Colombian conglomerate Grupo Aval agreed to pay nearly $81 million as part of settlements addressing alleged bribes paid by its bank subsidiary Corficolombiana to win a highway construction contract.
Third Party Risk
Albemarle reserves $219M for FCPA settlements
Chemical company Albemarle Corp. disclosed it is set to pay $218.5 million as part of proposed settlements reached with the Department of Justice and Securities and Exchange Commission regarding apparent violations of the Foreign Corrupt Practices Act.
Risks, opportunities under SEC’s cyber incident disclosure rule
The clock is ticking for public companies to put in place policies and practices to meet the requirements of the Securities and Exchange Commission’s newly approved cybersecurity incident disclosure rule.
Common sanctions compliance trip points from 2023 enforcement cases
Penalties against companies including British American Tobacco, Wells Fargo, and Microsoft demonstrate the multiple ways in which businesses can run afoul of U.S. sanctions—an area receiving increased scrutiny by regulators.
Need to know: New York City AI bias law
Companies that use automated tools to screen candidates for jobs based in New York City must check those systems for bias or potentially run afoul of a first-in-the-nation law.
Amex banking unit fined $15M for poor third-party oversight
American Express National Bank agreed to pay a $15 million penalty levied by the Office of the Comptroller of the Currency for alleged oversight failings regarding a third-party affiliate and its efforts to retain small business customers.
Survey: Financial institutions doing more with less by outsourcing compliance
Respondents to a recent survey conducted by Compliance Week and Guidehouse largely indicated outsourcing improved the effectiveness of their compliance program in fighting financial crime, though limits remain on how much can be outsourced.
Survey: U.S. bank failures prompt reassessment of third-party risks
Nearly half the respondents to a Compliance Week and Riskonnect survey regarding the recent U.S. banking crisis said they changed or considered changing their third-party risk management procedures as a result of the turmoil.
U.S. bank failures prompt reassessment of third-party risks
The recent banking crisis—in which three mid-sized U.S. banks failed—prompted just under half of compliance professionals across all industries to reassess their TPRM procedures, according to a recent survey conducted by Compliance Week and Riskonnect.
Potential sanctions violations: To voluntarily self-disclose or not?
The Department of Justice scrutinizing sanctions on par with how it views bribery under the Foreign Corrupt Practices Act alters the calculus of whether a company should voluntarily self-disclose potential violations, experts discussed at CW’s TPRM Summit.


