Governance, Risk, & Compliance

Compliance is a complex, evolving set of challenges for most businesses whether in a regulated industry or not.

Regulatory compliance is an organization’s adherence to the government-imposed statutes and regulations that are relevant to its industry and business processes.  This regulatory structure tends to change over time, as new products and services are introduced, new markets entered, and as a result of mergers and acquisitions.

Contract compliance refers to an organization keeping the commitments it has made in contracts with its customers, suppliers, and service providers.  Aside from routine procure-to-pay and order-to-bill business activities, there are contract conditions that must become (and remain) true, and regularly recurring and event-driven notification obligations to be received from or furnished to the other party.

Ethics is an organization fulfilling the promises it has made to itself, its investors and its community in terms of responsible business practices, social responsibility, and the environment.

Assurance.  How can an organization assure itself and its constituents that it is operating compliantly?  The best approach is a systematic framework of regular monitoring, evaluation, and continuous improvement – cyclical compliance – paired with mechanisms that alert management when things go wrong.

Arden Redstone can assist management and the board to design, deploy, and operate a compliance framework that makes sense for the organization.  Our approach is to support our clients by offering the following services:

    •  Assessments of regulatory and contractual obligations comparing the “as-is” to the             “how it should be”

   •  Governance framework design and deployment

   •  Risk assessment and mitigation planning

   •  Risk transfer

   •  Specialty compliance services
      – Export compliance: U.S. ITAR, EAR, and OFAC; Canada EIPA and Controlled Goods Program                 (CGP); India SCOMET
      – Merger & Acquisition: CFIUS, ITAR, contract due diligence
      – Equal Employment Opportunity (EEO)
      – Data privacy: GDPR. CCPA, CPRA

   • Compliance and contracts operational support

There is a compelling business case for governance, risk management, and compliance.  Companies want to do business with companies they feel reflect their own values.  Sound governance can protect directors and management from potential personal liability and protect the organization from reputational damage.

Arden Redstone:  World-class yet affordable corporate governance, risk management, and compliance consulting.