企业合规官套件
建立合规职能:CMS、行为准则、政策、反贿赂、利益冲突、举报、欺诈与制裁风险。
8 个模板,按使用顺序分为 3 步。在编辑器中打开任一模板,填写后可导出为 PDF、DOCX 或 HTML。
问题定义
Compliance Management System Manual Template (ISO 37301)
完整CMS manual: scope, obligations register, compliance risk assessment, policy and roles, controls, concerns and investigations, KPIs, audit, review
ISO 37301:2021 (Amd 1:2024)Code of Business Conduct Template (Corporate Ethics Code)
标准Corporate ethics code: leadership message, decision test, speak-up channels, bribery, gifts, conflicts, competition, sanctions, records, waivers, training
ISO 37301:2021 cl. 5.2; ISO 37001:2025 cl. 5.2 (cited only)Corporate Policy Document Template
标准Corporate policy: purpose, scope, numbered statements, roles, compliance and exceptions, enforcement, definitions, review, approval
评估
Anti-Bribery Policy and Due Diligence Template (ISO 37001)
标准Bribery risk assessment, policy, anti-bribery function, financial and non-financial controls, third-party due diligence, gifts register, conflicts, legal examples
ISO 37001:2025Fraud Risk Assessment Template (GAO Framework, UK Failure to Prevent Fraud)
完整Scope and size test, governance, scales, scheme inventory, inherent and residual scoring, anti-fraud controls, override, analytics, six principles, actions
GAO-15-593SP Fraud Risk Framework; GAO Green Book 2025 Principle 8; ECCTA 2023 s.199Sanctions Compliance Procedure Template (OFAC, EBA/GL/2024/14, OFSI)
完整Regimes, governance, list management, customer and payment screening, ISO 20022 fields, fuzzy thresholds, alerts, freezing, OFAC/OFSI reporting, testing
OFAC Framework for Compliance Commitments 2019; EBA/GL/2024/14 and 2024/15; OFSI guidance 2026
运维
Conflicts of Interest Policy and Register Template (MiFID II, SEC)
完整Conflicts policy, governance RACI, identification triggers, Art. 33 criteria, L x I rating, register, controls, last-resort disclosure, inducements, breaches, MI
MiFID II Art. 23; Delegated Reg (EU) 2017/565 Art. 33-35; AIFMD Art. 14; SEC Advisers Act s.206Whistleblowing Policy Template (EU Directive 2019/1937, SOX, PIDA)
完整Who and what is covered, internal channels, external reporting, confidentiality and anonymity, non-retaliation, 7-day and 3-month timelines, investigation, SOX 301 routing, records, KPIs, country annex
Directive (EU) 2019/1937; SOX s.301 and s.806; Exchange Act s.21F; UK PIDA 1998