All articles by Matt Kelly – Page 3

  • Blog

    Argument for Small-Company Compliance Exemptions

    2015-06-08T10:15:00Z

    Image: Smaller public companies regularly lament that the costs of regulatory compliance are disproportionately large for them and serve little useful purpose for their investors. Sometimes those complaints aren’t worth more than a good eyeroll—but sometimes they have merit. This week, Editor Matt Kelly tells the tale of yet another ...

  • Blog

    How Dodd-Frank Is Working—and How It Isn’t

    2015-06-01T14:30:00Z

    Image: Congress is back in session, which means another round of political bickering over reform of the Dodd-Frank Act. Alas, Compliance Week Editor Matt Kelly says, the law is already working as one would expect—that is, a little bit effectively, and a little bit stupidly. Compliance officers should not hold ...

  • Blog

    Parting Thoughts From CW 2015

    2015-05-26T12:00:00Z

    Image: The Compliance Week 2015 conference is now part of history. We had more than 560 compliance and audit professionals join us in Washington last week for three days to discuss all things ethics, compliance, audit, and risk management. Inside, editor Matt Kelly shares his thoughts on the most relevant ...

  • Blog

    Pre-Gaming the Compliance Week 2015 Conference

    2015-05-15T13:15:00Z

    Image: The Compliance Week 2015 conference started Monday, and as usual there were more than 500 compliance officers, audit executives, regulators, and other leading thinkers talking shop on all things ethics & compliance. Check our website frequently for updates. Meanwhile, here are Editor Matt Kelly’s personal picks for the most ...

  • Blog

    The Consequences of Baltimore and Body Cameras

    2015-05-04T14:15:00Z

    Image: The protests and riots in Baltimore last week over police brutality make the question of body cameras for law enforcement ever more pressing. Are they effective controls against misconduct? Yes, Compliance Week editor Matt Kelly says. But when you consider what they say about the state of our ethical ...

  • Blog

    Struggles on IT Strategy for Compliance

    2015-04-27T10:00:00Z

    Image: Compliance officers struggle with IT; that’s not news. This week, however, we have new data that might illuminate why so many compliance departments can’t implement an IT strategy to meet their needs. Inside, Compliance Week editor Matt Kelly looks at which IT typically goes to what compliance tasks, and ...

  • Blog

    Dodd-Frank: Remember the History Before Pushing Reform

    2015-04-19T16:45:00Z

    Image: As the fifth anniversary of the Dodd-Frank Act approaches, we’ll hear more talk about whether the law needs reform; in fact, we already hear that talk in Congress. Before we go too far, Compliance Week editor Matt Kelly writes, we should remember what caused the financial crisis in 2008 ...

  • Blog

    Uncomfortable Lessons to Draw From Germanwings 9525

    2015-03-28T13:30:00Z

    Image: The crash of Germanwings Flight 9525 demonstrates the most difficult choices in risk management that businesses, policymakers, and society ever have to make: how we handle people like Andreas Lubitz, the troubled co-pilot who deliberately crashed the plane—how we identify and handle persons who might potentially cause enormous damage ...

  • Blog

    Ethics Resource Center, ECOA Reborn as New Group

    2015-03-12T19:30:00Z

    Two of the most well-known names in corporate ethics—the Ethics & Compliance Officers Association and the Ethics Resource Center—are gone, merged and reborn as the Ethics & Compliance Initiative, a new organization that will focus on research and certifying compliance programs. More inside.

  • Blog

    Why Is Cyber-Security a Process? This Is Why.

    2015-03-11T22:45:00Z

    Image: Everyone stresses the importance of looking at cyber-security as a process. Well—why, exactly? How does viewing cyber-security that way help compliance and audit executives? Because, Compliance Week Editor Matt Kelly writes, cyber-threats are equally about building effective processes—to subvert yours. And until we appreciate the nature of cyber-risks, he ...

  • Blog

    How Policy and Corporate Culture Can Collide

    2015-03-09T13:30:00Z

    Image: Good policies are crucial to effective compliance programs—“good,” however, being the part many companies fail to hit. Inside, Compliance Week editor Matt Kelly picks apart the corrosive effect that poor policies can have on corporate culture, starting with the one policy everyone loves to complain about: business travel. Sit ...

  • Blog

    Compliance Week Europe Conference Takes Shape

    2015-03-04T15:00:00Z

    Image: Compliance Week is delighted to announce that planning for our 2015 Compliance Week Europe conference is now underway, and we are thrilled about how things are falling into place. Registration for the event is now open, so if you are a compliance officer anywhere from Ireland to Ukraine, we ...

  • Blog

    What You Tell the Audit Committee About Auditors

    2015-03-02T13:30:00Z

    Image: You might have forgotten, but once upon a time a company’s audit committee was primarily responsible for—get this—the annual audit. Compliance Week recently surveyed compliance and audit executives to ask: What information do you bring to the audit committee when reviewing the performance of your audit firm? Inside, Editor ...

  • Blog

    ELM Arrives as New Compliance Buzzword

    2015-02-15T18:00:00Z

    Image: We try to look cynically upon any slick new marketing campaign from the GRC software vendors, but occasionally something appears that does seem to have real substance. That may have happened earlier this month at LegalTech 2015 with its extensive discussion of “enterprise legal management.” The concept is a ...

  • Blog

    Three Ideas for Compliance, Audit, and Cyber-Security

    2015-02-08T17:15:00Z

    Image: Wow! Sometimes you go to a panic party about cyber-security risk and an intelligent discussion breaks out. Such was the case for Compliance Week editor Matt Kelly, who hung out last week at a meeting of the New England Chief Audit Executives Club. Inside are his three lessons for ...

  • Blog

    Audit Committees, Operational Risk, and Unease

    2015-02-02T13:30:00Z

    Image: News flash: Audit committees are still overworked and unsure how to handle new risks confronting Corporate America. So says the 2015 edition of the KPMG Audit Committee Survey, which tells some good news on financial reporting risks, amid a more troubling morass of operational and cyber-security risks nobody seems ...

  • Blog

    Compliance Week 2015: Full Agenda Announced

    2015-01-26T14:15:00Z

    Image: Good news for everyone looking to firm up springtime travel plans: we have just announced the agenda and speaker lineup for the best compliance and audit conference out there, Compliance Week 2015. From hardcore SOX compliance issues, to strategies for effective leadership of compliance teams, to all the operational ...

  • Blog

    More Misconduct Tales to Tell Your Company

    2015-01-19T18:00:00Z

    Image: As we move into 2015 and the good economic times that seem to be carrying the United States along, it’s time for a refresher course in Why Ethics & Compliance Matter. We have two new examples of misconduct—one from Brazil, the other from New York—that can go straight into ...

  • Blog

    Six Compliance Events to Watch in 2015

    2015-01-04T13:45:00Z

    Image: Welcome back! Before everyone returns to the raw thrill of audit committee meetings, internal control testing, e-discovery requests, and vendor proposals for GRC software upgrades, let’s take a moment to contemplate what lies ahead for compliance, risk, and audit executives in 2015. Editor Matt Kelly has his top picks ...

  • Blog

    Another Step Forward in Tackling Cyber-Security Risk

    2014-12-29T21:15:00Z

    Image: Dec. 31—COSO’s Internal Control — Integrated Framework talks a good game about being useful beyond financial reporting risks, but Compliance Week Editor Matt Kelly has always wondered how that works in practice. Then came a nifty piece of guidance: a taxonomy of operational risks in cyber-security, published by the ...