The document outlines the Three C's of Compliance: Communication, which involves clearly communicating commitment to compliance and having mechanisms to gather evidence of compliance; Confirmation, which refers to keeping records of events and transactions and examining management reports; and Correction, which is effectively handling incidents and noting changes to various business and regulatory factors that impact compliance.

1. The Three C’s of Compliance
By: Marie Garcia, Joaquin Ortiz, &
Michael Salamanca

2. The Three C’s of Compliance
 Communication
 Confirmation
 Correction

3. Communication
 Clearly understood commitment to do
the right thing
 Appropriate mechanisms in place to
gather & maintain evidence of
compliance

4. Communication
 Actions rewarding compliance with rules
& punishing transgressions
 Sufficient & flexible reporting
capabilities to meet the existing &
changing compliance

5. Confirmation
 Record of events
 Record of transaction trails
 Ability to examine management report
 Process for resolving issues

6. Correction
 Effective handling of incidents
 Noting changes to:

Business objectives

The market

Business environment

Technology

Regulatory & Compliance environments

7. Correction
 Effective handling of incidents
 Noting changes to:

Business objectives

The market

Business environment

Technology

Regulatory & Compliance environments