Services

Regulatory Compliance

Compliance Program Development
- Risk Assessments
- Consumer Protection Regulatory Compliance
- Policy and Procedure Builds Monitoring and Testing Programs
- Regulatory Filings and Submissions
- Regulatory Examination Support
- Responses to Examination Findings
- Compliance Program Efficiency Reviews
- Tailored Training Programs
- Anti-Bribery and Corruption Compliance Programs
Ethics Programs
- Code of Ethics Development
- Enhancement of Ethics Program Controls
- Conflicts of Interest Controls
- Ethics Training
- Whistleblower Program Reviews or Development
- Case Management Assistance
- Ethics Program Audits
- Ethics Program Reviews, Assessments, and Implementation
Strengthening the Compliance Program
- Strategic Planning for Compliance
- Compliance Risk Management Program Evaluation and Enhancement
- Structure and Staffing Review
- Consumer Financial Protection Bureau (CFPB) Readiness Check
- Risk Assessments
- Risk Metrics and Reporting
- Control Identification and Enhancements
- Efficiency Evaluations
- Monitoring and Testing Implementation
- Board Training
- Third-Party Risk Management
TILA-RESPA Integrated Disclosure (TRID) Compliance
- Gap Analysis for Implementation and Testing Plans
- Development and Implementation of Testing Scripts for Pre- and Post- Implementation Evaluation
- Evaluation of Third-Parties
- Enhancement of Risk Management Controls
- Loan-level Reviews and Testing
- Design and Implementation of Processes for Application, Underwriting, Production, and Closing
- Design and Delivery of Training
Unfair, Deceptive, or Abusive Acts or Practices (UDAAP) Readiness
- UDAAP Readiness Check
- UDAAP Risk Assessments
- UDAAP Complaint-Management Systems
- UDAAP Controls Review
- UDAAP Product Reviews
- UDAAP Audits
- New Product Due Diligence Reviews
- Monitoring and Audit Review
- Metrics and Reporting
- Training
Community Reinvestment Act (CRA)
Retail Sales Incentive Practices
Reviews and Lookbacks
- Complaint Management Reviews
- Sales Incentive Practice Assessments
- Marketing and Sales Reviews
- Deposit or Lending Operational Reviews
- Servicemembers Civil Relief Act (SCRA) and Military Lending Act (MLA) Review
- Fair Credit Reporting Act (FCRA) Reviews, including Credit Bureau Reporting and Data Usage
- Transactional Lookbacks (Regulation E, Credit Reporting)
- Business Continuity
Merger & Acquisition Readiness, Due Diligence, and Integration

Representative Engagements

FinTech Compliance

Short- and Long-term Strategic Advisory
Compliance Program Assessments
Compliance Program Development and Implementation
Policy and Procedure Builds
Audit and Examination Management and Support
Vendor Management Oversight and Due Diligence
Change Management and User Acceptance Testing (UAT) Enhancement
Complaint Handling and Oversight Reviews, Enhancements, and Performance
Development and Implementation of Corrective Action Processes
Compliance Management System (CMS) Assessments
Risk Assessments and Monitoring Programs (Compliance and UDAAP)
Unfair, Deceptive, or Abusive Acts or Practices (UDAAP) or Fair Lending Program Assessments
Fair Credit Reporting Act (FCRA) Reviews, including Credit Bureau Reporting and Data Usage
Due Diligence Process Assistance
Third-Party Risk Management
Strategic Advisory related to Acquisitions and Partnerships

Fair and Responsible Banking

Redlining Readiness Check
Risk Assessments
Program Evaluations
Statistical Analysis
Mystery Shopping, Matched Pair Testing, and Self-Testing
Community Reinvestment Act (CRA)
Developing and Improving Fair Lending and Community Reinvestment Act (CRA) Programs
Home Mortgage Disclosure Act (HMDA) LAR Processing and Filing
Compliance Management System (CMS) Program Builds and Assessments
Model Validation

Representative Engagements

Mortgage Operations and Compliance

Mortgage Operations and Compliance Advisory
- Mortgage Origination, Servicing, and Secondary Marketing Operational and Compliance Risk Assessments
- Loss Mitigation Compliance Analysis, Remediation, and Process Repair
- Merger and Acquisition Due Diligence and Integration
- Foreclosure and Loss Mitigation Risk Assessments
- Home Mortgage Disclosure Act (HMDA) Data Integrity and File Reviews
- Change Management for Mortgage Industry Participants
- Process Change and Improvement for Efficiency and Risk Management
- Training
- Technology Strategy and Integration
- Audit: Staff Augmentation and Training
- Servicing Transfer Compliance Testing
- TILA-RESPA Integrated Disclosure (TRID) Rule Compliance Implementation, Testing, and File Reviews
- Process and Procedure Writing
- Agency and Insurer Risk Assessment
- Vendor Management
Due Diligence
- Mortgage Credit Risk and Compliance Due Diligence for Business Acquirers and Whole Loan Acquirers, Insurers, and Servicers
Government Investigation and/or Whistleblower Response
- Risk Analysis including Data and Loan File Review
- Subject Matter Experts for Origination, Servicing (including Foreclosure), and Securitization
- Dollar Sizing of Potential Exposure
- Data Aggregation and Data Management Support
- Response Support
- Federal Housing Finance Administration (FHFA) and Federal Housing Administration (FHA)

Litigation Support

Expert Witness Services
- Testifying Experts with Extensive Industry Experience
- Data and File Analysis
- Mediation Statement and Expert Report Preparation
- Demonstrative Exhibit Preparation
- Support Team with Extensive Trial Experience
Government Investigation, Whistleblower Response, and Litigation Analysis
- Risk Analysis and Quantification
- Pre-Trial Investigation
- Variety of Subject Matter Experts, including Mortgage Industry and Market Manipulation
- Data Aggregation and Data Management Support
- Response Support
- Experience in Multiple Forums and Full Complement of Regulators
- Damages Estimates and Reports
- Litigation Document Management
Post-Enforcement Remediation and Support
- Multiple Engagements Serving as Monitor Under Consent Order
- Independent Review to Ensure Compliance with Settlement or Receivership
- Testing Protocol Design and Implementation
- Report Preparation and Data Analytics

Representative Engagements

Global Financial Crimes Compliance

Program Design, Assessment, and Implementation
- Design and Implementation of Compliance Programs
- Program Reviews, including Health Checks
- Department Structure and Staffing Assessments
- Policy and Procedure Development
- Acquisition/Merger Due Diligence
- Risk Assessments
- Risk Scoring Methodology Development
- Independent Audits
Governance
- Board of Directors and Senior Management Roles and Responsibilities
- Management and Board Reporting; Dashboard and Metrics Design
- Corporate Culture Reviews and Assessments
- First-, Second-, and Third-Line Roles and Responsibilities
- Training at all Levels—Board; Management; Employees
Customer Risk Profile
- Customer Segmentation
- High Risk Customer Methodology
- Know Your Customer (KYC)/Customer Due Diligence (CDD) Program
- Customer Identification Program (CIP)
- Enhanced Due Diligence (EDD) Program
- Correspondent Banking Due Diligence
Model Governance, Review, Implementation, and Validation
- Model Governance
- Model Documentation Procedure and Analysis
- Anti-Money Laundering (AML) Alerting Sanctions for Office of Foreign Assets Control (OFAC) Screening Tools Identification and Implementation
- Anti-Money Laundering (AML) Monitoring Rules/Scenarios, Identification, Calibration, and Analysis
- Sanctions (OFAC) Filters/Fuzzy Logic Rules Identification, Calibration and Analysis
Data Analytics and Remediation
- Data Integrity/Lineage Reviews
- Customer Data Quality Reviews
- Data Acquisition: Normalization
Regulatory Exams
- Exam Preparation
- Corrective Action Advisory and Remediation
Investigations and Lookbacks
- Financial Investigation Unit (FIU) Review
- Alert and Case Management Process Review
- Enhanced Due Diligence (EDD) and Transaction Lookbacks
- Suspicious Activity Reporting (SAR) Review
Staff Augmentation
- Staffing at all Levels: Chief Compliance Officer (CCO); Analyst; Auditor
Program Outsourcing
- All Program Areas from Oversight to Investigations
Enforcement Action Remediation
- Independent Compliance Monitorships/Consultancies
- Independent Compliance Reviews and Audits
- Independent Transactional Reviews (Lookbacks)
- Tactical Remediation Project Plans

Representative Engagements

Cybersecurity & Privacy

Program Reviews and Development
Regulatory Compliance and Risk Assessments
Training Programs
Third-Party Risk Review and Development
Virtual Chief Information Security Officer (v-CISO)
Emerging Technology and Innovation Security
Infrastructure and Application Security

Representative Engagements

Global Markets

LIBOR Transition
- Advice, Guidance, and Support for Setting up a LIBOR Transition Program
- Identification and Review of Bank-Wide LIBOR Benchmark Risks
- Automated Optical Character Recognition (OCR) Review of LIBOR Benchmark Contractual "Fall Back" Language
Trading Surveillance
- Design, Implementation, and Validation of Preventative Market Surveillance and Controls
- Verification and Certification of Algorithms and Codes for Trading Activities
Trading Misconduct
- Review of Trading Management, Governance, Compliance, Controls, and Procedures to Prevent and Cure Identified Trading Misconduct
- Review of Trading Misconduct 2.0: Spoofing, Last Look, Front Running, Client Spread, Algorithms
- Sales Practices Reviews
Trading-Related Monitorship, Investigations, Independent Consultancy
- Independent Monitor on Regulatory Investigations and Remediation
- Review and Assessment of Regulatory Matters Requiring Attention (MRAs) and Matters Requiring Immediate Attention (MRIAs)
- Compliance and Audit Reviews
- Regulatory Examination Preparation
Trading Governance, Risk, and Compliance
- Review of Governance and Management Oversight of the Three Lines of Defense, Compliance, Controls, and Gap Analysis
Trading Operations, Technology, and Change Management
- Change Management and Implementation of Operational Processes and Technology to Support Trading in Global Markets
- Review of Payments Systems and Infrastructure to Improve Settlement Efficiency
Digital Assets Trading: Governance, Risk, and Controls
- Evaluation of Supervision, Controls, Policies, Key Operating Procedures, and Risks Arising from Digital Asset Activity
Behavior and Culture Risk Management
- Utilize Proprietary Models that Assess, Align, Shape, Benchmark, Predict, and Monitor Group Risk Culture and Individual Conduct
- Provide a Comprehensive Suite of Predictive Risk Culture Indicators to Proactively Monitor and Report on Enterprise Risk Culture

Operational and Third-Party Risk

Cybersecurity Strategy Development, Program Design, Implementation, and Ongoing Assessment
Incident Response Capability Assessments
Incident Response Program Development and Implementation
Cyber Incident Rapid Response including Interaction with Law Enforcement, Regulators, and Media; Notification Management; and Stakeholder Communications
Incident Response Planning and Rapid Response Program Development
Board Level Data Governance, Training, and Awareness
Data Risk Identification and Evaluation and Governance Framework Design
Privacy and Information Security
Enterprise Privacy Program Development and Implementation
Compliance Solutions for Multi-jurisdictional Privacy and Data Protection Requirements
Regulatory Change Management
Training and Awareness
Privacy Compliance Control Identification, Monitoring, Testing, and Reporting
Solicitation Management - Telephone Consumer Protection Act (TCPA) - and Customer Preference Administration
Third-Party Risk
Third-Party Rapid Assessment
Reverse Playbook Methodology and Framework
Third-Party Risk Program Development and Implementation
Pre-contract Compliance and Data Security Due Diligence
Post-engagement Compliance and Data Security Assessments
Due Diligence for Mergers, Acquisitions, and Dissolutions

Representative Engagements

Wealth Management Advisory Services

Compliance, Risk, and Regulatory—Design and Review
- Securities and Exchange Commission (SEC) and Financial Industry Regulatory Authority (FINRA) Supervisory Requirements—including Surveillance and Monitoring
- Investment Suitability and Risk Profiling Requirements
- Reviews Against the Requirements of the Investment Advisors and Investment Company Acts of 1940
- KYC and On-Boarding Programs
- AML/BSA and OFAC Programs
- Department of Labor (DOL), SEC, and State-Level Investment Fiduciary Requirements
- Selling Practices, including Conflict Of Interest (COI), Fund Bias, Fair Lending, UDAAP
- Trust Banking Regulatory Framework
- Office of the Comptroller of the Currency (OCC) Fiduciary Reviews
- Broker/Advisor Compensation Models
Business Transformation
- Business/Product Expansion Planning and Analysis
- Target Operating Model Design
- Capability Gap Assessments and Benchmarking
- Staffing Plan and Skills Gap Assessments
- Cost and Efficiency Gap Review
- Product Design and Development
- Policy and Procedure Development
- Business Requirements Definition, including Process Design (Flowcharts)
Managed Services
- Outsourced CCO, Chief Financial Officer (CFO), Chief Operating Officer (COO) Role or Part of Underlying Functional Tasks

Affiliations

Giant Oak - "We see the people behind the data."