30
1 Helplines, Investigations, Case Management & Databases Patricia J. Ellis Vice President, Business Ethics and Compliance 2 Topics Establishing a Database Managing an Ethics Line Effective Internal Investigations Kirk Lavoie Paul Esposito Glen Schuhmacher

Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

1

Helplines, Investigations, Case Management & Databases

Patricia J. EllisVice President, Business Ethics and Compliance

2

Topics

• Establishing a Database

• Managing an Ethics Line

• Effective InternalInvestigations

Kirk Lavoie

Paul Esposito

Glen Schuhmacher

Page 2: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

2

3

Create Case in

EAS*

Receive Investigative

ReportEvaluate Results

• Advise Complainant of Results

• Obtain ComplainantSatisfaction Feedback

Close Out Corporate

Database (EAS*)

Close Out Local Case

File (History)

Determine Disposition

• Work with leadership to determine required corrective action or discipline

• Convene Ethics Committee, as appropriate

• Implement corrective action or discipline, if necessary

Yes

*Ethics Administration System (Database)

Interview and Take Note:

- In Person- Phone

Formal Case? Memo to File in EAS*

NoQuery and/or Allegation Received

by Ethics Office

Ethics Case Management (A Model)

**Timing of an initial voluntary disclosure is case sensitive and may occur at any point in this process (following an initial investigation)

Form Investigative

Team

Conduct Internal

Investigation

- Pulse Progress- Manage

InvestigationVoluntary

Disclosure**?Yes

No

To Cognizant U.S. Government Department/Agency

As Required

Establishing a Database

Kirk Lavoie

Page 3: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

3

5

EthicsLine Database

• Why track EthicsLine calls?

– Management reports– Trend analysis– Early warning indicators– Measure training program effectiveness– Consistent treatment– Investigation status (open, closed, substantiated …)

6

EthicsLine Database

• Getting Started ...

– Determine the required output• What data do you need on the reports• What level of detail or granularity is needed• Are there charts and graphs• What is the timing and frequency of the reporting• Do you need ad hoc reporting• Do you need to export the data to other systems

Page 4: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

4

7

EthicsLine Database

• Getting Started ...

– Determine the required output• Currently

>no ad hoc>no graphics>no export >static report layouts

• Considering>using other tools to access the data we have>replacement

8

Memorandum of Communications Log Case Number: Company: Reported by: Date: Segment: Telephone (w): Received by:Facility: Telephone (h): Input form:

Reported Data

Synopsis:Details of Issue:Other Data:Referred to:

Required Action:Reply due by:

Office of Business Ethics and Compliance COMPANY MOST PRIVATE

Page 5: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

5

9

Companies by DispositionActive during from-date to to-dateAlleged Misconduct

Co#1 Co#2 Co#3 Co#4 TotalDispositionSubstantiatedInternal ControlUnsubstantiatedTOTAL CLOSEDOpen as of to-dateTOTAL CASES

Office of Business Ethics and Compliance COMPANY MOST PRIVATE

10

Co#1 by DispositionActive during from-date to to-dateAlleged Misconduct

Div#1 Div#2 Div#3 TotalDispositionSubstantiatedInternal ControlUnsubstantiatedTOTAL CLOSEDOpen as of to-dateTOTAL CASES

Office of Business Ethics and Compliance COMPANY MOST PRIVATE

Page 6: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

6

11

Companies by CategoryActive during from-date to to-dateAlleged Misconduct

Co#1 Co#2 Co#3 Co#4 TotalCategoryBusiness CourtesiesContract ComplianceInternational RegulationsLabor ReportingOtherTOTAL CASES

Office of Business Ethics and Compliance COMPANY MOST PRIVATE

12

Co#1 by CategoryActive during from-date to to-dateAlleged Misconduct

Div#1 Div#2 Div#3 TotalCategoryBusiness CourtesiesContract ComplianceInternational RegulationsLabor ReportingOtherTOTAL CASES

Office of Business Ethics and Compliance COMPANY MOST PRIVATE

Page 7: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

7

13

Nature and Volume of CommunicationsCases Opened during from-date to to-date

Alleged Personnel Seeking Total %Misconduct Concerns Advice

Company #1Division #1Division #2Division #3

Company #2Division #1Division #2

TOTAL CASES

Office of Business Ethics and Compliance COMPANY MOST PRIVATE

14

EthicsLine Database

• Getting Started ...

– Determine the platform• What are the security concerns• What are the company standards• How many users • Where are the users• Do they have the resource requirements

Page 8: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

8

15

EthicsLine Database

• Getting Started ...

– Determine the platform• Currently

>stand alone >limited network sharing of data>everyone using the same system>FoxPro

• Considering>web enabled / served>multi user>dynamic

16

EthicsLine Database

• Getting Started ...

– Determine the input• Source of input• Will all the input be relevant for all users• Are there data items that can be entered as codes to

facilitate use>standardization >how stable or dynamic will these codes be

Page 9: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

9

17

18

EthicsLine Database

• Standard Case Types

– Alleged Misconduct– Personnel Concerns– Seeking Advice

Page 10: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

10

19

EthicsLine Database

Labor Reporting ImproprietiesMisuse or Abuse of AssetsQuality or Manufacturing IssuesRecords FalsificationTheftCompensation and Benefits IssuesDiscipline and Termination IssuesDiscriminationEmployee Misconduct - MiscellaneousEmployment and Placement IssuesIntimidation or HarassmentManagement Practices and Performance

RetributionSexual HarassmentSubstance Abuse

Standard Case Categories

Conflict of InterestContract ComplianceEnvironmental IssuesEstimating/PricingFinancial AccountingHealth and Safety IssuesInternational RegulationsMarketing IssuesProcurement IssuesProduct SubstitutionProprietary or Competitive Data

Business CourtesiesHealth and Safety Issuesother

20

EthicsLine Database

• Getting Started ...

– Back up / Recovery• How do I do this manually • How is the data backed up• How do I get it back• What is the security of the back up

Page 11: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

11

21

EthicsLine Database

• Getting Started ...

– Growth / Expansion• Will the system grow with my needs• Will it work on future platforms (hardware / software)• Can I update it without involving the supplier

Managing an Ethics Line

Paul Esposito

Page 12: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

12

23

Managing the EthicsLine

• Methods of Communication• Knowledge / Skills of the EthicsLine Administrator• Process / Confidentiality• Initial Risk Assessment• Scope of Ethics and Compliance Issues• Documentation • Assigning the Investigator• Closing the Case

24

Methods of Communication

• The Corporate EthicsLine & EthicsLine Tape– Toll-free– Staffed during business hours, Monday - Friday– Secured– Corporate office receives 58% of all contacts

• Fax– Toll-free– Staffed during business hours, Monday - Friday– Secured

• Office visit

Page 13: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

13

25

Methods of Communication

• Mail– P.O. Box– Inter-Company– Delivered directly to the Ethics Office– Secured

• E-mail via Ethics website– Internet– Intranet– Not secured

• Operations’ Ethics Officers– Toll-free – Point of Contact

26

Knowledge/Skills of the Administrator

• Company knowledge– Geographic locations– Company’s organizational structure, point of contact -

HR, Legal, Security, Finance, Audit, etc...– Company policy and procedures

• Knowledge of ethical reasoning and decision making models

• Background in Law/Audit/Contracts/Accounting/HR• Strong interpersonal skills

– Conflict management, interviewing, listening, coaching/counseling, handling “crisis” situations

• Sensitivity to cultural diversity– Geographic, ethnic, industry differences and corporate

subculturesWhen the phone rings, answer it!

Page 14: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

14

27

Process / Confidentiality

• Explain the investigation process– Keeps the caller informed, and earns their trust– Helps ease callers #1 fear

• Retribution– Retribution for good faith reports is not tolerated

• Self Identify– 73% of all callers self identify

• Confidential– Confidentiality will be respected to the maximum

extent possible• Anonymous

– Establish system to follow-up with anonymous callers

28

Initial Risk Assessment

• Initial report drives risk assessment and early stages of an investigation– Clarify the nature and scope of issues– Who, what, where, when, how and why?– Spot the issue, why is the caller really contacting

the Ethics Office?• Be a good listener and make the caller feel

comfortable• Active listening• Take detailed notes• “Is there anything else you would like to discuss?”

Page 15: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

15

29

Scope of Issues

• Alleged Misconduct– Labor reporting improprieties, misuse of assets,

procurement practices, FCPA, export compliance, conflicts of interest, etc...

• Personnel Concerns– Employment issues, disciplinary actions,

management practices, etc... – Employees encouraged to bring concerns to

management or HR (Ethics Office may assist with referral)

– 59% of all contacts receive immediate response or are guided to appropriate management/HR

30

Scope of Issues

• Asking Questions/Seeking Advice– Employees are most concerned about business

courtesies, benefits, potential conflicts of interest and employment/placement issues

• Constrained on matters covered by collective bargaining agreements or if party has retained legal counsel

Page 16: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

16

31

Documentation

• Transcribe notes into database as soon as possible• Just the facts• Maintain all supporting documentation with

assigned case number and include in case file• Documents are discoverable by legal process and

may be subject to voluntary disclosure

32

Assigning the Investigator

• Assign an Investigator who is objective, independent, and a subject matter expert– corporate or local

• Allegations of fraud, criminal conduct, other illegal activity– Consult immediately with Company General Counsel

• Allegations of security breach/compromise of classified data– Referred to Security Office

• Allegations of mischarging– Referred to Controller or Internal Audit

• Allegations involving product safety or quality– Referred to operation unit involved and Quality

Page 17: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

17

33

Closing the Case

• Allegations of Misconduct are coordinated with Corporate Ethics Office– Disciplinary actions - reasonable, fair and consistent– Corrective actions - financial adjustments, training,

improved controls– Reporter must be informed of results - verbally

Effective Internal Investigations

Glen Schuhmacher

Page 18: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

18

35

Ten Elements of an Effective Corporate Internal Investigation

• Step 1: Receipt of employee or stakeholder concern• Step 2: Case management• Step 3: Risk assessment & analysis• Step 4: Plan the investigation• Step 5: Determine required or prudent interim corrective

actions• Step 6: Conduct the internal investigation• Step 7: Factual analysis and determine final case concept• Step 8: Prepare the Report of Investigation• Step 9: Implementing the results of the investigation• Step 10: Case documentation

36

Receipt of Employee orStakeholder Concern

• Issue: The initial contact starts the investigation and can impact all subsequent steps.

• Lessons Learned:– Get as much information as possible– Earn the caller’s trust– Take detailed notes– Establish a way to contact the caller if necessary

Page 19: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

19

37

Ethics Case Management

• Issue: Fixing case management responsibility

• Lessons Learned:– Case manager establishes the investigative framework

or case concept but does not generally micromanage the investigation

– Case concept provides order and purpose to investigator actions

– Investigative requirements may grow and change– Fix case management responsibility BEFORE onset of

investigation – Case manager is Company focal point for investigative

status and findings that require immediate corrective action

38

Ethics Case Management

• Issue: Fixing case management responsibility

• Lessons Learned:– Know your investigative resources - establish Points

of Contact

• Security• Legal• Internal Audit• Quality• Supply Chain• Finance• Environmental, Health & Safety• Human Resources

Page 20: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

20

39

Conduct a Risk Analysis

• Issue: Collaborate with business unit and/or corporate office staff leaders in review and analysis of the reported allegations/concerns

• Lessons Learned:– Case management must be a collaborative process– Led by the ethics officer or responsible business

unit staff leader– Identify required investigative resources– Determine at the start if the attorney-client privilege

is required and reassess where necessary

40

Conduct a Risk Analysis

• Lessons Learned:– Seek early involvement of Law Department and

others (e.g., Government Accounting, Procurement, Quality, Security Investigations, etc.) knowledgeable in relevant law, regulation and Company policy and procedure. However, confidentiality is crucial and those informed of the allegation(s) and investigation must have “a need to know”

Page 21: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

21

41

Plan the Investigation

• Issue: Case manager and investigator roles and skill sets

• Lessons Learned:– Case manager must have multidiscipline knowledge

of laws, regulations and Company policies, rules and business processes

– Investigator(s) must have subject-matter expertise in matter(s) at hand

– Case manager and investigator(s) must be objective, independent and free of business unit or organizational bias/parochialism. Generally requires that such roles be performed at the next organizational level

42

Plan the Investigation

• Issue: Case manager and investigator roles and skill sets

• Lessons Learned:– Case manager collaborates with investigator(s) in

designing the case concept, scope and investigative strategy. Ensures that they have “room to roam”

– Identify role of investigator

Page 22: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

22

43

Determine Required or PrudentInterim Corrective Actions

• Issue: Implementing interim corrective action(s) pending completion of the investigation

• Lessons Learned:– It may be in the Company’s best interest to take

prudent interim corrective actions – Such actions may include temporary employee

reassignment, employee suspension, supplier suspension, etc.

– Reinforce that there is no tolerance for even the ‘appearance of impropriety’

44

Determine Required or PrudentInterim Corrective Actions

• Issue: Implementing interim corrective action(s) pending completion of the investigation

• Lessons Learned:– Investigative team provides facts, evidence of

wrongdoing and identifies internal control deficiencies for which corrective action would likely be appropriate

– Leadership’s job is to approve and implement interim corrective action(s) if appropriate

Page 23: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

23

45

Conduct the Internal Investigation

• Issue: Conceptualize the case and develop/implement an investigative strategy

• Lessons Learned:– Case manager conceptualizes the case and

formulates a Case Concept that:• Establishes the parameters for witness/subject

interviews and specific lines of questioning• Includes: leadership/staff inputs; results of

documentation reviews (including prior investigations), characteristics of the local business culture, initial results from early specialized audits, etc

• Frames and drives the investigative strategy and determines the actions of the investigator

46

Conduct the Internal Investigation

• Issue: Conceptualize the case and develop/implement an investigative strategy

• Lessons Learned:– Without a Case Concept, investigators may dismiss,

discount and/or fail to take account of relevant facts

Page 24: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

24

47

Conduct the Internal Investigation

• Issue: Sequencing, conducting and documenting interviews--management, witnesses, external entities, subject(s)

• Lessons Learned:– Subject interviews depend on results of witness

interviews, review of documentation, interim audit results and other inputs. It is generally inappropriate to close a case based solely on a subject interview

– Ensure coordination with Labor Relations when interviewing union-represented employees

– Prepare interview summaries within a reasonable period following the interview date

48

Conduct the Internal Investigation

• Issue: Sequencing, conducting and documenting interviews--management, witnesses, external entities, subject(s)

• Lessons Learned:– Confidentiality is prerequisite to foreclosing

defamation claims--distribution of case documents determined by the case manager and counsel, if assigned. Exercise discretion in e-mail use

– Incorporate required markings or legend; e.g., ‘attorney-client privilege,’ etc.

Page 25: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

25

49

Weingarten Right

• Background:– National Labor Relations Act created right of

employees to “engage in…concerted activities for the purpose of mutual aid and protection”

– In Weingarten, the Supreme Court held this included right to have a union representative present during an investigatory interview that the employee reasonably believed might result in disciplinary action

50

Weingarten Right

• Impact of National Labor Relations Board Decision -- Epilepsy Foundation– Extended Weingarten right to non-union employees– Entitled employee to the assistance of a co-worker of

his/her choice during the interview--not an attorney, family member or friend

– Does not obligate the Company to delay interview if co-worker of choice is unavailable

– Co-worker may participate in interview; but may not disrupt it

– Does not obligate the Company to inform employee of Weingarten right

Page 26: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

26

51

Conduct the Internal Investigation

• Issue: Importance of case manager updates for Company counsel (if relevant), business unit leadership and other Company officials

• Lessons Learned:– Case Manager establishes the form, scope and

frequency of required updates from the investigator or the investigative team

– Allows for the Case Manager to assess the effectiveness of the investigative strategy and overarching case concept

– Used by the Law Department in determining the timing and content of disclosures to the USG or other external agencies

52

Conduct the Internal Investigation

• Issue: Importance of case manager updates for Company counsel (if relevant), business unit leadership and other Company officials

• Lessons Learned:– Used by the leadership to gauge scope and impact

of wrongdoing, if any– Case manager determines how best to treat

secondary issues that surface during the course of the investigation

Page 27: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

27

53

Close the Investigative Phase

• Issue: Analyzing the facts and formulating a Final Case Concept that resolves the allegation(s) at hand

• Lessons Learned:– The Case Manager is responsible for

• Analyzing all of the relevant facts and determining the final case concept

• Collaborating with the investigative team and counsel

• Resolving disagreements within the investigative team

• Concluding that the allegation(s) have been resolved and closing the investigative phase

54

Close the Investigative Phase

• Issue: Analyzing the facts and formulating a Final Case Concept that resolves the allegation(s) at hand

• Lessons Learned:– Final case concept must resolve nature, scope and

reasons for violation(s), resolve lingering concern(s) relating to the offender’s intent, address mitigation and document interim corrective actions

– It must support any enforcement agency disclosure requirements

Page 28: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

28

55

Close the Investigative Phase

• Issue: Mitigation

• Lessons Learned:– Consider law, regulation, policy, organization,

business processes, culture, internal controls, personalities, etc. in describing misconduct

– Case manager integrates causes, conditions and mitigating considerations in closing the investigation

56

Report of Investigation

• Issue: Format for a Report of Investigation

• Lessons Learned:– Elements common to a written Report of

Investigation• Background• Summary of Findings• Details of the Investigation• Conclusions• Interim Corrective Actions

– Standard format provides the required level of detail for leadership to make decisions consistent with Company practice and precedent

Page 29: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

29

57

Report of Investigation

• Issue: Preparing the Report of Investigation

• Lessons Learned:– Draft Report of Investigation

• Prepared by Case manager • Identifies interim corrective actions (including

discipline), if any• May include proposed internal control

improvements that became apparent during the course of the investigation

• Other control weaknesses disclosed and reported to management under separate cover

• Confidentiality is crucial--distribution limited to those with a strict “need to know”

58

Implement the Results of the Investigation

• Issue: Implementing and documenting the results of investigative findings

• Lessons Learned:– Implementation of corrective actions is a leadership

responsibility. Leaders must support investigative results and undertake corrective actions where appropriate

– Evidence of completed corrective actions provided to the case manager for inclusion in the relevant case file

Page 30: Helplines, Investigations, Case Management & Databases...EthicsLine Database • Getting Started ... – Determine the required output • What data do you need on the reports •

30

59

Implement the Results of the Investigation

• Issue: Implementing and documenting the results of investigative findings

• Lessons Learned:– Challenges to investigative findings and related

disciplinary action(s) may require the case manager and/or investigator(s) to be witnesses in internal proceedings and/or litigation

– Notwithstanding the completeness of an internal investigation and the appropriateness of any related discipline, appeals by union-represented employees using an established grievance procedure can yield a different outcome (e.g., arbitrator order reinstating discharged employee)

60

Questions or Comments

Patricia J. Ellis, Vice President-Business Ethics and Compliance

Raytheon Company141 Spring StreetLexington, MA 02421(781)-860-1708(781)-860-1616 (Fax)[email protected]