Fraud prevention is about to get more complicated with penalties rising sharply for U.K. organizations. Starting Sept. 1, larger businesses will be liable to criminal prosecution if any of their employees–or an agent, subsidiary, or other “associated person”–commits fraud that is intended to benefit the company.
Third Party Risk
Posted inRegulatory Enforcement
DOJ indicts five in remote IT work scheme to circumvent North Korean sanctions
Five people, including two Americans, allegedly duped U.S. companies into hiring North Koreans for contract IT work, and funneled millions in U.S. dollars to the sanctioned regime, the Department of Justice said.
Posted inEurope
Experts say DORA compliance not coming easy as more firms pass buck to IT providers
New rules have come into effect across the European Union to promote better cybersecurity and IT resilience across the financial services sector, but experts warn that compliance is likely to be patchy and regulatory enforcement across the bloc perhaps even patchier.
Posted inAccounting & Auditing
Cannabis company dinged by SEC over ‘round-trip’ transfer to inflate year-end cash
A cannabis company agreed to pay $225,000 to settle allegations that funds were temporarily deposited into its year-end accounts for the sole purpose of inflating year-end cash, the Securities and Exchange Commission said.
Posted inEurope
Experts unsure of risk appetite as EU beefs up cyber rules for critical infrastructure
New rules on cyber risk management across the EU put execs firmly in the crosshairs for noncompliance and are likely to apply to a wider range of organizations than many business leaders may initially think. However, there are also concerns that the rules may become muddled across the wide bloc.
Posted inEurope
TPRM critical as DORA, new FCA third-party engagement rules come into effect in 2025
New rules that push IT firms providing “critical” services to the U.K.’s financial sector to share more data about cyberattacks and resiliency measures have been welcomed by industry experts. However, concerns remain over how suppliers will be classified and how key data might be gathered and shared.
Posted inEthics & Culture
Data analytics in compliance: Time to get started, or expand, in 2025
Launching or expanding a corporate data analytics program for compliance can seem like a daunting task, but it is one worth adding to your to-do list in 2025.
Posted inAccounting & Auditing
Survey: Organizations broadly adopting artificial intelligence, with varied governance
The majority of businesses are using AI and doing so without governance–a compliance gap that poses extreme risks, a new survey by Compliance Week and GAN Integrity found. A webinar will discuss why it is crucial to have AI governance, how to implement it, and what strategies to strengthen programs.
Posted inRegulatory Enforcement
German firm Aiotec to pay $14.5M to settle Iran sanctions violation
German petrochemical parts supplier Aiotec agreed to pay $14.5 million to settle allegations that it engaged in a four-year conspiracy to dismantle and ship a plastics manufacturing plant owned by a U.S. company to Iran, in violation of U.S. sanctions.
Posted inRegulatory Enforcement
Top ethics and compliance failures of 2024
The biggest Compliance Fails of 2024 show the real-world consequences of noncompliance for the companies that faltered, but also for their customers and their employees.