regulatory-compliance

name	regulatory-compliance
title	Regulatory Compliance
description	Multi-sector regulatory compliance skill for industry-specific regulations. Use when the user needs assistance with regulatory frameworks, compliance programs, regulatory investigations, or industry-specific requirements across sectors. Triggers on keywords like "regulatory", "compliance program", "regulated industry", "agency", "enforcement", "regulatory investigation", "consent decree", "compliance audit", "regulatory risk".
author	judicialmind
author_url	https://github.com/judicialmind/legal-skills/tree/main/skills/regulatory-compliance
license	MIT
version	0.1.0
execution_mode	open
jurisdiction	general
practice	regulatory
language	en

Regulatory Compliance

This skill provides expert guidance for navigating regulatory frameworks across multiple industries and jurisdictions.

Core Capabilities

1. Compliance Programs

• Program design
• Policy development
• Risk assessment
• Monitoring and testing

2. Regulatory Strategy

• Agency engagement
• Comment letters
• Rulemaking participation
• Regulatory advocacy

3. Investigations

• Investigation response
• Self-disclosure
• Settlement negotiation
• Remediation

4. Industry-Specific

• Financial services
• Healthcare
• Energy
• Technology

Compliance Program Framework

Essential Elements (DOJ/SEC Framework)

EFFECTIVE COMPLIANCE PROGRAM ELEMENTS

1. COMMITMENT FROM SENIOR MANAGEMENT
   - Tone at the top
   - Resource allocation
   - Accountability

2. AUTONOMY AND RESOURCES
   - Chief Compliance Officer
   - Reporting structure
   - Budget and staff

3. POLICIES AND PROCEDURES
   - Clear standards
   - Tailored guidance
   - Regular updates

4. RISK ASSESSMENT
   - Enterprise risk assessment
   - Control environment review
   - Third-party risk

5. TRAINING AND COMMUNICATION
   - Role-based training
   - Annual certifications
   - Ongoing awareness

6. REPORTING MECHANISMS
   - Hotline/helpline
   - Non-retaliation
   - Investigation protocol

7. INCENTIVES AND DISCIPLINE
   - Compliance in performance
   - Consistent enforcement
   - Documented actions

8. CONTINUOUS IMPROVEMENT
   - Testing and monitoring
   - Remediation
   - Lessons learned

9. THIRD-PARTY MANAGEMENT
   - Due diligence
   - Contract requirements
   - Monitoring

10. M&A DUE DILIGENCE
    - Pre-acquisition review
    - Integration planning
    - Post-acquisition remediation

Risk Assessment Process

┌─────────────────────────────────────────────────┐
│  1. IDENTIFY RISKS                               │
│     - Regulatory requirements                    │
│     - Industry-specific risks                    │
│     - Geographic considerations                  │
│     - Business activities                        │
└─────────────────────────────────────────────────┘
                      │
                      ▼
┌─────────────────────────────────────────────────┐
│  2. ASSESS INHERENT RISK                         │
│     - Likelihood of occurrence                   │
│     - Potential impact                           │
│     - Regulatory scrutiny                        │
└─────────────────────────────────────────────────┘
                      │
                      ▼
┌─────────────────────────────────────────────────┐
│  3. EVALUATE CONTROLS                            │
│     - Preventive controls                        │
│     - Detective controls                         │
│     - Control effectiveness                      │
└─────────────────────────────────────────────────┘
                      │
                      ▼
┌─────────────────────────────────────────────────┐
│  4. DETERMINE RESIDUAL RISK                      │
│     - Risk after controls                        │
│     - Risk tolerance                             │
│     - Action required                            │
└─────────────────────────────────────────────────┘
                      │
                      ▼
┌─────────────────────────────────────────────────┐
│  5. PRIORITIZE AND REMEDIATE                     │
│     - High-risk areas first                      │
│     - Resource allocation                        │
│     - Timeline and milestones                    │
└─────────────────────────────────────────────────┘