The Vendor Review Conflict
You are a senior compliance analyst at Meridian Bank. On Monday you are assigned to lead enhanced due diligence for Cortez Payroll, a new vendor that would process salary data for 12,000 employees. On Tuesday you learn your brother-in-law is Cortez's VP of sales, and his bonus is tied to signing Meridian. The vendor committee meets in 10 days. Your manager calls the conflict "indirect" and asks you to document it and proceed: you are the only analyst with payroll expertise, and the outsourcing contract fixes the deadline. Reassigning the review would delay it by three weeks. You also know Cortez had a 2022 data incident that it mentioned informally but omitted from its RFP response. The review is estimated at 60 hours; you have already spent 12. The committee chair has asked for a "clean yes/no" recommendation and has said delays cost money.
1. Should you proceed with the review? Apply a conflict-of-interest framework and identify all the issues.
Read the worked answer
The starting point is not whether you feel biased, but whether a reasonable outsider would question your independence. Your brother-in-law is immediate family, and his bonus gives him a direct financial interest in a positive outcome. Calling the conflict "indirect" is inaccurate and understates it.
A standard identify-disclose-mitigate-or-recuse sequence points to recusal from the decision. Disclosure alone would not cure the conflict because you would still be the person recommending the vendor and interpreting the RFP. Documentation is necessary but not sufficient.
There is a second integrity issue: Cortez omitted a 2022 data incident from its RFP response. That is relevant to vendor risk and should be pursued regardless of who reviews the file. Do not raise it with your brother-in-law or use him as an information source.
The deadline and your 60-hour estimate are commercial inconveniences, not ethical justification. Sunk cost is irrelevant. The right course is to disclose in writing, ask to be removed from the decision, and propose a practical alternative: a peer reviewer with support from you on payroll technical points under an information barrier, or a short external review. You can hand over factual analysis without making the recommendation.
A "clean yes/no" answer from a conflicted reviewer is not clean at all. The committee should receive an independent recommendation plus a note that the conflict was declared and managed.
2. Draft the key points of the written disclosure and escalation you would send today.
Read the worked answer
Send a concise, factual note to your manager and the Head of Compliance, copied to the committee secretary if your policy requires it. Key points:
- Relationship: my brother-in-law is Cortez Payroll's VP of Sales. I learned this on Tuesday, the day after assignment.
- Financial interest: his compensation includes a bonus linked to signing Meridian, so the conflict is direct and material, not merely indirect.
- Request: I ask to be recused from the vendor recommendation and decision. I can provide technical payroll analysis to an independent reviewer under an information barrier.
- Timing: the committee meets in 10 days; a peer reviewer plus my technical handover can preserve most of the timetable.
- RFP integrity: Cortez disclosed a 2022 data incident informally but omitted it from its RFP response. This should be clarified with the vendor independently of my conflict.
- Record: please confirm the recusal and the alternative reviewer in writing.
Avoid speculation about your brother-in-law's conduct or the vendor's motives. Stick to dates, facts, and the requested control. Save the note and any response. If your manager pushes back, escalate one level and ask for the decision to be recorded. The goal is a contemporaneous record that you identified and managed the conflict promptly.
3. If your manager repeats the instruction to proceed, what are your options and what would you do?
Read the worked answer
A repeated instruction does not make the conflict disappear. First, restate the risk in writing: proceeding would place you in a decision-making role where your brother-in-law has a direct financial interest, contrary to the firm's conflicts policy and to the appearance of independence. Ask for the instruction to be confirmed in writing, which often causes the manager to reconsider.
Second, escalate to the next level: the Head of Compliance, the conflicts committee, or the audit committee depending on your governance. Use the whistleblowing channel if normal escalation is blocked. Frame the issue as a control failure, not a personal grievance: "I have been asked to recommend a vendor in which a family member has a bonus interest; I believe this requires independent review."
Third, consider refusal. You can decline to sign the recommendation while still supplying factual technical work. Refusal should be professional and documented, not dramatic. Check your policy for protections against retaliation.
External notification is rarely the first step for an internal conflict, but it may become necessary if you are pressured to conceal a material control breach. Before that, seek advice from the compliance function or an independent non-executive. Throughout, do not share confidential vendor information with your brother-in-law and do not discuss the matter with him at all.