Compliance Monitoring and Monitorships

A compliance monitor is an outsider placed inside a company to test whether it is doing what it promised. The arrangement usually arises from a settlement rather than a trial: a firm accused of a serious compliance failure agrees to reform, and an independent monitor is appointed to verify that the reform is real. It is an unusual remedy, because it puts someone with a mandate to report to a regulator inside the organisation that is being examined.

How a monitorship comes about

Monitorships appear most often where a company has resolved allegations of bribery, sanctions breaches, money laundering or fraud without a contested trial. The settlement sets out what the company must do, and the monitor is the mechanism for checking it. The terms matter as much as the principle: who selects the monitor, what the monitor may examine, who receives the reports and for how long. Those terms are negotiated, and a company that pays attention to them early has a more workable arrangement than one that accepts a template.

The monitor is normally independent of the company and of its advisers. Independence is the point, because a monitor whose work depends on the goodwill of the company it examines cannot perform the role. Selection usually involves a proposal, references and, in some processes, the approval of the authority that imposed the requirement.

What a monitor actually does

The work is closer to audit and investigation than to consulting. A monitor reviews policies, but does not stop there, because a policy proves nothing about behaviour. It tests controls by looking at transactions, at how alerts were handled, at what happened to reports of concern, and at whether the people who are supposed to apply a rule actually know it. It interviews staff, from senior management to the people who process payments and onboard customers. It compares what the company says it does with what its own records show it did.

The most useful tests are specific. Rather than asking whether the firm has an anti-bribery policy, a monitor may take a set of payments to intermediaries and trace each one from approval to bank to service delivered. Rather than asking whether staff are trained, a monitor may look at who completed the training and what happened to those who did not. Specific tests produce findings that a company cannot argue with, and they are the reason a monitorship can change behaviour rather than produce a report.

Reporting lines and the awkwardness of the role

A monitor reports to the authority that appointed it, and often also to the company's board. That dual position is the source of the role's difficulty. The company pays for the work, and the monitor must remain willing to report something the company would prefer not to hear. The practical safeguards are a defined scope, a clear reporting calendar and a rule that the monitor's findings go to the authority regardless of the company's view. A monitor who softens a finding to preserve the relationship has failed at the only task that matters.

Monitoring inside a firm that is not under a settlement

Not all monitoring follows a settlement. Regulated firms run their own monitoring programmes as part of ordinary compliance: testing controls, sampling transactions, reviewing how alerts are closed, and following up on the failures found. The logic is the same as a monitorship applied internally. The difference is that the firm controls the scope and the reporting, which is also the weakness, because an internal review that reports only to the people whose work it examines is easy to blunt.

The remedy in practice is independence within the firm: a monitoring function that reports to a board committee or an audit committee rather than to the business it tests, and a written record of what was found and what was done about it. The section on compliance describes how monitoring sits within a wider programme of policy, training, risk assessment and reporting.

The end of a monitorship

A monitorship has a term, and the term should end. The settlement usually sets a minimum period and a test for release: that the company has implemented the required reforms and that the monitor can certify it. The certification is a serious document, because it is a statement that the controls now work, and a monitor who gives it too readily risks being the last person to have said a failing firm was fixed. Where the reforms are incomplete, the arrangement is extended rather than closed with a caveat.

What companies get wrong

The most common mistake is to treat a monitorship as a public relations problem rather than a control problem. A firm that manages the monitor, limits access, prepares staff for interviews and argues about every finding will spend the term defending its reputation and end it with the same weaknesses. The firms that do well tend to do the opposite: give the monitor what it asks for, fix what it finds, and use the findings as an external test of controls that internal review had been too close to see. The cost of a monitorship is high either way; the difference is what remains at the end.

How this connects to the rest

A monitorship is downstream of a failure, and the failure was usually discovered by an investigation. The findings of that investigation shape the reforms a monitor will later test. Where the failure involved money movement, the monitor's work overlaps with the anti-money-laundering duties the firm owes, and where it involved records, with the handling of digital evidence.

Where to read about anti-bribery frameworks

The United States Department of Justice publishes its enforcement of the Foreign Corrupt Practices Act, including the resolutions that commonly create monitorships, and it is a useful reference for how corporate bribery cases are settled. The address is justice.gov.