​Bribery Risk and Controls. Enforcement Actions Show What Needs to Be in Place​

Comments Views

​July 2011 enforcement actions by the U.K. Financial Services Authority (FSA) and the Serious Fraud Office (SFO) against two companies identify critical components that you must have in place as part o​​f your anti-bribery processes. While they apply to UK and global companies under the jurisdiction of the U.K. Bribery Act, I think companies in every jurisdiction should ask whether they would pass the test.

The FSA acted against Willis Limited (an insurance broker) and Macmillan Publishers Limited, with total penalties in excess of 18 million pounds. The actions are covered in an article by the legal firm of Skadden, Arps.

The Macmillan case is also covered in the Wall Street Journal and in a blog dedicated to the Bribery Act. It talks as much about the need for companies to cooperate with investigations as that, according to the SFO, it was “plain that the company may have received revenue that had been derived from unlawful conduct.” The fact that the company reported the case itself to the SFO, after a report by the World Bank, may have reduced the still-significant settlement. All they ended up paying (apart from the cost of the investigation and being barred from bidding on World Bank tenders for three years) is the estimated profit on the deals where bribery is suspected.

The blog mentioned above summarizes the case succinctly:

The World Bank put out a contract to tender, for the provision of educational materials in Southern Sudan. An agent acting on behalf of Macmillan’s tried unsuccessfully to secure the contract by way of a bribe. (Worth remembering here that the Section 1 offence only requires the offer or promise of a financial or other advantage.  The more so if it’s actually given, and it doesn’t have to succeed).

The World Bank reported it to the City of London Police, and thence to the SFO.

Macmillan agreed to fund an investigation aimed at uncovering corruption risks within the organisation. In other words they were paying for someone else to police them. The investigation covered the various countries in Africa in which they currently carried on business which presented a potential risk of corruption, or where it had actually taken place in the past.

As a result, the SFO calculated that Macmillan had benefited to the tune of £11.2 million. They therefore sought and were granted a Civil Recovery Order in the High Court in that sum​​

The telling factors listed by the SFO as to why they chose the Civil recovery route really boil down to the fact that Macmillans fell over themselves to make full disclosure and give total co-operation to the investigation. They paid for it themselves, weren’t hugely guilty, and had lost the opportunity to tender for a lot of valuable work in the future. Also they were very sorry.

The FSA detailed three failures in Willis’ controls:

  • Between January 2005 and August 2008, Willis did not adequately establish and record the business rational for use of third parties; did not perform sufficient due diligence of third parties; and did not ensure that employees complied with record keeping and diligence requirements regarding third parties;
  • Willis introduced improved anti-bribery policies and guidance in August 2008, but did not ensure that the policies were adequately implemented; and 
  • Willis' board did not receive sufficient information from management to assess the performance of the company’s improved anti-corruption policies.

The Skadden analysis makes important points:

  • The FSA has firmly placed anti-corruption systems and controls on its watch list for regulated entities.
  • The Willis Final Notice makes clear that the FSA views anti-bribery controls as mandated by the FSA's Principles for Business, which require "adequate risk management systems."
  • Regulatory guidance emphasizes the importance of assessing risk, addressing risk, and ensuring appropriate internal escalation of risk and compliance procedures.
  • As an immediate matter, both enforcement actions underscore the importance of tailoring control procedures to specific industry and geographic risks. The FSA’s action in Willis demonstrates the importance of procedures that function in practice, and the necessity of fulsome internal reporting to senior management and governance bodies. 
  • The FSA and SFO have highlighted the importance of cooperation in an investigation, but the risks and benefits of voluntary disclosure and cooperation should be weighed on a case-by-case basis. In resolving the Macmillan investigation, the SFO emphasized the company’s compliance with its guidance regarding reporting overseas corruption. In so doing, the SFO has sought to underline the benefits of: i) fulsome and timely cooperation; ii) ongoing compliance enhancements before and throughout the investigation; and iii) agreeing to the appointment of a monitor.

Are your bribery and corruption controls in good shape? Have you completed a risk assessment and evaluated whether your controls are adequate to prevent inappropriate activity? Detection is probably not going to be enough.​


 

 

Comment on this article

comments powered by Disqus
  • SCCE_Sept IAO_Blog 1
  • IIA AEC Center_Sept IAO_Blog 2
  • IIA CAE-Audit-Intelligence_August2018_Blog 3