Compliance Officer With a Sales Target and a Buried Bribery Hotline Complaint
You are engaged to review the compliance function of a listed pharmaceutical company. The compliance officer is also the vice-president of sales for government hospitals, which contribute 60% of revenue. The whistleblower hotline is hosted by an external provider, but alerts are emailed only to the compliance officer, who decides whether to log them. Six months ago, an anonymous complaint alleged that a distributor paid ₹40 lakh to a hospital procurement officer to secure a tender. The compliance officer recorded it as a 'commercial dispute' and closed it without investigation. No investigation log, terms of reference or board report exists. Sales staff are trained online once a year, and completion is below 50%. The CEO says the company has a 'zero-tolerance' policy but cannot recall when the board last reviewed it. A new tender worth ₹120 crore is due in three weeks, and the same distributor is the intended bidder.
1. Assess the independence and effectiveness of the compliance function and explain why the current arrangement creates a conflict of interest.
Read the worked answer
The arrangement fails the basic test of independence. The compliance officer is also the sales leader for the channel that generates 60% of revenue, so he is responsible for the commercial outcome that compliance is meant to police. His sales target and the tender pipeline create a direct incentive to classify an allegation against a distributor as a 'commercial dispute' rather than investigate it. The hotline design compounds this: alerts go only to him, he decides what is logged, and there is no independent triage, no investigation log and no board reporting. That gives one conflicted individual the power to suppress a bribery allegation. Annual online training with below 50% completion suggests the programme is symbolic, and the CEO's inability to recall board review indicates no tone-at-the-top oversight. The ₹40 lakh allegation is not a commercial dispute; it is a potential bribery and books-and-records issue, with third-party and tender implications. The function should be separated from sales, with a compliance officer reporting to the board or audit committee, independent hotline triage, a documented investigation protocol, and periodic board reporting on allegations, outcomes and trends. Until that separation happens, no one should accept the compliance officer's closure decision at face value.
2. Design an investigation and remediation plan for the bribery allegation, including interim controls before the ₹120 crore tender.
Read the worked answer
The investigation should be independent of the sales line. The audit committee should appoint an investigation lead, using external counsel or forensic resources if internal capability is conflicted, with a defined scope covering the distributor, the hospital procurement officer, the tender, payments, intermediaries and any employee who knew of the allegation. Preserve documents and communications, interview witnesses in a documented sequence, and check the distributor's contracts, due-diligence file, invoices and payment trails. The investigation should report to the audit committee, not to the CEO or the sales head. Before the tender, impose interim controls: suspend the distributor from new bids pending clearance, require enhanced due diligence and beneficial-ownership checks, prohibit facilitation payments, and route all tender-related expenses through a documented approval matrix. Any employee linked to the allegation should be restricted from the tender process. Remediation should include a new hotline protocol with independent triage, an investigation log, a board-approved anti-bribery policy, risk-based third-party due diligence, training with completion metrics, and clawback or disciplinary provisions. The audit committee should receive a written report and track actions to closure. Disclosure and legal-privilege decisions should be taken with counsel, and the company should consider whether the alleged payment affects past bids or financial statements.
3. The CEO asks you to sign a compliance certificate confirming 'no material compliance issues' so the tender can proceed. How should you respond?
Read the worked answer
I should decline to sign a certificate that is not supported by evidence. A compliance certificate is an assurance, not a marketing document. At least one credible bribery allegation is unresolved, the investigation function is conflicted, and the tender involves the same distributor. Signing 'no material compliance issues' would misrepresent the position to the board, regulators or the tender authority and could expose me and the company to professional and legal consequences. The right response is to explain to the CEO, in writing, what the certificate would need to say: the allegation exists, an independent investigation has been commissioned, interim controls are in place, and the distributor is suspended from the tender pending clearance. I would offer a factual status certificate rather than a clean one. If the CEO insists, I should escalate to the audit committee chair and the board, and document the request. Professional conduct requires candour over commercial convenience. The company can still pursue the tender through a clean bidder or after the investigation clears the distributor, but it should not use a false assurance to bridge the gap.