Corporate Compliance Monitor

Integrity Program · FCPA / UK Bribery Act · International Standards

Score de Compliance

—
/100

Programa

Capacitación


Riesgo por área

Alertas activas

🌐 Coverage by Framework

Implementation score for each regulatory framework — calculated from the Cross-Framework Mapping controls.

📊 Score global multi-framework—

Próximos vencimientos

Executive View — Integrity Program

🚦 Status by pillar

📊 Score evolution

🔴 Riesgos críticos

⚠️ Alerts for the board

📋 Próximas acciones prioritarias

🌐 Cobertura Multi-Framework

Nivel de madurez del Programa

InicialMedioAvanzado

Estado general

Obligatorios


Elementos obligatorios — Art. 23

Requeridos para contratar con el Estado Nacional (Art. 24)

Elementos opcionales — Fortalecen el Programa

Elevan el nivel de madurez y reducen responsabilidad penal (Art. 9)

¿Qué falta para el siguiente nivel?

🇧🇷 Lei Anticorrupção 12.846/2013 — Brasil

Responsabilidade objetiva · Acordo de Leniência · CGU/AGU

—
/100

✅ Elementos obrigatórios

⚖️ Fatores atenuantes


📋 Referência normativa

🔹 Art. 7 — Fatores que atenuam a sanção, incluindo a existência de programa de integridade
🔹 Art. 16 — Acordo de Leniência: redução de até 2/3 da multa para empresas colaboradoras
🔹 Art. 41-D (Decreto 11.129/2022) — Parâmetros mínimos do Programa de Integridade
🔹 Portaria CGU 909/2015 — Avaliação do programa para fins de redução de sanções

🇺🇸 FCPA — Foreign Corrupt Practices Act (1977)

USA · DOJ + SEC · Aplicación extraterritorial · 15 U.S.C. §§ 78dd-1, -2, -3

—
/100
The FCPA applies to companies with a U.S. nexus: listing on a U.S. stock exchange, payments in USD, or subsidiaries or employees on U.S. soil.

🇬🇧 UK Bribery Act 2010

United Kingdom · SFO · Strict liability · The strictest in the world

—
/100
Section 7 imposes strict liability on companies with a presence in the UK, or doing business there, for bribery committed by "associated persons".

⚖️ Comparativa FCPA vs UK Bribery Act

Dimensión 🇺🇸 FCPA 🇬🇧 UK Bribery Act

📋 Artículos clave

🇺🇸 FCPA
📌 § 78dd-1/2/3 — Prohibition of bribery of foreign officials
📌 § 78m(b) — Books & Records: registros contables precisos
📌 § 78m(b)(2)(B) — Internal Controls: controles internos adecuados
📌 DOJ/SEC Guidance 2012 — Effective compliance program
🇬🇧 UK Bribery Act
📌 Sec. 1 — Offence of active bribery
📌 Sec. 2 — Offence of passive bribery
📌 Sec. 6 — Soborno a funcionario público extranjero
📌 Sec. 7 — Corporate failure to prevent (strict liability)
📌 MoJ Guidance — 6 principles of "Adequate Procedures"

🇧🇷 LGPD — Lei Geral de Proteção de Dados (Lei 13.709/2018)

Compliance checklist based on the key chapters of the LGPD. Applies to any company that processes data of individuals in Brazil or offers goods/services in Brazil.

—
Score LGPD
—
Compliance level
0
Ítems cumplidos
13
Ítems pendientes
Art. Requisito Descripción Cumple Evidencia

📋 Legal bases for processing (Art. 7 LGPD)

Base legal Cuándo aplica Does your company use it?
ConsentimientoFree, informed, specific and prior (opt-in)
Obligación legalCompliance with a legal or regulatory obligation
Performance of a contractProcessing necessary to perform a contract with the data subject
Interés legítimoBased on the controller's legitimate interest (requires an LIA)
Credit protectionProcessing for credit analysis
⚠️ Sanciones ANPD (Art. 52 LGPD):
  • Warning with a deadline to adopt corrective measures
  • Simple fine: up to 2% of revenue in Brazil — max. R$ 50 million per infraction
  • Daily fine: up to R$ 50 million per day
  • Public disclosure of the infraction
  • Blocking or deletion of the affected personal data

🚫 ISO 37001 — Anti-Bribery Management System

International standard to prevent, detect and respond to bribery. Complements Law 27.401 (Argentina), Lei 12.846 (Brazil) and the FCPA. Certifiable by an independent third party.

🚫
—
Score ISO 37001
🔗 Relationship with other frameworks
✅ Ley 27.401 — Integrity Program required
✅ FCPA — Third-party due diligence
✅ UK Bribery Act — Procedimientos adecuados
✅ Lei 12.846 — Compliance Program

📋 Cláusulas clave ISO 37001:2016

🎯 Diferencial vs. Ley 27.401

Aspecto Ley 27.401 ISO 37001
⚠️ ISO 37001 certification can be submitted to the CNV/UIF as evidence of a robust integrity program — a potential mitigating factor in sanctions.

🌿 ISO 14001 — Environmental Management System

International standard for environmental management systems (EMS). Deepens the Environmental pillar of ESG. Certifies that the organization identifies and controls its environmental impact, with continual improvement.

—
Contexto
Org.
—
Planifi-
cación
—
Oper-
ación
—
Mejora
Contínua

📋 Requisitos ISO 14001:2015 — Cláusulas 4 a 10

🌍 Integration with ESG

ISO 14001 directly feeds the KPIs of the E (Environmental) pillar of ESG:
🌡️ Emisiones GEI (Alcance 1, 2, 3)
💧 Effluent management
♻️ Economía circular
🌲 Biodiversidad
⚡ Eficiencia energética
📦 Product life cycle
✅ ISO 14001 certification required in public tenders (Law 25.675, Argentina) and global supply chains (automotive, retail, exports).

🇪🇺 GDPR — General Data Protection Regulation

Regulation (EU) 2016/679. Applies to any organization that processes data of people in the EU, regardless of where it is established. A stricter sanctions regime than the LGPD.

🇪🇺
—
Score GDPR
⚠️ Sanciones GDPR
• Tier 1: up to €10M o 2% facturación global
• Tier 2: up to €20M o 4% facturación global
Whichever is higher applies. Meta: €1.2B (2023)

📋 Checklist GDPR — 7 Principios + Derechos

⚖️ GDPR vs. LGPD — Diferencias clave

Dimensión 🇪🇺 GDPR 🇧🇷 LGPD

🔐 ISO 27001 — Information Security

International standard for Information Security Management Systems (ISMS). Annex A: 93 controls in 4 domains (ISO 27001:2022). Certifiable. Key for contracts with the public sector and multinational companies.

—
Org.
Controles
—
Personas
Controles
—
Físico
Controles
—
Tecnológico
Controles
📊 Score global: — ✅ Controles OK: 0 ⏳ En proceso: 0 ❌ Pendientes: 0

🏢 Dominio A.5 — Controles Organizacionales (37 controles)

👤 Domain A.6 — People Controls (8 controls)

🏗️ Dominio A.7 — Controles Físicos (14 controles)

💻 Dominio A.8 — Controles Tecnológicos (34 controles)

☁️ SOC 2 — Service Organization Control 2

AICPA framework for cloud and SaaS service providers. Assesses 5 Trust Service Criteria (TSC). Required by U.S. enterprise customers and English-speaking markets. Type I: design. Type II: operating effectiveness (12 months).

☁️
—
Score SOC 2
📋 Report type
• SOC 2 Tipo I — Control design (point in time)
• SOC 2 Tipo II — Efectividad operativa (período ≥6 meses)
Security (CC) is mandatory. The other 4 TSC are optional depending on the service.

🔒 CC — Security (Common Criteria) — Obligatorio

⚡ Los 4 TSC Opcionales

⚖️ SOC 2 vs ISO 27001

Dimensión ☁️ SOC 2 🔐 ISO 27001

🌴 CCPA / CPRA — California Consumer Privacy Act

California state privacy law (2020, expanded by the CPRA in 2023). Applies to companies that collect data of California residents and have revenue >$25M, data on >100k people, or that sell data. The privacy benchmark in the U.S.

🌴
—
Score CCPA/CPRA
⚠️ Sanciones CCPA
• Violación intencional: $7,500 per consumer
• Violación no intencional: $2,500 per consumer
• Private right of action (data breach): $100–$750 per consumer
Enforcement: California Privacy Protection Agency (CPPA)

📋 CCPA/CPRA Checklist — Rights and Obligations

⚖️ CCPA vs GDPR vs LGPD

Dimensión 🌴 CCPA/CPRA 🇪🇺 GDPR 🇧🇷 LGPD

🛡️ NIS2 — EU Cybersecurity Directive

⏰ DEADLINE: Oct 17, 2024 → national transposition under way

Directive (EU) 2022/2555. Replaces NIS1. Expands the sectors in scope (18 critical sectors), toughens sanctions and requires risk management, incident notification within 24/72h and management accountability. Applies to entities esenciales e importantes.

⚠️ Sanciones NIS2
• Entidades Esenciales: up to €10M o 2% facturación global
• Entidades Importantes: up to €7M o 1.4% facturación global
• Responsabilidad personal of executives — disqualification
⏱️ Notification deadlines
• 24h — alerta temprana a CSIRT/autoridad
• 72h — notification with initial assessment
• 1 mes — final report with full analysis
Art. 23 NIS2 — incidents with significant impact
🏭 18 Sectors — Is your organization in scope?
Esenciales: Energía · Transporte · Banca · Infraestructura mercados financieros · Salud · Agua potable · Aguas residuales · Infraestructura digital · Gestión servicios TIC · Espacio
Importantes: Servicios postales · Gestión residuos · Química · Alimentación · Fabricación · Proveedores digitales · Investigación

📋 Article 21 — Risk Management Measures (mandatory)

🏛️ Governance and Management Accountability (Art. 20)

🔗 Supply Chain and Third Parties (Art. 21.2.d)

⚖️ NIS2 vs ISO 27001 — Control mapping

🤖 EU AI Act — EU Artificial Intelligence Regulation

⏰ DEADLINE: agosto 2026 (sistemas alto riesgo)

Regulation (EU) 2024/1689. In force since August 2024. The world's first comprehensive regulatory framework for AI. Applies to developers, importers and users of AI systems operating in the EU. Approach based on risk levels.

🚫
Prohibido
Since Feb 2025
⚠️
Alto Riesgo
Ago 2026
📋
Transp. Oblig.
Ago 2025
✅
Riesgo Mínimo
No oblig.
⚠️ Sanciones EU AI Act
• IA prohibida: €35M o 7% global
• Alto riesgo: €15M o 3% global
• Información falsa: €7.5M o 1.5% global

🚫 Prohibited AI Practices (Art. 5) — In force since Feb 2025

⚠️ High-Risk Systems (Annex III) — Deadline August 2026

📋 Obligations for High-Risk Systems (Arts. 9-15)

📢 Transparency Obligations (Art. 50) — In force August 2025

🗓️ Implementation timeline

🌐 OECD — Guidelines for Multinational Enterprises (2023 ed.)

The OECD Guidelines are recommendations on responsible business conduct addressed to multinational enterprises operating in or from adhering countries. Argentina adhered in 1997. The 2023 edition adds due diligence on human rights, climate change and the supply chain.

🏛️ Marco institucional Argentina
• PCN Argentina: National Contact Point at the Ministry of Foreign Affairs
• Receives specific-instance cases for non-compliance
• 60+ active NCP cases worldwide in 2023
• Proceso: notificación → mediación → declaración final
💡 Beneficios competitivos
• Acceso a fondos ESG (>USD 35T, 2023)
• Requirement in IDB/CAF/World Bank tenders
• 60–70% coverage of CSRD/LkSG/CSDDD
• Lower reputational risk in the supply chain
Score OCDE: calculando…
✅ Cumple: 0 🔄 Proceso: 0 ⏳ Pendiente: 0

Chapter I — Concepts and principles

Capítulo II — Políticas generales

Chapter III — Disclosure

Capítulo IV — Derechos humanos

Chapter V — Employment and industrial relations

Capítulo VI — Medioambiente

Chapter VII — Combating bribery

Chapter VIII — Consumer interests

Chapter IX — Science and technology

Capítulo X — Competencia

Capítulo XI — Tributación

🦺 ISO 45001:2018 — OH&S Management Systems

International standard for occupational health and safety (OH&S) management systems. It replaced OHSAS 18001. In high demand in construction, manufacturing, energy and mining. High-level structure (HLS) compatible with ISO 9001 and ISO 14001.

⚠️ Alcance & obligatoriedad
• Applies to any organization, of any size and sector
• A common requirement in public tender specifications
• A supplier requirement at large corporations
• Complements Law 19.587 (Health and Safety, AR)
📊 Estadísticas globales
• 45,000+ active certifications in 127 countries (ISO, 2023)
• 2.3M work-related deaths a year (ILO)
• Average ROI: USD 2.2 for every USD 1 invested in OH&S
Score ISO 45001: calculando…
✅ Cumple: 0 🔄 Proceso: 0 ⏳ Pendiente: 0

Clause 4 — Context of the organization

Clause 5 — Leadership and worker participation

Clause 6 — Planning (hazard and risk identification)

Cláusula 7 — Apoyo (recursos, competencia, comunicación)

Clause 8 — Operation (management of change, contractors)

Clause 9 — Performance evaluation

Clause 10 — Continual improvement and incident investigation

🖥️ COBIT 2019 — Enterprise IT Governance and Management

ISACA's IT governance framework. In high demand in the financial sector, regulated industries and listed companies. Organizes 40 governance and management objectives into 5 domains. Complements ISO 27001, SOC 2, DORA and SOX-IT.

🏦 Dominios COBIT 2019
• EDM — Evaluate, Direct and Monitor (5 objectives)
• APO — Align, Plan and Organize (14 objectives)
• BAI — Construir, Adquirir e Implementar (10 objetivos)
• DSS — Deliver, Service and Support (6 objectives)
• MEA — Monitor, Evaluate and Assess (4 objectives)
🔗 Integration with other frameworks
• COBIT ↔ ISO 27001: aligns 93 controls with IT objectives
• COBIT ↔ SOX: cubre controles IT general (ITGC)
• COBIT ↔ DORA: ICT resilience governance
• COBIT ↔ SOC 2: trust services criteria
Score COBIT 2019: calculando…
✅ Cumple: 0 🔄 Proceso: 0 ⏳ Pendiente: 0

EDM — Evaluate, Direct and Monitor

APO — Align, Plan and Organize

BAI — Construir, Adquirir e Implementar

DSS — Deliver, Service and Support

MEA — Monitor, Evaluate and Assess

📈 Sarbanes-Oxley Act (SOX) — Financial Reporting Controls

U.S. federal law (2002). Applies to companies listed on the NYSE/NASDAQ and their global subsidiaries. Key sections: 302 (certificación ejecutiva), 404 (internal control over financial reporting — ICFR) and 906 (criminal liability). The PCAOB audits compliance.

⚖️ Secciones críticas
• Sec. 302: CEO/CFO certify the accuracy of reports
• Sec. 401: Disclosure of off-balance-sheet items
• Sec. 404: ICFR — assessment of internal controls
• Sec. 409: Real-time disclosure of material changes
• Sec. 802: Record retention (7 years)
• Sec. 906: Up to 20 years in prison for false certification
🚨 Sanciones SOX
• Fines up to USD 5M for individuals
• Up to 20 years in prison for executives
• Corporate fines up to USD 25M
• Ban from serving as a director/officer
Autoridad: SEC + DOJ + PCAOB
Score SOX: calculando…
✅ Cumple: 0 🔄 Proceso: 0 ⏳ Pendiente: 0

Section 302 — Disclosure Certifications

Section 404 — Internal Control over Financial Reporting (ICFR)

Controles IT Generales (ITGC) — Soporte SOX

Sections 409 & 802 — Disclosure and Record Retention

Mapa SOX ↔ COBIT 2019 ↔ ISO 27001

🗺️ Cross-Framework Mapping — One control, multiple standards

Each implemented control can cover requirements from several frameworks at once. This map shows which control domains simultaneously satisfy the program's standards, maximizing compliance ROI.

🎯 Controles mapeados: 0 ⭐ Cobertura promedio: 0 marcos/control 🏆 Máxima cobertura: 0 marcos 📐 Marcos cubiertos: 13 (incl. DORA · ISO 27701 · PCI DSS)

🔐 Information Security

🔒 Privacy and Data Protection

🤝 Third Parties and Supply Chain

🏛️ Governance and Culture

🚨 Incident Management and Continuity

🤖 Inteligencia Artificial

📊 Coverage matrix by framework

🔏 ISO 27701 — Privacy Information Management System (PIMS)

Extension of ISO 27001 for privacy management. Aligned with the GDPR, LGPD and CCPA. Specifies requirements to establish, implement and improve a PIMS for controllers and processors of personal data. Published in 2019.

🎯 Who does it apply to?
• Personal data controllers
• Personal data processors
• Organizaciones sujetas a GDPR / LGPD / CCPA
• Cloud service providers holding customer data
Requires a current ISO 27001 as its basis
Beneficios clave
• Demuestra cumplimiento GDPR Art.28 (procesadores)
• Reduces audits by enterprise customers
• Marco unificado privacidad + seguridad
• A competitive edge in international tenders
Score ISO 27701: -
OK: 0 Proceso: 0 Pendiente: 0

Cláusula 5 — Extensiones SGIP a ISO 27001 (Requisitos generales)

Clause 6 — Planning (context, interested parties, privacy risks)

Cláusula 7 — Soporte (recursos, competencia, comunicación)

Clause 8 — Operation (DPIA impact assessments, third-party relationships)

Annex A — Additional controls for data Controllers

Annex B — Additional controls for data Processors

Alineación ISO 27701 ↔ GDPR ↔ LGPD ↔ CCPA

💳 PCI DSS v4.0 — Payment Card Industry Data Security Standard

Global security standard for organizations that process, store or transmit payment card data. Issued by the PCI SSC (Visa, Mastercard, Amex, Discover, JCB). Version 4.0 in force since March 2024. 12 requirements across 6 goals.

🏦 Who does it apply to?
• Merchants that accept payment cards
• Payment processors and gateways
• Acquiring and issuing banks
• Service providers with access to CHD
CHD = Cardholder Data
Penalties for non-compliance
Multas: USD 5.000 – USD 100.000/mes per entity
Loss of the ability to process cards
Liability for fraud and chargebacks
Forensic costs in case of a breach: USD 10K–500K+
Validation: SAQ (self-assessment) or QSA (external assessor) depending on level
Score PCI DSS: -
OK: 0 Proceso: 0 Pendiente: 0

Goal 1 — Build and maintain a secure network and systems (Req. 1-2)

Goal 2 — Protect cardholder data (Req. 3-4)

Goal 3 — Maintain a vulnerability management program (Req. 5-6)

Goal 4 — Implement strong access control measures (Req. 7-9)

Goal 5 — Regularly monitor and test networks (Req. 10-11)

Goal 6 — Maintain an information security policy (Req. 12)

PCI DSS compliance levels

⚡ DORA — Digital Operational Resilience Act

Regulation (EU) 2022/2554. In force since 17 enero 2025. Applies to financial entities in the EU and their critical ICT providers. Goal: ensure the digital operational resilience of the financial sector against ICT incidents.

🏦 Entidades financieras obligadas
• Banks and credit institutions
• Investment firms
• Insurers and reinsurers
• Investment funds (UCITS, AIFM)
• Crypto-asset service providers
• Trading venues
• Critical ICT providers (third parties)
Sanciones DORA
Financial entities: up to 1% facturacion diaria global (max. 6 meses)
Critical ICT providers: up to EUR 5M o 1% facturacion global diaria
Responsible individuals: up to EUR 1M
Autoridades: EBA, ESMA, EIOPA + autoridades nacionales
Score DORA: -
OK: 0 Proceso: 0 Pendiente: 0

Pillar 1 - ICT Risk Management (Arts. 5-16)

Pillar 2 - ICT Incident Management and Reporting (Arts. 17-23)

Pillar 3 - Digital Operational Resilience Testing (Arts. 24-27)

Pillar 4 - ICT Third-Party Risk (Arts. 28-44)

Pillar 5 - Information Sharing (Art. 45)

DORA vs NIS2 vs ISO 27001 - Mapeado

Action Plan - Pending Controls

Pending Cross-Framework Mapping controls organized by priority, with a suggested owner and estimated deadline. Exportable to CSV.

Total pendientes: 0 Alta: 0 Media: 0 Baja: 0

🌱 ESG — Environmental, Social & Governance

Basic ESG tracking module. Three dimensions: Environmental (GHG emissions), Social (board diversity) and Governance (whistleblowing channel). Reference: GRI 2021 + SASB.

🌍
—
Ambiental
🤝
—
Social
🏛️
—
Gobernanza
⭐
—
Score ESG total

🌍 E — Ambiental (Emisiones GEI)

Alcance Descripción (GRI 305) tCO₂e Estado
Alcance 1Emisiones directas (combustión propia, flotilla)—
Alcance 2Emisiones indirectas (electricidad comprada)—
Alcance 3Other indirect emissions (value chain, travel)—

🤝 S — Social (Diversidad & Equidad)

🏛️ G — Gobernanza

📐 Reference frameworks

EstándarDimensiónUso principal
GRI 2021E+S+GMateriality reporting and universal disclosure
TCFDEClimate-related risk disclosure for investors
SASBE+SIndustry-specific metrics, comparable across peers
ODS / SDG ONUE+S+GAlignment with the Sustainable Development Goals
CNV Res. 896/2021GCorporate governance for companies listed in Argentina

Mapa de calor — Probabilidad × Impacto

Matriz de riesgo inherente por área. Cada celda muestra cuántas áreas caen en esa combinación.

Radar de riesgo

Distribución

Detalle por área

Progreso por módulo

Radar de completitud

Módulos

🔍 Verificador de CUIT — Lista OCDE

Verificá si un proveedor tiene antecedentes en casos internacionales de corrupción. Powered by MEACI.

Ejemplos: 30-54667581-3 (Siemens) · 30-69142665-7 (SAP) · 30-57655868-3 (ABB)

Resumen verificaciones

Historial

🌐 Radar de mercado — Empresas sancionadas OCDE con presencia en Argentina

Listado en vivo desde MEACI. No implica relación comercial con tu empresa — es información de contexto para evaluar terceros nuevos.

Exposición internacional

Marco legal aplicable

🌐 OECD Guidelines for Multinational Enterprises — 2023 Edition

Recommendations from adhering governments (50 countries, including Argentina since 1997) to multinational enterprises on responsible business conduct. Updated in June 2023. Not binding on companies, but binding on signatory governments. Non-compliance can affect reputation, market access and relations with ESG investors.

🇦🇷 Argentina and the OECD Guidelines: Argentina adhered to the Declaration in 1997 and has a National Contact Point (NCP) at the Ministry of Foreign Affairs to receive complaints about non-compliance with the guidelines.
I. Políticas generales
Contribution to sustainable development, human rights, supply chain, due diligence.
II. Disclosure
Financial and non-financial reporting, governance, structure, risks, ESG impact.
III. Derechos humanos
Human rights due diligence, preventing adverse impacts, effective remediation. Aligned with the UNGPs.
IV. Employment and industrial relations
Trade union rights, child labour, forced labour, health and safety, training.
V. Medio ambiente
Environmental management, impact reporting, climate change, biodiversity, circular economy.
VI. Combating bribery
Active and passive bribery, extortion, anti-bribery program, whistleblowing channel, due diligence.
VII. Consumer interests
Fair advertising, consumer privacy, secure e-commerce, after-sales service.
VIII. Science and technology
Technology transfer, local R&D, responsible cybersecurity, ethical AI.
IX. Competencia
Anti-competitive practices, cartels, abuse of dominant position.
X. Fiscalidad
Tax compliance, transfer pricing, transparency, BEPS, corporate responsibility.
XI. Responsible supply chain management (2023 ★)
New 2023 chapter: due diligence across the entire value chain — human rights, labour, environment, anti-corruption.

🏢 The business sector's experience applying the Guidelines

Companies that have adopted the OECD Guidelines as a reference framework consistently report three areas of learning:

Debida diligencia integrada
Leading companies integrate human rights due diligence (HRDD) into their existing risk management system instead of creating a parallel process, linking it directly to ISO 37001 and anti-corruption frameworks.
The supply chain as an opportunity
The 2023 Chapter XI made supplier management an explicit requirement. Companies that already had third-party due diligence (ISO 37001, NIS2) adapted faster and at lower cost.
The NCP as an early-warning mechanism
National Contact Points handled 60+ active cases in 2023 (OECD). Companies with strong compliance programs resolved cases at the mediation stage, avoiding negative publicity.
Non-financial reporting as a management tool
Chapter II requires disclosure of ESG impacts. Companies that use GRI, SASB or CSRD as the basis for reporting simultaneously meet OECD disclosure requirements and ESG investor expectations.

🏆 Applying the OECD Guidelines: benefits and competitive advantages

✅ Acceso a capital e inversión ESG
ESG funds manage over USD 35T in assets (2023). Alignment with the OECD is a positive screening criterion for institutional investors and European pension funds.
✅ An edge in international tenders
Multilateral bodies (IDB, CAF, World Bank) and European public procurement increasingly require evidence of human rights and anti-corruption due diligence aligned with OECD standards.
✅ Lower reputational risk
73% of Fortune 500 executives rank supply-chain reputational risk among their three most critical risks (PwC, 2023). The OECD Guidelines provide an internationally recognized reference framework.
✅ Synergies with regulatory frameworks
Anyone who complies with the OECD Guidelines already meets 60-70% of the requirements of the EU CSRD, the German Supply Chain Due Diligence Act (LkSG) and the EU Corporate Sustainability Due Diligence Directive (CSDDD).
✅ Proactive conflict management
Public adherence to the Guidelines and working whistleblowing channels reduce the likelihood of NCP cases and, if they occur, make resolution through mediation easier than costly litigation.
✅ A reference framework for the Board
The Guidelines give the Board and the Compliance Officer an internationally accepted common language for reporting on non-financial risk management, strengthening corporate governance.
📄 Lineamientos OCDE 2023 (PDF oficial) 🇦🇷 PCN Argentina 🔍 Abrir MEACI →

Monitor MEACI

31 casos de resoluciones multijurisdiccionales (MJR) OCDE 2008-2026 con presencia en Argentina.

🔍 Abrir MEACI →

🏛️ Registro RITE — Oficina Anticorrupción

Plataforma oficial de la OA para desarrollar y registrar Programas de Integridad. Voluntario, gratuito y clave para contratar con el Estado.

¿Por qué registrarse?

✅Acredita el Programa ante el Estado para licitaciones (Art. 24 Ley 27.401)
✅Reduce responsabilidad penal en investigaciones (Art. 9)
✅Mejora reputación ante clientes, socios e inversores
✅Facilita due diligence con otras empresas
✅La UNODC destacó al RITE como referencia internacional en 2024

Módulos del RITE

📋
Programa de Integridad
Módulo principal
Evalúa nivel de madurez (inicial/medio/avanzado) según Art. 23 Ley 27.401. Cuestionario diferenciado por tamaño de empresa.
🔍
Debida Diligencia
Confidencial
Antecedentes judiciales, acciones de remediación y beneficiarios finales.
🔒
Datos Personales
Nuevo 2024
Estado de políticas de privacidad y estrategias de protección de datos.

Cómo registrarse

1
Ingresá a rite.gob.ar y creá cuenta con el CUIT de la empresa
2
Completá el cuestionario inicial para clasificar el tamaño (Micro/Pequeña, Mediana o Grande)
3
Respondé los módulos: Programa de Integridad, Debida Diligencia y Datos Personales
4
Obtené tu certificación de nivel y la constancia de registro
5
Actualizá anualmente para mantener vigente la acreditación
🏛️ Ir al RITE → Ver empresas registradas →

🔴 Alertas activas

📈 Evolución del score


🎯 Brechas vs estándar OA

Actual Mínimo OA Nivel avanzado

📋 Plan de mejora priorizado

📅 Calendario regulatorio unificado

Capacitaciones, plan de mejora y vencimientos normativos en un solo lugar.

Capacitación Plan de mejora Normativo

Próximos vencimientos (todas las fuentes)

📄 Executive Compliance Report Generated automatically — suitable for the Anti-Corruption Office, the board and auditors
⚖️

Executive Compliance Report

Integrity Program · Law 27.401 · International Standards
Responsable:

📊 Overall Compliance Score

—
/100 — Ley 27.401

1. Organization details

2. Integrity Program status (Law 27.401)

3. Compliance score by pillar

4. Elementos pendientes

5. Capacitación

6. Registro RITE

7. Improvement plan

8. Coverage by International Framework

9. Action Plan — Priority Controls

Report generated by the Monitor de Compliance Empresarial. It does not replace the professional assessment of a lawyer or compliance officer. Ph.D. Vicente H. Monteverde · Ecosistema Transparencia