エピソード

  • Navigating DOJ's Evolving Self-Disclosure Strategies

    Navigating DOJ's Evolving Self-Disclosure Strategies
    2026/04/29
    The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore the subject more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss a recent Law360 post by Hui Chen on the evolving calculus for self-disclosure. Hui Chen’s insights into the Department of Justice’s (DOJ) evolving self-disclosure strategies are crucial for companies navigating the complexities of compliance in today’s uncertain regulatory environment. As a former DOJ compliance counsel and a Microsoft compliance officer, Chen emphasizes the challenges posed by a politicized, understaffed DOJ, urging companies to reassess their compliance programs amid shifting enforcement dynamics. Tom and Matt echo Chen’s concerns regarding the DOJ’s current state. Tom, acknowledging Chen’s expertise, highlights the impact of the department’s politicization and understaffing on the effectiveness of compliance efforts, while Matt underscores the importance of proactive self-disclosure despite uncertainties, stressing the potential risks of inaction under the current administration. Both agree that the fractured nature of the DOJ requires a reevaluation of traditional compliance and self-disclosure strategies. Key highlights: Navigating DOJ Self-Disclosure Strategies with Wei Chen Justice Department’s Impact on Corporate Prosecutions Mitigating Criminal Violations through Self-Disclosure Benefits of Self-Disclosure in Corporate Enforcement Resources: Hui Chen on Law360 (sub req’d) Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    23 分
  • Banking Regulators Cut Model Risk Guidance: Implications for Compliance, Audit, and AML Oversight

    Banking Regulators Cut Model Risk Guidance: Implications for Compliance, Audit, and AML Oversight
    2026/04/22
    The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore it more fully, and looking for some hard-hitting insights on compliance. Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss new Federal Reserve, FDIC, and OCC model risk management guidance issued late Friday, arguing it replaces detailed, bright-line expectations with thin, principles-based language. They contrast the prior OCC guidance (109 pages) with the new 12-page document, saying it describes model risk governance abstractly but offers little direction on what banks should do, leaving decisions about materiality and oversight to management. They highlight practical consequences for bank compliance and internal audit, including reduced leverage to insist on prudent governance, potential weakening of AML model oversight under the strict-liability Bank Secrecy Act, and the risk of more arbitrary enforcement amid reduced regulatory staffing. They also note that the guidance excludes AI models, with future AI guidance promised only through a later comment process. Key highlights: From 109 pages to 12 Principles vs specifics debate Internal audit sidelined Regulators and capacity cuts AI models left out Resources: Matt on Radical Compliance Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    23 分
  • Surveying Retaliation Against Compliance Officers

    Surveying Retaliation Against Compliance Officers
    2026/04/15
    The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore it more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss a new anonymous Radical Compliance survey, launched with Case IQ and Compliance Week, to quantify retaliation against compliance officers who raise compliance concerns to senior management. The survey asks what misconduct was reported, who retaliated, what forms of retaliation took place, such as firing, demotion, harassment, budget cuts, blacklisting, and what actions followed. Matt also encourages responses even from those who have not experienced retaliation. Tom and Matt have previously discussed anecdotally but have not systematically studied, and plan to publish their findings and host a webinar later in the spring, likely in June. They also discuss potential structural protections informed by data, such as disclosure expectations around CCO departures (e.g., 8-K concepts) and contract/regulatory-approval models like those in India’s banking sector, and suggest that the findings could inform DOJ views on compliance autonomy and effective compliance programs. Key highlights: Survey Launch Explained Retaliation Questions Why This Study Matters Defining Prevalence Using Findings for Change Final Call to Participate Resources: Matt on Radical Compliance Survey on Retaliation Against Compliance Professionals Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    17 分
  • Duty Owed vs. Material Nonpublic Information: Prediction Markets and Compliance

    Duty Owed vs. Material Nonpublic Information: Prediction Markets and Compliance
    2026/04/08
    The award winning, Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss the prediction markets and what they mean for compliance. Tom and Matt focus on the phrase “violation of a duty owed” by employees and notes that this standard appears significantly broader than traditional insider trading laws. They explain that insider trading law centers on the disclosure of material nonpublic information, whereas a “duty owed” framework emphasizes the underlying duty itself. Because “duty owed” could encompass many different types of obligations beyond material nonpublic information, the speaker highlights the potential compliance implications and expresses interest in exploring a related hypothetical scenario. Resources Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award winning podcast, Compliance into the Weeds was most recently honored as one of a Top 25 Regulatory Compliance Podcast and a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, Communicator and w3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    25 分
  • AI-Driven SOC Audits and the Growing Trust Gap

    AI-Driven SOC Audits and the Growing Trust Gap
    2026/04/01
    The award winning, Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss concerns that AI-driven automation may be weakening SOC 1 and SOC 2 audits used to assure vendor financial reporting controls and cybersecurity/privacy controls. They focus on allegations by an anonymous whistleblower (“Deep Delver”) that tech startup Delve fabricates audit documentation with AI and relies on audit firms to rubber-stamp reports, claims Delve denies, potentially undermining trust in hundreds of SOC reports. Beyond Delve, they warn that startups are “fracturing” the traditional SOC audit model, driving timelines and costs from months and tens of thousands of dollars to days and a few thousand, encouraging check-the-box, low-quality audits, sometimes via little-known overseas firms. They note regulators are unlikely to intervene, leaving companies to reassess due diligence and the real assurance value of SOC reports. Key Highlights · Delve Whistleblower Claims · Red Flags in Audit Firms · How SOC Audits Work · Check the Box Trap · Regulatory Blind Spots · What Companies Should Do Resources Delve accused of misleading customers with ‘fake compliance’ in YaHoo!Finance Delve response Promises of ‘fast and easy’ threaten SOC credibility in Journal of Accountancy Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award winning podcast, Compliance into the Weeds was most recently honored as one of a Top 25 Regulatory Compliance Podcast and a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, Communicator and w3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    23 分
  • Balt and TradeStation: Lessons for the Compliance Professional

    Balt and TradeStation: Lessons for the Compliance Professional
    2026/03/25
    The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore it more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly look at the Declination awarded to Balt SAS and the OFAC enforcement action involving TradeStation. First, they review a Corporate Enforcement Policy declination for French medical-equipment company BAL SAS and the company’s U.S. subsidiary after self-disclosing, cooperating and remediating misconduct involving a U.S. subsidiary executive and a Belgian consultant allegedly funneling about $600,000 in bribes to a French public hospital official using sham consulting agreements, invoices, and poor documentation; BAL disgorged about $1.21 million in profit on roughly $1.68 million in revenue and disclosed while its internal investigation was still ongoing, raising timing and high-margin red-flag issues. Second, they cover OFAC’s $1.1 million settlement with TradeStation for accidentally disabling sanctions-screening controls for nearly a year, enabling hundreds of transactions from Iran, Syria, and Crimea; despite having layered tools on paper, IT changes and lapsed subscriptions undermined those controls, underscoring the need for ongoing monitoring, testing, and auditing. Key highlights: Balt FCPA Case Disclosure Timing Profit Margin Red Flags Controls and France Angle TradeStation Overview How Screening Failed Monitoring and Accountability Costs and OFAC Lessons Resources: Matt in ⁠Radical Compliance⁠ Tom in the ⁠FCPA Compliance Report⁠ Tom ⁠Instagram⁠ ⁠Facebook⁠ ⁠YouTube⁠ ⁠Twitter⁠ ⁠LinkedIn⁠ A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    27 分
  • McKinsey’s Lilli AI Hack: What It Signals for AI Governance, Security and Disclosure

    McKinsey’s Lilli AI Hack: What It Signals for AI Governance, Security and Disclosure
    2026/03/18
    The award winning, Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly look the recent hack of McKinsey’s AI tool Lilli. Tom and Matt discuss a Financial Times report that a white-hat hacker, Paul Price of one-person firm Code Wall, exploited flaws in McKinsey’s internal AI tool “Lilli” to access millions of internal chat messages, view sensitive client-related file names, and see the model weights used to train the system; McKinsey patched the vulnerabilities after disclosure. They argue the incident highlights emerging AI risks beyond traditional cybersecurity, including AI agents autonomously scouting for targets, the possibility of attackers altering models to change outputs and create hard-to-detect “drift,” and confusion over who inside organizations owns AI security and governance. The episode also explores the messy, inconsistent disclosure landscape for AI-related incidents and urges compliance and GRC leaders to slow AI adoption, pressure-test systems, clarify accountability, ensure kill-switch/manual fallback capabilities, and consider reputational fallout. Key Highlights · McKinsey AI Hack Overview · Three Big Implications · Model Drift and Tampering · GRC Playbook for AI Risk · Accountability and Kill Switches Resources Matt in Radical Compliance Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award winning podcast, Compliance into the Weeds was most recently honored as one of a Top 25 Regulatory Compliance Podcast and a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, Communicator and w3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    20 分
  • Carrots and Sticks in Washington: Antitrust Whistleblowers and an FCPA SOL Extension

    Carrots and Sticks in Washington: Antitrust Whistleblowers and an FCPA SOL Extension
    2026/03/11
    The award winning, Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly look two recent developments sending a common message to compliance teams. First, DOJ antitrust official Daniel Glad warns that a new Antitrust Whistleblower Awards program and increased pursuit of prison time for individuals compress companies’ timelines to investigate and self-disclose, because insiders may report first and cost those firms potential leniency. Second, Senate Democrats led by Elizabeth Warren propose the FCPA Reinforcement Act to extend the FCPA statute of limitations from five to 10 years for an eight-year window, aiming to preserve future enforcement capacity for misconduct occurring now. They connect these “sticks” with “carrots” such as fast declinations for self-disclosure, emphasizing the need for robust compliance programs, strong reporting culture, prompt investigations, and clear decisions on disclosure regardless of who controls Washington. Key Highlights · Two Washington Signals · Antitrust Whistleblower Push · FCPA Reinforcement Act · Carrots Sticks and Culture · Why Internal Reporting Matters · Self Disclosure Through Line Resources Matt in Radical Compliance here and here Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award winning podcast, Compliance into the Weeds was most recently honored as one of a Top 25 Regulatory Compliance Podcast and a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, Communicator and w3 Award, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices
    続きを読む 一部表示
    19 分