Monitoring a compliance management system with GlobalSuite®

A compliance management system brings together everything that helps a company meet its obligations: criminal, tax, operational, employment and more. In many countries it also reduces or removes the company's legal and criminal liability, if it can show it had the right means and procedures in place.

This guide goes through each requirement of the system and how GlobalSuite® handles it. It is for Compliance Officers and compliance teams who need to keep the whole cycle under control and have the evidence ready for management or auditors.

Where it applies

Italy, Chile, Spain, Mexico, Peru, Argentina, Brazil, Portugal and Costa Rica, among others, have built criminal compliance into their law, each in its own way. The guide summarises the rules in Argentina (Ley 27.401), Chile (Ley 20.393, expanded by Ley 21.595), Colombia (Ley 1778) and Mexico.

What's in the guide

1. Scope, roles and objectivesContext, stakeholders, the Compliance Officer and other roles, and objectives with owners and deadlines.
2. Risk analysis and assessmentA catalogue of compliance risks, inherent risk and the acceptable risk level.
3. Controls and risk treatmentResidual risk, the four treatment options and how to decide which risks the plan tackles first.
4. Whistleblowing channelWhy it is one of the most important controls and how to handle each report from receipt to resolution.
5. Indicators and auditsMeasuring control effectiveness, internal audits at least once a year and corrective actions.
6. Other useful featuresDocument manager, versions, history, reports, meeting minutes and gap analysis against any standard.

Standards covered

The guide works with UNE 19601 (criminal compliance), ISO 37301 (compliance management systems) and ISO 37001 (anti-bribery). It also mentions Spain's Law 2/2023, which requires companies with 50 or more employees to have an internal reporting system.