
COMPLIANCEBOND
ÇϳªÀÇ ¿Ïº®ÇÑ ¼Ö·ç¼ÇÀ¸·Î, ±ÔÁ¦ (Regulatory) ÄÁÅÙÃ÷, ¿öÅ©Ç÷οì (workflows) ¹× µ¥ÀÌÅÍ ºÐ¼® (data analytics)
±ÔÁ¦ ÄÄÇöóÀ̾𽺠°ü¸® (REGULATORY COMPLIANCE MANAGEMENT) ¸¦ °£¼ÒÈÇϰí, Áß¾Ó ÁýÁßÈ (CENTRALIZES) Çϰí, ¸®½ºÅ© ³ëÃâÀ» ÃÖ¼ÒÈÇϸç, ½±°í ½Ç½Ã°£ (REAL-TIME) ¸®Æ÷Æ®¸¦ Á¦°øÇÏ´Â ¼ÒÇÁÆ®¿þ¾î
ÄÄÇöóÀ̾𽺠°ü¸® (Compliance management) ¸¦ ½ºÇÁ·¹µå½ÃÆ®¿Í SharePoint ¿¡¼ ¹þ¾î³ª, º¹À⼺À» ÁÙÀ̰í ÄÄÇöóÀ̾𽺠¸®½ºÅ©¸¦ ÁÙÀÏ ¼ö ÀÖ½À´Ï´Ù.
¿ä±¸ »çÇ×À» ÃßÀû ¹× ¸ÅÇÎ (track & map) Çϰí, ÄÄÇöóÀ̾𽺸¦ ¹®¼È ¹× Å×½ºÆ®Çϴµ¥ ¼Ò¿äµÇ´Â ½Ã°£À» ÁÙÀÏ ¼ö ÀÖ½À´Ï´Ù. ½Ç½Ã°£ (Real-time) ÄÄÇöóÀ̾𽺠¸ð´ÏÅ͸µ (compliance monitoring) À» À§ÇÑ Å×½ºÆ®¸¦ ÀÚµ¿È (automate) Çϰí, ÇÙ½É À̽´ (key issues) ¿¡ ´ëÇÑ ½Ã°£À» ¿ì¼±½ÃÇÕ´Ï´Ù. ³»ÀåµÈ (Built-in) ¸®Æ÷Æ® ±â´ÉÀ» ÅëÇØ °æ¿µÁø ¹× ÀÌ»çȸ¿¡ ¸íÈ®ÇÑ °¨µ¶ ±â´ÉÀ» Á¦°øÇÒ ¼ö ÀÖ½À´Ï´Ù. ¶ÇÇÑ, ±ÔÁ¦ Áؼö ¿©ºÎ (compliant) ¸¦ ±ÔÁ¦´ç±¹ (regulators) ¿¡ ½±°Ô º¸¿©ÁÙ ¼ö ÀÖ½À´Ï´Ù.
[Compliance workflows]
[Assessments, monitoring & reporting]
[Compliance reporting]
ComplianceBond ¸¦ ¼±ÅÃÇØ¾ß ÇÏ´Â ÀÌÀ¯?
±ÔÁ¤ ¹× ÄÄÇöóÀ̾𽺠(Regulation & compliance) °ü¸®¸¦ ÇϳªÀÇ end-to-end platform À¸·Î ÅëÇÕÇÕ´Ï´Ù.
¿ÏÀüÈ÷ ÅëÇÕµÈ ±ÔÁ¦ Ç¥ÁØ (regulatory standards), ÇÁ·¹ÀÓ¿öÅ© ¹× ¿ä±¸ »çÇ×À» ÅëÇØ º¯°æ °ü¸® (change management) ¸¦ ´Ü¼øÈÇÕ´Ï´Ù.
´ë½Ãº¸µå (Dashboards), ÄÄÇöóÀ̾𽺠¸ÞÆ®¸¯ (compliance metrics) ¹× ¸®Æ÷Æ®¸¦ ÅëÇØ Á¶Á÷ ÀüüÀÇ ½Ç½Ã°£ °¨µ¶ ±â´ÉÀ» È®º¸ÇÕ´Ï´Ù.
ÄÄÇöóÀ̾𽺠¸ð´ÏÅ͸µ ¹× Å×½ºÆ®¸¦ ÀÚµ¿È (automate) ÇÏ¿©, ±ÔÁ¦ ºñÁؼö (non-compliance) ¸¦ Àû½Ã¿¡ ½Äº°ÇÒ ¼ö ÀÖ½À´Ï´Ù.
´ã´çÀÚ (Owners) ¸¦ ÅëÁ¦Çϱâ À§ÇØ ³»ÀåµÈ (built-in) ¿äû (requests) ¹× ¹Ì¸® ¾Ë¸² (reminders) °ú ¿ÜºÎ ¿äû (external requests) ¿¡ ´ëÇÑ ½Ã½ºÅÛ ÃßÀû (system tracking) À» ÅëÇØ ½Ã°£À» Àý¾àÇÒ ¼ö ÀÖ½À´Ï´Ù.
"±ÔÁ¦´ç±¹ (regulators) ÀÌ Ã£¾Æ¿ÔÀ» ¶§ ±×µéÀº ¿ì¸®°¡ ÇÙ½É Á¤Ã¥ À̽´ (key policy issue) ¸¦ ½Äº°Çϰí ÀÖ´Ù´Â °ÍÀ» ¾Ë¾Ò½À´Ï´Ù...±ÔÁ¦´ç±¹ (regulators) Àº Á¶Á÷ÀÌ ¿Ã¹Ù¸£°Ô ÀÏÀ» Çß´Ù°í ĪÂùÀ» Çß½À´Ï´Ù. ... ¿ì¸®´Â ¿ì¸®°¡ ÃëÇÑ Á¢±Ù¹ýÀ¸·Î ÀÎÇØ ±ÔÁ¦´ç±¹ (regulators) ÀÇ ºñÆÇÀ» »çÀü¿¡ Â÷´ÜÇÒ ¼ö ÀÖµµ·Ï ¾÷¹«¿¡ µµ¿òÀ» ÁÙ ¼ö ÀÖ½À´Ï´Ù."
- Chief auditor for a US regional bank.
ÁÖ¿ä±â´É
- ÄÄÇöóÀ̾𽺠¿öÅ©Ç÷οì (COMPLIANCE WORKFLOWS)
Áß¾Ó¿¡¼ ¸ðµç ±ÔÁ¦ ¿ä±¸»çÇ× (regulatory requirements) ¹× Á¤Ã¥ (policies) À» ±¸¼ºÇÏ°í °ü¸®ÇÕ´Ï´Ù.
Àû¿ë ÇÒ ¼ö ¾ø´Â ÄÄÇöóÀ̾𽺠Àǹ«¸¦ ÇÕ¸®ÀûÀ¸·Î °³¼±Çϰí, °¡Àå ½Ã±ÞÇÑ À̽´¿¡ ÁýÁßÇÕ´Ï´Ù.
¿©·¯ ¿ä±¸»çÇ× (requirements) À» ´ÜÀÏ ÅëÁ¦ (single control) ·Î Á¶Á¤ÇÏ¿© Áߺ¹µÇ´Â ¼ö°í¸¦ Á¦°ÅÇÕ´Ï´Ù.
´Ù¾çÇÑ ±ÔÁ¤ (regulations) ÀÇ ¿µÇâÀ» ÃßÀû (track), ÃøÁ¤ (measure) ¹× È®ÀÎ (identify) ÇÑ ÈÄ ¿ì¼±¼øÀ§ (priorities) ¸¦ ¼³Á¤ÇÕ´Ï´Ù.
¿ì¼± ¼øÀ§°¡ °¡Àå ³ôÀº ÀÛ¾÷ (Highest-priority tasks) ¿¡ ¸®¼Ò½º¸¦ ÇÒ´ç (assign) ÇÕ´Ï´Ù.
- Æò°¡, ¸ð´ÏÅ͸µ ¹× ¸®Æ÷ÆÃ (ASSESSMENTS, MONITORING, & REPORTING)
µ¥ÀÌÅÍ ÀÚµ¿È ¹× ¼³¹®Áö (questionnaires) ¸¦ ÅëÇØ ÄÄÇöóÀ̾𽺠Æò°¡ (assessments) ¸¦ À§ÀÓÇÕ´Ï´Ù.
µ¥ÀÌÅÍÀÇ 100% ¸¦ ¿¬°áÇϰí Å×½ºÆ®ÇÏ¿©, ÆÀÀÌ ¼öµ¿ Å×½ºÆ® ¹× µ¥ÀÌÅÍ ¼öÁý ÀÛ¾÷ (acquisition tasks) À» ¼öÇà ÇÒ ¼ö ÀÖµµ·Ï ÇÕ´Ï´Ù.
KPI, KRI ¹× KCI¿Í °°Àº ¸ÞÆ®¸¯À» ¸ð´ÏÅ͸µÇÏ¿© Ãß¼¼ (trends) ¶Ç´Â ƯÀÌÄ¡ (outliers) ¸¦ ¹ß°ßÇϰí ÀÓ°è °ª (thresholds) ÀÌ ÃæÁ·µÇ¸é ¾Ë¸² (alerts) À» trigger ÇÕ´Ï´Ù.
°¢ ÅëÁ¦ (control) ¸¦ ƯÁ¤ ºÐ¼® ¸ð´ÏÅ͸µ Å×½ºÆ®¿¡ ¸ÅÇÎÇÏ¿© ±× È¿°ú¸¦ Áö¼ÓÀûÀ¸·Î ¸ð´ÏÅ͸µ (continuously monitor) ÇÕ´Ï´Ù.
ÀÚü Æò°¡ (Self-assessment) ¸¦ ÅëÁ¦ ´ã´çÀÚ (control owners) ¿¡°Ô ÇÒ´ç (assign) Çϰí ÄÄÇöóÀ̾𽺠Áõºù (proof) À¸·Î ÀÀ´ä ³»¿ë (response) À» ÀúÀåÇÕ´Ï´Ù.
- ÄÄÇöóÀ̾𽺠¸®Æ÷ÆÃ (COMPLIANCE REPORTING)
½Ç½Ã°£ ´ë½Ãº¸µå (Real-time dashboards) ·Î ÄÄÇöóÀ̾𽺠»óÅÂÀÇ È¸éÀ» °øÀ¯ÇÕ´Ï´Ù.
ƯÁ¤ ÅëÁ¦ (controls), ÄÄÇöóÀ̾𽺠ÇÁ·Î¼¼½º, ¸®½ºÅ© ¹× À̽´ (issues) ¸¦ È®ÀÎÇÒ ¼ö ÀÖ´Â ¸®Æ÷Æ®¸¦ µå¸±´Ù¿î (drill down) ÇÕ´Ï´Ù.
°æ¿µÁø, ÀÌ»çȸ ¹× ±ÔÁ¦´ç±¹ (regulators) À» À§ÇÑ "¼¿ÇÁ ¼ºñ½º (self-serve)" ±ÔÁ¤ ´ë½Ãº¸µå (regulatory dashboards) ¸¦ »ý¼ºÇÕ´Ï´Ù.
ÀáÀçÀûÀÎ ÅëÁ¦ (control) gaps ¶Ç´Â ºÒÀÌÇà (failures) À» ã¾Æ Ç¥½Ã (flag) ÇÏ°í ¸®Æ÷Æ®ÇÕ´Ï´Ù.
Ŭ¸¯ ÇÑ ¹ø (One-click) À¸·Î ¸®Æ÷Æ® ¹× ÅÛÇø´À» »ç¿ëÇÏ¿©, C-suite (°æ¿µÁø) ¹× ÀÌ»çȸ¿¡ ´ëÇÑ ¸®Æ÷Æ®¸¦ ½±°Ô »ý¼ºÇÒ ¼ö ÀÖ½À´Ï´Ù.
|