You cannot govern AI you cannot see. That’s why the first step is not a policy. It’s an inventory. Once you’ve found every AI tool in your company, including the shadow ones, sort them into tiers. High-risk tools that make decisions about people or money, with human review of every output. Moderate risk, customer-facing tools with sampling and disclosure. Low-risk internal productivity tools on approved...
Your supply chain doesn’t end at your supplier. Neither does your liability. Three risks are converging on the same shipments. Sanctions. Evasion networks use transshipment hubs, shell companies, and last-minute routing changes, and regulators now expect you to screen your cargo, not just your counterparties. Forced labor. U.S. law presumes goods linked to restricted regions or entities were made with forced labor unless you prove...
In this episode of Corruption, Crime and Compliance, Michael Volkov examines the growing retrenchment of compliance and why companies that cut or sideline their programs are taking on more risk, not less. Using the Bank of America penalties as a case study, he shows how a compliance function can identify the problem, recommend an exit, and still be overruled or bypassed by the business, which...
Webinar: December 2, 2026 12 Noon EST Sign Up HERE The False Claims Act has become the government’s most powerful civil fraud weapon, and enforcement has never been more aggressive. DOJ reported record FCA recoveries for fiscal year 2025, whistleblowers filed a record number of qui tam suits, and DOJ’s Trade Fraud Task Force has turned the FCA into a primary tool for pursuing tariff...
Michael Volkov examines why every organization needs a responsible AI use policy now, as employees adopt AI tools faster than companies can govern them. Drawing on court sanctions against lawyers for AI-fabricated citations, SEC “AI washing” enforcement actions, and data leaks into public chatbots, Michael explains that these failures stem from weak governance rather than weak technology. He highlights DOJ’s Evaluation of Corporate Compliance Programs,...
You cannot govern AI you cannot see. That’s why the first step is not a policy. It’s an inventory. Once you’ve found every AI tool in your company, including the shadow ones, sort them into tiers. High-risk tools that make decisions about people or money, with human review of every output. Moderate risk, customer-facing tools with sampling and disclosure. Low-risk internal productivity tools on approved...
Your supply chain doesn’t end at your supplier. Neither does your liability. Three risks are converging on the same shipments. Sanctions. Evasion networks use transshipment hubs, shell companies, and last-minute routing changes, and regulators now expect you to screen your cargo, not just your counterparties. Forced labor. U.S. law presumes goods linked to restricted regions or entities were made with forced labor unless you prove...
In this episode of Corruption, Crime and Compliance, Michael Volkov examines the growing retrenchment of compliance and why companies that cut or sideline their programs are taking on more risk, not less. Using the Bank of America penalties as a case study, he shows how a compliance function can identify the problem, recommend an exit, and still be overruled or bypassed by the business, which...
Webinar: December 2, 2026 12 Noon EST Sign Up HERE The False Claims Act has become the government’s most powerful civil fraud weapon, and enforcement has never been more aggressive. DOJ reported record FCA recoveries for fiscal year 2025, whistleblowers filed a record number of qui tam suits, and DOJ’s Trade Fraud Task Force has turned the FCA into a primary tool for pursuing tariff...
Michael Volkov examines why every organization needs a responsible AI use policy now, as employees adopt AI tools faster than companies can govern them. Drawing on court sanctions against lawyers for AI-fabricated citations, SEC “AI washing” enforcement actions, and data leaks into public chatbots, Michael explains that these failures stem from weak governance rather than weak technology. He highlights DOJ’s Evaluation of Corporate Compliance Programs,...
At a third-party risk management and supply chain conference in Chicago on Wednesday, October 28, 2026, Assistant Attorney General A. Tysen Duva, who has led the Justice Department’s Criminal Division since December 2025, delivered a message aimed squarely at boards and chief executives: fund compliance properly, and when it finds something, come to the Department early. The remarks, made in a fireside chat and reported...
When budgets tighten, compliance is often among the first functions to feel the squeeze. The pitch is familiar: it produces no revenue, the enforcement environment has eased, and a leaner team can do the same work with better tools. Some of those points have a grain of truth. Technology can make compliance more efficient. But the underlying premise, that compliance is overhead to be minimized,...
A dangerous misreading has taken hold in many boardrooms. Because the current administration paused and narrowed Foreign Corrupt Practices Act enforcement, the argument goes, enforcement risk in general has dropped, and compliance spending can drop with it. That reasoning confuses one statute with the whole landscape. The administration has not stopped enforcing the law. It has reassigned enforcement resources toward priorities defined by national security...
Lying about where your goods come from is now one of the most expensive mistakes in trade compliance. DOJ stood up a dedicated trade fraud task force in August of last year, and it moved fast. Its first settlement came three months later. This May, it announced the largest customs-related False Claims Act recovery ever, roughly $550 million from aluminum companies and affiliated warehouses accused...
Across corporate America, a quiet retrenchment is under way. Compliance budgets are being flattened or trimmed, headcount is being “optimized,” chief compliance officers are being moved further from the executive suite, and programs built over a decade are being described as overhead to be right-sized. The justification is usually the same: the enforcement climate has changed, so the risk has changed. The Bank of America...
