Compliance refers to the lawful conduct of companies, their executive bodies, and employees as an indispensable component of good corporate governance. Due to their general responsibility for legality and organization, board members and managing directors are obligated to ensure compliance throughout the entire company—and are accountable for doing so.

We support companies in introducing a tailor-made compliance management system. We usually proceed in four phases, tailoring the scope of the measures to your company and coordinating them with you:

1. Analysis and assessment in the form of a compliance audit, including an examination of the structural, organizational, and personnel measures that the company has already implemented in the context of compliance. The audit is based on the "maturity model," according to which the company is classified in terms of its "compliance maturity" based on defined criteria.
2. Risk audit to identify and assess relevant compliance risks. Based on the company's value chain, the risk audit is carried out using the most important business processes. All regulatory requirements such as laws, regulations, standards, internal rules, etc. are taken into account. Once the risks have been identified and assessed, appropriate measures are derived to effectively counter the risks using a defined risk strategy.
3. Based on the results of the two audits, an individual compliance management system (CMS) is developed and implemented for the company. The CMS covers important aspects such as culture, goals, organization, and communication. As part of the development of the CMS, measures are developed to ensure legally compliant behavior by the company and its employees.
4. Implementation of monitoring mechanisms for long-term control of the measures introduced. Verification of the effectiveness of the CMS by means of internal audits and an annual review.

As part of phase three or as a separate module, we raise awareness and train managers and employees within the company (in-house training).