SmartSuite for the Ethics and Compliance Lead

The code and its related policies in Policy Management carry review schedules, approvals and version history, so you can show which version an employee attested to and exactly when it changed.

Ethics and compliance training requirements are tracked against roles and completions recorded, with reminders to the overdue, so completion rates are a live figure rather than one you compile each quarter.

Each policy links to the risks and obligations it addresses, including FCPA and UK Bribery Act exposure, so when the Fraud Risk Manager reassesses a risk the policies that mitigate it are visible.

Each case in Complaints Tracking carries its investigation steps, findings and outcome, with the remediation that follows tracked in Issues Management, so the General Counsel and the HR Operations Manager can see that similar cases were handled consistently.

Reports arrive through forms that capture what triage needs and route by category, with the acknowledgement and feedback steps the EU Whistleblowing Directive requires tracked as tasks.

Where a speak-up report concerns fraud, the case links to the Fraud Risk Manager's investigation rather than duplicating it, so one record carries the evidence and both programs see the outcome.

Attestation rates, training completion, disclosures and case outcomes are kept with full history, so when prosecutors or regulators evaluate the program, the evidence of a working one is already in the record.

Dashboards combine disclosures, training, case volumes and time to close with culture indicators gathered through structured workflows, so the board sees whether the culture matches the policies.

The AI Assistant in a SmartDoc field drafts the ethics section of the board report from the recorded metrics and case summaries, so your time goes into judgment about the culture rather than into assembling the numbers.

Chief Compliance Officer

The Ethics and Compliance Lead runs the ethics program: the code of conduct and related policies, the conflicts of interest and gifts and hospitality disclosure processes, the speak-up channel and the triage of reports, ethics investigations and case management, ethics and compliance training and its completion, and the ethics metrics and culture indicators reported to leadership and the board. The US Sentencing Guidelines, the DOJ's compliance program evaluation and ISO 37301 all expect exactly those elements to exist and to be evidenced.

Policy Management manages the code of conduct and the ethics policies with attestation tracking, so every employee's acknowledgement is evidenced with who attested, to which version and when. The Ethics and Compliance Lead sees completion by department and chases the gaps rather than the whole organization, and when a policy is revised the new version goes out for attestation with the previous record retained. For a DOJ evaluation or an ISO 37301 audit, the attestation record is the evidence that the code was communicated.

SmartSuite runs the disclosure workflows for conflicts, gifts and hospitality with approvals and a searchable register, so an employee submits a disclosure, the right approver decides it and the decision is recorded where the Ethics and Compliance Lead can find it later. The register answers the questions that come up in an investigation or an anti-bribery review: who disclosed what, who approved it and whether a pattern exists with a particular third party. Approval rules apply consistently rather than depending on which manager received the email.

Complaints Tracking handles speak-up reports and investigations as cases with role-based access, investigation workflows and outcomes, so only the people assigned to a case can see it and the investigation steps, decisions and outcome are recorded on the case. The Ethics and Compliance Lead triages incoming reports, assigns investigators and involves the General Counsel or the HR Operations Manager on a case-by-case basis. Issues Management tracks the remediation actions that follow a case to closure. The restricted access is what ISO 37002 and the EU Whistleblowing Directive expect of an internal channel.

SmartSuite provides dashboards of training completion, disclosures and case metrics for board reporting, so the Ethics and Compliance Lead reports to the Chief Compliance Officer and the board from the live program: attestation and training completion, disclosure volumes and approvals, speak-up case volumes, categories and time to close. Culture indicators are drawn from the same data over time. Compliance Assessments & Testing shows whether the program's controls have been tested, which the board and a DOJ evaluation will both ask about.

Load the code of conduct and ethics policies with their current versions, the disclosure forms and approval rules for conflicts, gifts and hospitality, and the open cases from the speak-up channel. Attestation tracking starts with the next policy roll-out, disclosures move to the workflow immediately and new reports are logged as cases from the first day. The Fraud Risk Manager and the Policy and Governance Manager work in the same records where cases or policies overlap, so the Ethics and Compliance Lead is not maintaining a separate register for each.