Trish Pierson

As compliance officers, we can be valuable partners to the business by building a solid relationship with them. This starts by getting a seat at the table where problems are discussed and decisions are made. Once invited, we must gain their trust, which is usually challenging. I´ve learned over time (and I agree with Dana McMahon) that we need to show up with a proactive and problem-solving mindset, offer solutions and anticipate their needs, roll up our sleeves, and work closely with the other gatekeepers to keep the business safe. One key insight from this podcast is the reminder that every compliance risk is a business risk. As compliance officers, we have a crucial role in raising this awareness within the business. By doing so, we can collaborate effectively to prevent, detect, or respond to these risks, safeguarding the organization's long-term success. Make sure not to overlook this podcast; each of its 8 minutes is packed with valuable insights that can significantly enhance our professional knowledge and understanding.

19

1 Comment

In the latest issue of MNCPA's Footnote Magazine, James Powell, Minneapolis OMP, discusses how a greater understanding of mental health and work/life balance today has sparked a trend of firms developing culture in a more meaningful and deliberate manner. https://bit.ly/4guX1ew

5

The landscape of corporate compliance continues to evolve. With the DOJ’s September 2024 revision to their Evaluation of Corporate Compliance Programs, organizations are urged to reassess the effectiveness of their programs in light of new expectations. The revised guidance highlights several key areas: • Adaptability of Compliance Programs: Programs should be dynamic, tailored to the company’s evolving risks, and capable of being updated as necessary. • Effective Use of Data and Technology: Companies are now expected to leverage data analytics not just for detecting compliance issues, but for predicting and preventing potential risks. • Corporate Culture and Tone from the Top: The importance of leadership in fostering a culture of compliance is more emphasized, with a focus on how senior executives drive ethical behavior. • Incentives and Disciplinary Measures: Companies must demonstrate how they incorporate compliance into employee evaluations, promotions, and incentives, while also enforcing disciplinary measures for misconduct consistently. • Third-Party Management: A renewed focus on managing third-party relationships and ensuring that compliance expectations extend across the value chain. These changes underscore the importance of maintaining a proactive, data-driven approach and integrating compliance into the fabric of corporate decision-making. What are your thoughts on these updates? How is your organization preparing to align with the DOJ’s latest guidance? https://lnkd.in/g4yhNMcR

11

For many CAE's and Heads of Audit, Q4 means Audit planning for next years Audit Plan, Cybersecurity vulnerabilities, IT governance, regulatory complexity and digital transformation are top risks that CAEs are currently prioritizing. Explore the top risks trends for audit leaders in the Gartner Hot Spots report. Gartner for Legal, Risk & Compliance | #GartnerLegal #Audit #Risks #CAE

5

This week I am attending Society of Corporate Compliance and Ethics (SCCE)'s Compliance & Ethics workshop-it's been super informative to see and hear about some of the differences between my role and others in the space and their programs! Yesterday we had some great sessions on effective policies and procedures-I really enjoyed Andrea Falcione, JD, CCEP's session on this topic. She emphasized: 🎯 Policies and procedures alone are not sufficient to ensure compliance (some of us have learned this the hard way sadly haha!) 🎯 She discussed the importance of remembering how much emotion plays into decision making, especially when it comes to influence and information. 🎯 Information alone won't change behavior-we all learned this during the last election, sometimes sharing information can make a situation worse and not convince someone to think like you think or do what you want them to do. 💡 She also shared some case studies to bring these points home-one was the elevator experiment. If you get in an elevator, and everyone is facing the opposite direction, what would you do? Here is a YouTube video I found on this which was so fascinating to watch! https://lnkd.in/gUmjB-W8

11

1 Comment

The relationship a CAE has with their CISO is important. When a solid relationship is established, Internal Audit is in a better position to provide assurance over one or more of the top risks within their organization - cyber security. - They’ll receive more context to the information provided to them. - They’ll receive more buy-in for the recommendation(s) they may make. - They are more likely to be seen as a credible business partner and have a good reputation in their organization. To cultivate and reinforce this relationship, Internal Audit can increase awareness and support the CISO in areas where they possess established expertise. - Documenting internal controls - Facilitating risk assessments - Internal controls testing - Issue management and resolution process Internal Audit’s assistance in these areas will also help the CISO and her team better manage cyber security risk. In my new blog, I further explore these four ways Internal Audit can “level-up” their partnership with their CISO. AuditBoard #InternalAudit #EnablingPositiveChange https://lnkd.in/epVSXPk2

22

1 Comment

HDA is urging FDA to adopt a phased in approach for the serialization components of the DSCSA. If you've been involved in DSCSA for any length of time, you would know that for other requirements, the FDA did just that. Instead of going with the entire supply chain going live with serialization on November 27, 2023 (regulatory date), the FDA issues a non-enforcement "stabilization period" of 1 year to allow industry partners more time to be ready, but there are still some in the industry that will not be ready until November 26th. How can this work for November 27, 2024 (enforcement date)? Inmar's DSCSA solution, RxTransparent is ready for serialization for dispensers. Contrary to what certain competitors are stating, we stand on the merit of our solutions and proudly are a trusted partner within the dispensing community. Remember Inmar's DSCSA solution, RxTransparent was built and designed for dispensers when the "other solutions" didn't care, WE DID and built a platform with pharmacists input to handle real world pharmacy challenges, while also complying with a federal regulation! So thank you #HDA for representing the entire Pharma Supply Chain!! #InmarJourney #TrustedPartner #RxTransparent #DSCSA

7

Big news in the compliance world! How are you pivoting to address DOJ's new Evaluation of Corporate Compliance Programs guidance? Check out my blog (co-authored with the wonderful Crystal Jezierski) for some ideas and tips.

18

Proud to be member of this amazing Compliance Community at Society of Corporate Compliance and Ethics (SCCE)! #MemberDay to remember: failing is not an option, so learning and sharing is the way. Being a compliance officer it´s a mission, not a career. Come to learn more about Society of Corporate Compliance and Ethics (SCCE) and everything it can provide you. #SCCEHCCAmemberday, #Memberday #compliance #ethics #SCCEHCCAmemberday

98

18 Comments

There’s no doubt that AI in healthcare is shaping our future. That’s why at Accolade, we talk about AI and the ways that this technology is impacting our industry. Having these important conversations is the first step toward understanding how we want to interact with and implement this technology. It’s an essential part of the journey toward better patient experiences and outcomes. #Accolade #AIInHealthcare #PatientCare

15

GRC Uncensored in now live! Join me and Elliot V. as we dive deep into the truth about what is actually happening in the world of GRC. In our first episode, we were joined by Kendra Cooley to discuss how compliance is transforming into a commodity and how "SOC-in-a-box" is devaluing SOC 2. We don't hold back! In fact, there could be SOC 2 reports in a trash can in Kendra's office, but that remains to be determined. See the comments for a full link to the episode and share your feedback!

113

24 Comments

Looking forward to sharing some of my tips based on 25+ years experience as a CSO, CISO and CIO on how to tell stories to boards, executives, shareholders and auditors in order to build trust and create understanding of your security and transformation programs. #ChiefStoryTellingOfficer, Bitsight #cyberRiskManagement #Reporting #RegulationsForBusinessAdvantage

6

1 Comment

These reviews make me so happy! I love knowing that my book has helped readers by providing actionable insights. If you’ve read (or listened to) Beyond Agile Auditing, please leave a review on Amazon or wherever you purchased it. Bonus points if you also provide your feedback in the comments below. #audit #internalaudit #auditor #agile #agility #technology

25

Assertive and approachable. These are terms that the HHS Office of Inspector General uses to describe an effective #Compliance officer. There has been less discussion of this point than the recommendation about direct reporting to the #CEO or the #Board. But having a #CCO that achieves the balance of assertiveness and approachability may be as important as the question of where that individual reports.

60

4 Comments

It's of no surprise that NIST won an award for their efforts in developing CSF 2.0. NIST released it CSF 2.0 update in February 2024, a much need update to the CSF that included governance, regulatory compliance, risk management and an increased focus on supply chain risk management. NIST CSF is a well known framework and adopted by FISMA, U.S federal cyber regulation. As well as many industry sectors globally as a the controls framework for cybersecurity and cybersecurity risk management. That will be increasingly required by entities covered by the increasing amount of global cyber regulations. We were pleased to present CSF 2.0, U.S and EU cyber regulation, governance and the role internal audit plays in the oversight, assurance and attestation of cybersecuirty risk management, The Institute of Internal Auditors Inc. this week. Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Ryan Buckner @ Veritas GRC National Institute of Standards and Technology (NIST) #csf2 #cybersecurity #cyberriskmanagement #cyberregulation

16

1 Comment