SmartSuite for the Ethics and Compliance Lead

Policy management. Manages the code of conduct and ethics policies with attestation tracking so every employee's acknowledgement is evidenced.

Compliance management. Runs disclosure workflows for conflicts, gifts and hospitality with approvals and a searchable register.

Issues and actions. Handles speak-up reports and investigations as confidential cases with restricted access, tasks and outcomes.

Reporting. Provides dashboards of training completion, disclosures and case metrics for board reporting.

What does an Ethics and Compliance Lead own?

The Ethics and Compliance Lead runs the ethics program: the code of conduct and related policies, the conflicts of interest and gifts and hospitality disclosure processes, the speak-up channel and the triage of reports, ethics investigations and case management, ethics and compliance training and its completion, and the ethics metrics and culture indicators reported to leadership and the board. The US Sentencing Guidelines, the DOJ's compliance program evaluation and ISO 37301 all expect exactly those elements to exist and to be evidenced.

How does SmartSuite help an Ethics and Compliance Lead evidence code attestations?

Policy Management manages the code of conduct and the ethics policies with attestation tracking, so every employee's acknowledgement is evidenced with who attested, to which version and when. The Ethics and Compliance Lead sees completion by department and chases the gaps rather than the whole organization, and when a policy is revised the new version goes out for attestation with the previous record retained. For a DOJ evaluation or an ISO 37301 audit, the attestation record is the evidence that the code was communicated.

How are conflicts of interest and gifts and hospitality disclosures handled?

SmartSuite runs the disclosure workflows for conflicts, gifts and hospitality with approvals and a searchable register, so an employee submits a disclosure, the right approver decides it and the decision is recorded where the Ethics and Compliance Lead can find it later. The register answers the questions that come up in an investigation or an anti-bribery review: who disclosed what, who approved it and whether a pattern exists with a particular third party. Approval rules apply consistently rather than depending on which manager received the email.

How does SmartSuite keep speak-up reports and investigations confidential?

Complaints Tracking handles speak-up reports and investigations as cases with role-based access, investigation workflows and outcomes, so only the people assigned to a case can see it and the investigation steps, decisions and outcome are recorded on the case. The Ethics and Compliance Lead triages incoming reports, assigns investigators and involves the General Counsel or the HR Operations Manager on a case-by-case basis. Issues Management tracks the remediation actions that follow a case to closure. The restricted access is what ISO 37002 and the EU Whistleblowing Directive expect of an internal channel.

How does an Ethics and Compliance Lead report ethics metrics to the board?

SmartSuite provides dashboards of training completion, disclosures and case metrics for board reporting, so the Ethics and Compliance Lead reports to the Chief Compliance Officer and the board from the live program: attestation and training completion, disclosure volumes and approvals, speak-up case volumes, categories and time to close. Culture indicators are drawn from the same data over time. Compliance Assessments & Testing shows whether the program's controls have been tested, which the board and a DOJ evaluation will both ask about.

What does it take to bring an existing ethics program into SmartSuite?

Load the code of conduct and ethics policies with their current versions, the disclosure forms and approval rules for conflicts, gifts and hospitality, and the open cases from the speak-up channel. Attestation tracking starts with the next policy roll-out, disclosures move to the workflow immediately and new reports are logged as cases from the first day. The Fraud Risk Manager and the Policy and Governance Manager work in the same records where cases or policies overlap, so the Ethics and Compliance Lead is not maintaining a separate register for each.