Over the last several years I have endeavoured to change the way we think and do compliance. As essential as compliance is, it is not the number one priority of things to improve or excel at for There are others who are doing amazing things to help transform compliance. into practice to improve compliance in their organization. Grateful is an understatement. – Venessa Beunrostro (Compliance Analyst) It's not always possible to

Compliance programs, systems, and processes are often used interchangeably when referring to improvements between these functions and show how each helps organizations better target their resources to improve compliance Validating that programs actually achieve their targeted outcomes is essential to meeting compliance. From a compliance perspective, changes need to be made in such a way to: maintain compliance continuity ) #compliancemodel #complianceframework #complianceimprovement

Quality, safety, environmental, regulatory, and other compliance programs help to rebuild trust by reducing However, most organizations view compliance as a necessary evil and something to avoid, let alone something Together with a narrow focus on prescriptive compliance to “shall statements” the opportunity now exists This requires a proactive and intentional approach to compliance that focuses on outcomes, capabilities , and continuous improvement which are the hallmarks of an effective compliance system.

Certification is often seen as a way to demonstrate compliance in various industries, such as security Studies have shown that organizations that pursue compliance certification for its own sake, rather certification can create a "check-the-box" mentality that hinders real improvement and the advancement of compliance While certification can be a useful tool for demonstrating compliance, it should not be seen as a substitute Companies that desire to improve their compliance outcomes and chose certification as a means to get

As a compliance engineer who's spent years helping organizations streamline their governance, risk and compliance programs, I've noticed one common source of confusion: the distinction between Corporate Organizations drift off course, cross compliance boundaries, and face unforeseen risks without adequate Let's chat – that's what we're here for at Lean Compliance!

When I founded Lean Compliance in 2017 I was encouraged to write blog posts to help draw attention to Writing allowed me to test ideas and better conceptualize the challenges facing compliance and how best Some of these interactions have led to meaningful engagements becoming clients of Lean Compliance. Chesterton we can write: Improving compliance effectiveness is something that is worth doing and worth the benefits of always being in compliance – the true lesson of the story.

over Reactive Practices Process Based Approach over Disparate Activities Outcomes over Check-Box Compliance This means that a prescriptive check-box strategy to compliance is no longer the best or preferred option re-certification, another perhaps even more important change is the focus on outcomes instead of on prescriptive compliance adoption of continuous improvement is also required by ISO 9001:2015 along with almost every other compliance Better Outcomes Companies that want to move beyond basic compliance by embracing a proactive mindset

The Promise of GRC Governance, Risk, and Compliance ( GRC ) emerged as a framework intended to harmonize In theory, GRC should align governance structures, risk management practices, and compliance activities Organizations implement expensive GRC systems that track controls and compliance tasks but fail to create No amount of sophisticated GRC technology, integrated controls, or compliance documentation can overcome Develop performance measures that track progress toward strategic outcomes rather than merely monitoring compliance

Over the last several years I have written, along with others, concerning the need for compliance to by waiting until something bad happens or compelled by laws, or pressured by stakeholders to improve compliance One such place, critical to compliance, is to adapt to variations in systems and processes to ensure The Power of Systems - Resisting Change Compliance systems are used to meet procedural obligations such However, together they provide a powerful means for compliance to continuously adapt in the midst of

helps drive alignment, accountability, and assurance across the organization: The 3 A's of an Effective Compliance , there are two primary loops that guide the process: Meeting Objectives (Quantitative Regulation - Compliance Meeting Obligations and Advancing Outcomes (Qualitative Regulation - Compliance 2): While meeting numerical

If you are in need of risk-adjusted plan of success for you compliance consider engaging in one of our Compliance Kaizens .

From a compliance perspective the following two are essential to demonstrate that obligations are being Altshuller, author of the corporate social responsibility chapter in the book, "Corporate Legal Compliance There are strong business reasons, therefore, to leverage and integrate CSR commitments and compliance that can be applied to help manage obligations such as: ISO 26000 (Social Responsibility), ISO 37301(Compliance recommended: Document the context and expectations (i.e. outcomes) Define what constitutes evidence of compliance