Compliance is the lawful conduct of companies, their executive bodies and employees as an indispensable component of good corporate governance. Due to their general responsibility for legality and organization, board members and managing directors are obliged to comply with the law throughout the company - and are responsible for doing so.

We support companies with the introduction of a tailor-made compliance management system. We generally proceed in four phases, tailoring the scope of the measures to your company and coordinating them with you:

1. Analysis and stocktaking in the form of a compliance audit with an examination of the structural, organizational and personnel measures that the company has already implemented in the context of compliance. The audit is based on the "maturity model", according to which the company is classified in terms of its "compliance maturity level" based on defined criteria.
2. Risk audit to identify and assess the relevant compliance risks. Based on the company's value chain, the risk audit is carried out using the most important business processes. All regulatory requirements such as laws, ordinances, standards, internal regulations, etc. are taken into account. Once the risks have been identified and assessed, suitable measures are derived to effectively counter the risks by means of a defined risk strategy.
3. Based on the results of the two audits, an individual compliance management system (CMS) is set up and implemented for the company. The CMS includes important aspects such as culture, objectives, organization and communication. As part of the development of the CMS, measures are developed to ensure legally compliant behavior by the company and its employees.
4. Implementation of monitoring mechanisms for long-term control of the measures introduced. Reviewing the effectiveness of the CMS by means of internal audits and an annual review.

As part of phase three or as a separate module, we sensitize and train managers and employees in the company(in-house training).