{"id":15281,"date":"2021-07-14T17:16:30","date_gmt":"2021-07-14T15:16:30","guid":{"rendered":"https:\/\/duthler.nl\/services\/compliance\/"},"modified":"2024-03-28T15:35:14","modified_gmt":"2024-03-28T14:35:14","slug":"risk-and-compliance-management","status":"publish","type":"page","link":"https:\/\/duthler.nl\/en\/services\/risk-and-compliance-management\/","title":{"rendered":"Risk and Compliance Management"},"content":{"rendered":"\n
<\/span>
\n
<\/div>\n\n\n\n
\n
\n

Is your risk and compliance management adequate?<\/h2>\n\n\n\n

Being responsible or accountable<\/em> for organizing compliance with legal, policy and contractual obligations is central to the business compliance function. The findings from the risk and compliance studies feed into the foundation of corporate compliance. The aim of (IT) risk management is to adequately respond to vulnerabilities in the administrative and technical organization that threaten business continuity. The purpose of the corporate compliance function is to enable management to be accountable based on baselines that include the requirements of its own policies, contractual and legal obligations.<\/p>\n\n\n\n

The accountability forms a starting point for improving the organization of business activities.<\/p>\n\n\n\n

Under pressure from new legislation and related supervision by competent supervisors, the supervisory or compliance burden is increasing. Chain partners are also increasingly requiring demonstrable compliance with the law and agreements. Companies of any size are used to compliance pressures. This pressure is new for small businesses. They often experience this as oppressive.<\/p>\n\n\n\n

\n
Interested? Please, feel free to contact us.<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
\n
\"\"<\/figure>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div><\/div>\n\n\n\n
<\/span>
\n
<\/div>\n\n\n\n

An overview of our services <\/h3>\n\n\n\n

Does management perceive compliance efforts as a burden or cost? Then the (corporate) compliance function develops with difficulty. Does management recognize that the position can contribute to business continuity? Then added value is created. <\/p>\n\n\n\n

Check out our risk management and compliance services below.<\/p>\n\n\n\n

\n
\n

Baseline measurement on your (corporate) compliance function<\/strong><\/p>\n\n\n\n

<\/strong>During a baseline assessment, we check the following points: ‘What is the status of the (corporate) compliance function?’ ‘Does risk and compliance management align with the business activities and what are the bottlenecks and areas for improvement?’ ‘How can risk and compliance management be organized more effectively and what does that yield?’<\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
\n

Managing (company-specific) baselines<\/strong><\/p>\n\n\n\n

Company management uses a range of related generally accepted and company-specific baselines and specifications. New and further interpretation of legislative, policy and contractual obligations as well as improving management measures give rise to regular updates of baselines. Management’s responsibility includes both the “static” baselines and the compliance process. <\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
\n
\n

IT Risk Management in the Cloud<\/strong><\/p>\n\n\n\n

Companies are increasingly using cloud services. Rightly so because the cloud offers many benefits to businesses. Direct responsibilities shift but the company retains ultimate responsibility and therefore faces risks in the extended chain. Regardless of the cloud layer taken, the company is always responsible for assigning authority, managing data and using devices on the network. <\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
\n

IT Compliance in the Cloud<\/strong><\/p>\n\n\n\n

The cloud offers good opportunities to perform compliance. In the process, it can be automatically determined that various standards frameworks are met. The compliance officer provides guidance and support in this regard. <\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
\n
\n

Internal control<\/strong><\/p>\n\n\n\n

Periodically, a company determines the effective operation of established management and security measures in systems that support business processes and through which business activities are organized. In compliance work, baselines help the employee or professional estimate the maturity level of control. The control measures can be organized “by design” in systems or implemented by employees.<\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
\n

Contract management and compliance<\/strong><\/strong><\/p>\n\n\n\n

The continuous determination of compliance with contractual obligations and in sufficient use of the rights can be seen as a special form of compliance. In the contract life cycle, it’s called contract management. Given the leading role of our professionals in organizing an effective corporate legal function, we pay special attention to this.<\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
\n
\n

Risk and compliance management training program<\/strong><\/p>\n\n\n\n

Applying risk and compliance management requires the attention of company leadership, department management and employees. Most employees will ask why risk and compliance management is necessary and what the added value is to the company, the department and the employee. Awareness and training programs are needed to convey the knowledge about compliance before they can properly implement it during their daily work. <\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
\n

Risk and compliance support on demand<\/strong><\/strong><\/p>\n\n\n\n

We support companies with knowledge bases, webinars, and training so that a company is able to self-organize the corporate compliance function. If help is still needed, for example due to lack of capacity, a company can call on one of our compliance professionals.<\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
\n
\n

Drawing up a suitable business case<\/strong><\/p>\n\n\n\n

Organizing the corporate compliance function can only be successful if there is sufficient value added to the company, department and employees. Each step requires a business case with revenue and cost streams. <\/p>\n\n\n\n

\n
Read more<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div><\/div>\n\n\n\n
<\/span>
\n
<\/div>\n\n\n\n

Frequently Asked Questions<\/h2>\n\n\n\n
\n
What is the (corporate) compliance function?<\/strong><\/div><\/summary>
\n

There is no unambiguous definition of compliance. In the financial sector, the role of compliance officer has been elaborated and the purpose of compliance is to establish compliance with laws and regulations.<\/p>\n\n\n\n

We see more and more new (European) legislation with compliance arrangements. The subjects, usually the companies and the management, are responsible for organising compliance with legal and contractual obligations. They must account for the (degree of) compliance. This places the supervisory burden on the subjects.<\/p>\n\n\n\n

As this legislation is pushed through with compliance arrangements, companies \u2013 regardless of size and type \u2013 will need a practical, integrated and effective approach to compliance.<\/p>\n\n\n\n

We apply such a compliance approach to companies. A company that takes responsibility \u2013 and disseminates accountability \u2013 for the realisation of its own mission and vision or its policy gains the trust of its partners (customers, employees and suppliers). It enhances her reputation. <\/p>\n<\/div><\/details>\n\n\n\n

Is the use of MYOBI Trust Network and applications necessary for organizing a comprehensive compliance approach?<\/strong><\/div><\/summary>
\n

No, organizing an integrated compliance approach can be organized in a traditional way. It is recommended to use the trust network to organize an effective risk and compliance management. The basis for an effective compliance operation is reliable company and personal data. <\/p>\n<\/div><\/details>\n\n\n\n

What are baselines. Does that include a standards framework and functional and non-functional specifications to an IT system?<\/strong><\/div><\/summary>
\n

We describe a baseline as an overview of management objectives that a company wishes to maintain or achieve. This lists the measures (for each maturity level) that allow a company to measure whether the objective has been met and make adjustments if necessary. <\/p>\n\n\n\n

The baselines are based on general standards frameworks such as ISO and NEN (good practices) and legal frameworks such as the GDPR. Baselines can be made company specific by supplementing them with company objectives and contractual rights and obligations. A baseline can also be drawn up specifically for a business activity, for example a baseline with functional and non-functional specifications for the purchase of an application in the cloud or the purchase of an IT system.<\/p>\n<\/div><\/details>\n\n\n\n

What is the difference between the term “internal control,” “compliance” or “internal control”?<\/strong><\/div><\/summary>
\n

We recognize no difference:<\/p>\n\n\n\n