The need for compliance to adapt to performance and outcome-based obligations has been happening for What we can be certain of is that reactive, check-box compliance focused on audits and action items will Instead, compliance will need to be re-imagined and engineered to advance outcomes and meet targets in If you want your compliance team to learn how this is done consider joining "The Proactive Certainty This program teaches you how to take a proactive and integrative approach to compliance so you can always

However, proposed regulatory regimes can add significant compliance burdens for organizations already

Reach out to us at Lean Compliance to learn how digital engineering supports the digitalization strategies Raimund Laqua, P.Eng., PMP, is founder of Lean Compliance, where his work includes engineering assurance

Raimund Laqua, P.Eng., PMP, is the founder of Lean Compliance Consulting and one of Ontario's first licensed He writes about compliance, engineering, and AI at leancompliance.ca.

Effective compliance (ex. quality, safety, environmental, and regulatory) requires that existing conditions are maintained, and that progress is made towards compliance goals (ex. zero defects, zero fatalities

What we learned was that for external obligations: most of the compliance resources are dedicated to external obligations, it was difficult for organizations to meet their obligations using traditional compliance ) was needed for organizations to make progress and realize the benefits from ESG along with other compliance This requires several things working together to produce the outcome of compliance: Better safety, security

4 types of obligations 4 compliance functions 4 purposes 4 measures

What this means for compliance For compliance to improve its risk perception it needs to look through Obligations - this will help to see obstacles and opportunities associated with meeting obligations (Compliance risk registers but more importantly provide better measures to improve the probability of achieving compliance

Compliance is more than the sum of its parts None of the parts of a compliance system individually can Compliance needs to be integrated While management system standards can improve compliance performance and who needs to be accountable for compliance. Compliance needs to be fit for purpose Compliance needs to be fit for purpose; able to achieve compliance To what extent is our compliance fit for purpose?

GRC is an acronym used to describe three functions: governance, risk, and compliance. A conservative estimate of the cost of compliance (excluding the other GRC functions) is 10% of a worker It is easy to imagine that If compliance continues on its present course, compliance will require: one person to ensure that compliance is met for every person doing the work. Clearly, this approach is not sustainable or desirable for compliance and neither for GRC as a whole.

years it became clear that their risk capabilities had not progressed as well as other aspects of their compliance goal for this new manager was to establish a consistent risk framework to be used across each of the compliance Managers of the compliance programs along with asset owners now believed that they no longer needed to Organizations that try to improve their compliance often start by breaking down silos consolidating effort If you have a department or manager who takes care of risk and compliance then you most likely have fallen

safe may be the very thing that is holding them back from making improvements and advancing overall compliance these same companies are being asked (regulated) to improve, to innovate, and to make progress on their compliance For compliance to be effective it is helpful to consider which culture is best across governance, program