OUR EXPERTISE
In an ever-evolving regulatory environment — characterized by the progressive expansion of the catalogue of predicate offences, the strengthening of anti-corruption safeguards, the entry into force of whistleblowing legislation and increasing scrutiny by supervisory authorities — corporate compliance has become a strategic pillar of corporate governance, rather than merely a formal requirement.
RASS has developed a dedicated Corporate Compliance – 231 & Regulatory Department, capable of supporting companies not only in defining regulatory safeguards, but also in their effective implementation and in maintaining, over time, a corporate culture based on integrity and compliance with the law.
The Department stands out for the strength of its expertise and its integrated approach to the matter: its professionals cover the main areas of corporate compliance across the board — from corruption prevention to corporate administrative liability, from occupational health and safety to environmental protection, from regulatory matters to corporate governance — ensuring consistent, comprehensive advice without overlaps.
In particular, the Corporate Compliance – 231 & Regulatory Department operates in the following areas:
Risk analysis and risk assessment: mapping of sensitive processes and activities, identification of areas exposed to the risk of predicate offences and definition of intervention priorities in relation to the various categories of predicate offences.
Organization, Management and Control Models pursuant to Legislative Decree 231/2001: preparation, review and updating of 231 Models, including the drafting of the Code of Ethics, Special Parts and operating protocols, tailored to the specific corporate context and aligned with regulatory and case-law developments.
Implementation and oversight of Models: practical support in implementation activities, with particular attention to the integration of the 231 Model with corporate management systems (such as ISO 9001, 14001, 45001 and 37001 certified systems), as well as the definition of information flows to the Supervisory Body and corporate bodies.
Compliance procedures and systems: preparation of corporate procedures and compliance policies (anti-corruption, conflicts of interest, third-party management), design of internal reporting systems (whistleblowing) compliant with Legislative Decree 24/2023, definition and regulation of structured information flows, as well as coordination of organizational and procedural safeguards relevant for the purposes of Legislative Decree 231/2001.
Powers of attorney and delegations’ system: definition and formalization of the allocation of powers and responsibilities — delegations, powers of attorney, signing and representation powers — in accordance with the adopted Model and legal requirements, ensuring traceability of decision-making processes and clear allocation of responsibilities.
Internal investigations and audits: assistance in conducting internal investigations and inspections, monitoring corporate processes and verifying the effectiveness of the internal control system, identifying any organizational or procedural gaps and defining corrective actions.
Training and culture of integrity: design and delivery of training programmes on ethics & compliance, anti-corruption, corporate administrative liability and predicate offences, both in person and through e-learning platforms, with content tailored to corporate roles and functions, with the aim of strengthening a widespread culture of legality.
Supervisory Body: serving on Supervisory Bodies pursuant to Legislative Decree 231/2001, either as sole member or as part of a collegiate body, as well as providing ongoing advice and support to existing Supervisory Bodies in relation to the planning of supervisory activities, management of information flows, analysis of reports and proposals for updating Models.
RASS assists clients throughout the entire compliance lifecycle: from initial assessment to system development, from operational implementation to the management of critical situations, through to updates required by regulatory and organizational developments — with the aim of transforming compliance into a genuine competitive advantage capable of strengthening corporate reputation, preventing the risk of sanctions and consolidating the trust of investors, partners and supervisory authorities.
