The main goal of a compliance organization is to comply with all applicable laws and rules throughout the Group. The organisation should guarantee the best possible advice and support in all areas of the Group.
The organisation resulting in the light of compliance is complemented by hedging levels in decision-making processes and throughout the supervisory organisation. Rechtsanwalt Dipl.-Ing. Michael Horak, LL.M.
Local contact
For a globally operating company, a global network of local contact persons should ensure compliance with the standards and support implementation. A local contact person sets the Compliance programme together with local management.
Information flow
A smooth regular flow of information between the Executive Board and the Compliance Officer transmits the current status of the compliance management system and its further development to a company's top management.
Operational – Process organisation
The operational part of the compliance management system is the compliance organization in which the systematic processes of the compliance program take place. These include the elevations, expert opinions and inspections of the information collected.
From the storage of files through a reporting system to monitoring and control, numerous compliance processes are required for the operational process. It also includes internal regulations and document management. Other aspects of the process organisation are, such as reporting to the management and clear guidelines for ad hoc reporting or how a compliance incident should be managed.
Indicative system
With a whistleblowing system, checks and monitoring are carried out within a company.
Business units such as the HR department, the Legal department or the Compliance department are suitable as reporting centres. In these departments, the expertise for the task is best to be found. Confidentiality and speed are the characteristics that are important for a notifier to function successfully. The employee who reports something should remain anonymous. In order to ensure identity protection, no evidence of its identity may be disclosed.