Dr.Maciej Piechocki Chief Revenue Officer ,Regnology

Regulatory technology (RegTech) is the adoption of technology to increase compliance for the safety of consumers, along with maintaining the stability of the financial system.
Let’s get to know RegTech, which will be widely used in the future, and take a look at case studies on the use of RegTech in other countries, as well as the collaboration between RegTech and SupTech that will employ technology to help business regulators further.

Learn more at https://kirkpatrickprice.com/video/why-you-need-to-document-your-policies-and-procedures/

You hear us repeat it over and over again: if it’s not written down, it’s not happening.

Documentation is a critical component of any organization. Policies and procedures are vital to your business operability, business continuity, consistency within your organization, training new employees, controlling risk, meeting regulatory compliance requirements, meeting client requirements, and so much more. Policies and procedures demonstrate how you conduct your business.

A policy is an executive-level document that defines that something must be done. They are a statement of management intent. Policies are the law at your organization. An effective policy should outline what employees must do or not do, directions, limits, principles, and guides for decision making. Policies can be rules, acceptable or unacceptable behaviors, limits, approval authorities, consequences for non-compliance, who needs to know, etc. They answer questions like: What? Why?

A procedure is the counterpart to a policy; a policy defines that something must be done, but a procedure defines how you do it. It is the process to fulfill management intent. It is the instruction on how a policy is followed. A policy defines a rule, and the procedure defines who is expected to do it and how they are expected to do it. Procedures answer questions like: How? When? Where?

Individuals with the appropriate authority need to be involved in drafting policies and procedures. When creating new documentation or amending the existing, there should be a process for checking for conflicts with existing documents, checking for legal requirements, and ensuring the document discusses all necessary topics. A formal review process is also necessary to keep all policies and procedures up-to-date. Policies and procedures should be reviewed at least annually.

Communication is key to putting policies and procedures into action. Even if a policy or procedure is perfectly crafted, it’s not in effect, then it’s worthless. Policies and procedures should be documented, in use, and known to all affected parties. Your personnel must be living out what the policies and procedures require of them. It is not sufficient that you generate documentation just for the sake of an audit.

More Free Compliance Resources
https://kirkpatrickprice.com/blog/the-purpose-of-policies-procedures/
https://kirkpatrickprice.com/video/policies-procedures-and-standards/
https://kirkpatrickprice.com/audit/
https://kirkpatrickprice.com/white-papers/what-type-of-compliance-is-right-for-you/

Stay Connected
Twitter: https://twitter.com/KPAudit
LinkedIn: https://www.linkedin.com/company/kirkpatrickprice-llc
Facebook: https://www.facebook.com/kirkpatrickprice/

Blog: https://kirkpatrickprice.com/blog/
Webinars: https://kirkpatrickprice.com/webinars/
Videos: https://kirkpatrickprice.com/video/
White Papers: https://kirkpatrickprice.com/white-papers/

About Us
KirkpatrickPrice is a licensed CPA firm, PCI QSA, and a HITRUST CSF Assessor, registered with the PCAOB, providing assurance services to over 600 clients in more than 48 states, Canada, Asia, and Europe. The firm has over 12 years of experience in information security and compliance assurance by performing assessments, audits, and tests that strengthen information security and internal controls. KirkpatrickPrice most commonly provides advice on SOC 1, SOC 2, HIPAA, HITRUST CSF, PCI DSS, ISO 27001, FISMA, and CFPB frameworks.

For more about KirkpatrickPrice: https://kirkpatrickprice.com/
Contact us today: 800-770-2701 https://kirkpatrickprice.com/contact/

Andrew Yuille, Head of Risk Business Solutions, Thomson Reuters, explains the role regtech can play in simplifying regulatory compliance and discusses how it enables competitive advantages.

For all your fintech-related news, please visit https://www.finextra.com.

Find out how RegHub provides a complete platform to seamlessly manage the impact of regulatory change and enhance transparency across all areas of the business. Find out more at www.deloitte.co.uk/reghub.