The elements of a compliance programme

1. Regulatory Concept & Core Standards

This video's topic is the elements of a compliance programme. By the end, you should be able to explain how the risk plan, code of conduct, training and reporting channel work together. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. An organisation needs clear decision rules and a way to respond to breaches. The Polish whistleblower Act governs reporting and protection, while other provisions address corruption, procurement and public-sector management control. This course connects these areas without presenting every recommendation as an obligation for every company.

An integrity programme can bring together risk assessment, rules of conduct, training and a reporting channel. The plan identifies risks and measures; the code guides decisions; training develops appropriate behaviour; and the channel helps detect problems. This structure is a management proposal. Present an element as legally mandatory only where the applicable national provision requires it.

Apply the following rule: Portuguese RGPC is not Polish law. For public-finance entities consider management-control requirements; for public procurement consider the applicable Pzp provisions. The risk matrix, audit, training and gifts-policy methods in these courses are organisational recommendations unless a specified provision imposes a duty on the particular entity. Public-administration duties must not be transferred automatically to every private company.

2. Practical Implementation & Procedure

Choose a process, such as procurement, and trace it through the four elements. Locate the risk in the risk plan, the rule in the code, the example in the training and the route for reporting a concern. If a link is missing, assign a specific action. Keeping four documents in a folder does not demonstrate that people know the rules or that the controls work. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A company has a code and training slides, but nobody reviews purchasing exceptions. It introduces an exception review and a decision record. The new document is useful only when the control is actually applied to transactions. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: What demonstrates that a purchasing control operates? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Evidence of its use in actual cases and assessment of the outcome. Signing a procedure alone does not show whether somebody identified an exception, examined it and took the appropriate decision.

One mistake to avoid is: confusing the existence of documents with the effective operation of a programme.

Now apply the national rule to a second decision. The team presents all integrity tools as mandatory in every country. How should the explanation change?

Separate Polish legal duties, their conditions and recommended practice. Management-control standards address the relevant public sector. A private risk or gifts policy needs a purpose and owner, but does not become an obligation under Portuguese RGPC. Every claim of a duty requires a specific basis.