compliance challenges. The same may be done by establishing a process to track regulatory updates and evaluate their impact on the company’s compliance program. This ensures that the organization can proactively adapt its compliance efforts to stay in line with the evolving legal landscape. Companies must engage local legal counsel and compliance professionals familiar with the laws and regulations of each jurisdiction. Their expertise can help interpret and navigate complex regulatory environments, ensure compliance, and minimize risk.
  4. Technology solutions and data analytics tools could be used to streamline compliance processes, monitor compliance activities and identify potential compliance risks. It should also promote open communication and cooperation with local regulatory authorities and industry associations to ensure a cooperative approach to cross-border compliance.
  5. When working with third parties, it is an important requirement to conduct thorough due diligence to assess their compliance practices and risk profile.

By taking these steps, organizations can improve their ability to overcome cross-border compliance challenges, effectively manage risk, mitigate breaches, and ensure compliance with applicable laws and regulations in the jurisdictions where they operate. To effectively navigate the complexities of the global business environment, maintaining a commitment to compliance, ongoing monitoring and continuous improvement is essential.

Further, companies such as Apple Inc, Siemens AG, Unilever, Coco-Cola and many others have implemented robust compliance programs and invested in local expertise to ensure regulatory compliance across borders by addressing many cross-border issues such as data protection, antitrust, intellectual property rights, work practices, business transactions, audit processes and so on.

Consequences of Non-Compliance

Cross-border compliance is essential for companies operating globally, and non-compliance can result in various consequences such as legal and regulatory penalties, reputational damage from negative publicity, loss of business opportunities, legal disputes and lawsuits initiated by regulators, leading to additional costs, time and resources spent on litigation, disruption of operations, loss of licenses and certifications preventing the Company from doing business in certain markets or sectors, increased compliance costs due to remediation efforts, audits, internal controls and compliance programs to address issues with non-compliance and prevention of future violations and criminal and civil liability depending on the nature and severity of the non-compliance.

Key Takeaways

In conclusion, cross-border compliance presents unique challenges for companies operating in different jurisdictions. For navigating the complex web of laws, regulations and cultural differences, a proactive and systematic approach is required to ensure that compliance obligations are met, and a successful cross-border compliance strategy involves many factors and, more importantly, for long-term business opportunities, it is necessary to have a continuous assessment and improved cross-border compliance to gain market share and expand into new geographies. In addition, by effectively managing risk and proactively addressing compliance issues, companies can mitigate legal and reputational risks by maintaining stakeholder trust and operating with integrity across borders. However, it requires vigilance, adaptability and a commitment to ethical behaviour, which is essential for companies to stay abreast of changing regulatory environments to meet evolving requirements. Therefore, successful cross-border compliance is essential for companies to operate responsibly, sustainably and with integrity in the global business environment.

References:

Digital Cross-Border Compliance: The Definitive Guide

https://www.avalara.com/blog/en/apac/2022/04/five-cross-border-compliance-challenges-for-manufacturers.html

https://cellpointdigital.com/articles/blog/cross-border-payments-the-issues-and-challenges

https://www.capgemini.com/wp-content/uploads/2017/07/Regulatory_Reforms_around_Global_Cross-Border_Regulations.pdf

https://www.epiqglobal.com/en-us/resource-center/articles/cross-border-data-protection-laws

https://www.timesnownews.com/business-economy/companies/2021-facebook-data-breach-meta-fined-277-million-by-irish-regulator-article-95844568

https://www.forbes.com/sites/brianbushard/2023/01/04/meta-fined-over-400-million-by-eu-for-alleged-personal-data-collection-violation/amp/

https://markets.businessinsider.com/news/stocks/nike-stock-price-earnings-inventories-supply-chain-retail-forecast-sales-2022-9

https://www.ecotextile.com/2023030330436/social-compliance-csr-news/unions-and-ngos-lodge-complaint-against-nike.html

https://www.bbc.com/news/world-us-canada-66171702

https://www.forbes.com/sites/forbesbusinesscouncil/2023/03/08/how-to-develop-cultural-intelligence-to-avoid-pitfalls-overseas/?sh=314e0c382c5d

https://www.google.com/amp/s/www.cbc.ca/amp/1.4277179

Image Credits:

Photo by Melpomenem: Compliance theme with aerial view of city skylines – Photos by Canva

Cross-border compliance is essential for companies operating globally, and non-compliance can result in various consequences such as legal and regulatory penalties, reputational damage from negative publicity, loss of business opportunities, legal disputes and lawsuits initiated by regulators, leading to additional costs, time and resources spent on litigation, disruption of operations, loss of licenses and certifications preventing the Company from doing business in certain markets or sectors, increased compliance costs due to remediation efforts, audits, internal controls and compliance programs to address issues with non-compliance and prevention of future violations and criminal and civil liability depending on the nature and severity of the non-compliance.

Related Posts

POST A COMMENT