Global Workforce Risk & Culture Assessment Program
A fixed-term, relationship-based assessment that surfaces compliance, fraud, workforce, and operational risks that hotlines, surveys, and audits may not reach.
See risk earlier. Give every team a voice.
KINVERITY™ works alongside your existing compliance program. The name combines kin, reflecting connection and belonging, with verity, meaning truth. Hotlines and culture surveys capture only what employees choose to report. KINVERITY™ builds relationships with respected people in each region, giving remote employees a trusted voice, strengthening their connection to the organization, and surfacing issues while there is still time to act.
The practice is led by Kevin R. Brenner, a former federal prosecutor with two decades of investigative leadership experience, and sits within FCPA & Anti-Corruption and Investigations. Each engagement is tailored to the company’s operational footprint, regulatory exposure, workforce, and existing compliance posture.
Problems rarely come out of nowhere. Misconduct often develops over months or years, and the people closest to it usually know first. Few hotline reports may reflect silence and disconnection. KINVERITY™ helps organizations hear those employees earlier, act on what they know, and build a more connected and resilient global workforce.
The Risk
- The cost of getting it wrong
- Three kinds of exposure. One root cause.
- Where this risk is concentrated
The cost of getting it wrong
Selected FCPA enforcement penalties, total U.S. government resolutions.
Three kinds of exposure. One root cause.
FCPA gets the headlines. Fraud, discrimination, and harassment carry comparable exposure, and are just as invisible when employees do not trust the channels.
Where this risk is concentrated
Five regions account for the vast majority of FCPA enforcement actions, per Stanford FCPA Clearinghouse data.
India
Complex licensing regimes, multi-layer intermediary networks, and persistent pressure to facilitate permits through unofficial channels. Customs, labor, and regulatory officials are common exposure points.
China
State-owned enterprise counterparties, opaque government decision-making, entrenched gift and entertainment expectations, and party-affiliated officials embedded in supplier and distribution chains.
Latin America
Public contract bribery, customs and inspection official payments, and deep dependence on local agents whose government relationships are rarely disclosed or monitored.
Middle East
Mandatory local partner structures, opaque beneficial ownership, and normalized facilitation payment expectations across sectors, particularly in energy, construction, and government procurement.
Africa
Energy and extractive sector corruption in oil-producing states. Nigeria, Gabon, and Angola rank in the top 15 countries globally by FCPA enforcement action count. Government procurement and agent networks are the primary exposure points.
Why It Stays Hidden
- What we see in practice
- Why people stay quiet
- Already have a program? Here is what it does not cover.
- Why the truth is hard to surface
What we see in practice
Issues Rarely Come Out of Nowhere.
They accumulate over months, sometimes years, before reaching a hotline, an auditor, or a regulator. The problem existed long before anyone formally found out.
People Know Before They Report.
Employees in the field, managers, intermediaries and local staff, often have direct knowledge of pressure and misconduct long before it surfaces formally. They carry it quietly.
The Silence Is the Signal.
Regions with low hotline reporting and strong culture survey scores are often not clean. They are quiet.
Why people stay quiet
Employees often recognize pressure or misconduct before it reaches a hotline, auditor, or regulator. Fear of retaliation, distrust of reporting channels, and normalization of local practices can suppress reporting. Low complaint volume may therefore reflect limited trust rather than limited risk.
Fear of Retaliation
Employees in high-risk regions rarely trust that reporting will be handled confidentially. The calculus is straightforward: the perceived risk of speaking up outweighs any likely benefit.
Distrust in the Channel
Hotlines and ethics portals are viewed as corporate surveillance, not genuine safety valves. When employees do not trust the channel, they do not use it. Zero reports can mean zero trust.
Cultural Normalization
In many markets, payments to officials or informal facilitation are treated as ordinary business costs. Employees do not report what they do not recognize as wrongdoing. The compliance program never sees it.
Already have a program? Here is what it does not cover.
A well-built compliance program handles what gets reported. The limitation is not the program, it is structural. It cannot reach what employees know but have not said.
Your Channels Capture What Gets Reported.
Hotlines and ethics portals are passive infrastructure. They measure who chose to submit something. They cannot measure the gap between what employees know and what they disclosed, and that gap is where most misconduct lives before it becomes a government matter.
Culture Metrics Measure Stated Beliefs, Not Behavior.
A region scoring 4.2 out of 5 on an annual culture survey can be running systematic payments through a local agent. Both facts are true simultaneously. The survey does not know, because it can only record what employees chose to say.
Ground-Level Truth Requires Relationships, Not Infrastructure.
The employees most likely to know about misconduct are often least likely to use a hotline. Getting to them requires months of trust, the kind built through repeated personal contact, not a portal and a policy. Your program cannot build that at scale. We can.
Why the truth is hard to surface
The most important information rarely surfaces through formal channels, not because programs are broken, but because surfacing it requires trust.
What Programs Capture Well
- Reported hotline complaints
- Annual ethics survey responses
- Training completion rates
- Disclosed conflicts of interest
- Gifts and expenses reports filed
What Is Harder to Reach
- Misconduct that employees know about but have not reported
- Pressure being felt at the operational level
- Informal practices that do not register as violations
- Silence driven by fear rather than absence of issues
- What agents and intermediaries are doing in the company’s name
How Works
- Our approach
- How KINVERITY™ works
- What this uncovers
- Where risk actually hides
People tell the truth where trust exists. We build that trust before problems start.
Not a survey. Not a hotline. Not an audit.
How works
Four steps, within a defined assessment period.
Focus
Select the markets, offices, and risk themes where leadership needs better visibility.
Connect
Through colleague recommendations, on-site training sessions, and other appropriate channels, identify respected employees across functions and invite them to participate in a scheduled series of private, structured conversations.
Assess
Evaluate reported concerns, pressure signals, silence patterns, and operational anomalies.
Deliver
Provide findings, recommended actions, escalation protocols, and supporting documentation for management or board review.
What this uncovers
Signals your existing program may not capture.
Pressure indicators
Employees being pushed toward questionable conduct, before it becomes misconduct. This is the moment a compliance program can prevent something.
Unreported patterns
Conduct that is known internally but has not been disclosed, through fear, normalization, or distrust of channels. The gap between what happened and what the program saw.
Cultural risk conditions
Leadership behaviors, regional norms, and silence patterns that reliably precede problems. Early data on where the next issue is most likely to originate, and when.
Operational concerns
Supplier, workforce, or management issues that may affect performance as well as compliance.
Culture surveys tell you what employees are willing to say. Trust determines what they are willing to disclose.
The gap between the two is where problems accumulate.
Low Culture Score, but Employees Will Speak Up.
Problems tend to surface through normal channels.
High Culture, High Trust. Issues Surface.
Your program works here.
Elevated Risk
Weak culture and low trust increase the risk that material concerns remain undisclosed.
Strong Survey Scores. No Hotline Reports. Leaders Say Everything Is Fine.
This is where issues accumulate, and where conventional programs cannot look.
Proof
- Case study
- Why a strong program is not enough
- Benefits beyond compliance
- In practice
Global manufacturer · $4B revenue · Southeast Asia operations
Strong compliance metrics. Few hotline reports across Southeast Asian subsidiaries in 18 months. Annual culture survey rated the region 4.2 out of 5.0. The program showed nothing unusual.
Trust scores told a different story. Through structured relationship conversations, practitioners identified a pattern: systematic payments to customs officials, known to regional management, treated as a normal cost of operations, and never reported.
The company evaluated voluntary disclosure, implemented targeted remediation, and strengthened board oversight. The matter illustrates how earlier visibility can preserve more response options.
Why a strong program is not enough
DOJ guidance focuses on whether compliance programs function effectively in practice. KINVERITY can help create evidence of risk-based outreach, employee access to reporting channels, escalation discipline, and documented remediation. It is designed to complement, rather than replace, the existing compliance framework.
Benefits beyond compliance
What a defined assessment produces, beyond the compliance record.
Earlier escalation
Operational and workforce concerns reach leadership sooner, while response options are still open.
Clearer communication
Better communication between headquarters and regional teams, in both directions.
Employee confidence
Stronger employee confidence in internal reporting, including in markets where hotlines see little use.
Operational visibility
Better visibility into supplier, management, and market risks that affect performance as well as compliance.
Board-level clarity
Clearer information for executive and board decision-making, supported by documentation.
Three examples of what trust infrastructure produces, beyond the compliance record
East Asia manufacturing operation. Regional staff flagged a supplier quality issue in month 3 of the program. The same type of issue had previously run 11 months before surfacing in a customer complaint, at roughly 8x the remediation cost. The intelligence existed. The trust to share it did not.
LATAM regional leadership transition. When the regional GM departed unexpectedly, established relationships kept local staff stable and productive throughout the 90-day transition. Comparable offices without trust infrastructure typically see 20 to 30% key-person attrition in similar transitions, knowledge that often takes years to rebuild.
UK global distribution company. A regional manager, trusted, high-performing, never flagged, had been running a procurement fraud scheme for years. A local participant surfaced it through a relationship conversation. The manager had seniority and the benefit of the doubt. The source had trust.
Engage
- What engagement looks like
- The client playbook
- Three ways to engage
- Procurement red flags in the data
What engagement looks like
Four phases within a defined engagement. Each engagement has a defined scope, schedule, and conclusion. Any follow-on work is separately agreed.
The client playbook
Five steps that determine how much the program can surface.
Three ways to engage
Scope and intensity scale with your footprint. Pricing is scoped after a no-commitment discovery conversation.
All tiers personally led by Kevin R. Brenner: in-country, not delegated to junior staff or third-party vendors.
Procurement red flags in the data
For clients seeking a data-supported review, KINVERITY can assess vendor, invoice, payment, and approval data for anomalies requiring human review. The analysis identifies patterns for further investigation; it does not determine that misconduct occurred.
Vendor Concentration
One vendor absorbing a third of regional spend, priced well above comparable bids, with no competitive process on file.
Threshold Gaming
Multiple invoices from the same vendor, each sized just under the approval limit, filed within days of each other.
Payment Timing
Payments clearing within 48 hours of a customs or licensing deadline, in a market where standard terms run 30 to 45 days.
Employee and Supplier Ties
An approving employee sharing an address, phone number, or bank detail with a vendor they repeatedly approve for payment.
The agent surfaces the anomaly. We decide what it means, alert you, and investigate. Scoped to your footprint. Priced after a discovery conversation.
Get better visibility into one market.
Start with a defined assessment of the region or operation where leadership has the least confidence in existing reporting. Fixed scope. Defined deliverables. No commitment beyond the agreed engagement.
Strategic Legal Counsel for Healthcare & Health Technology
Your organization faces legal and regulatory complexity that demands more than outside counsel. It demands a partner who has sat on your side of the table.
From government investigations and FCPA matters to healthcare M&A and payer contracting, we’ve handled it from the inside and from the courtroom.
Whether you need fractional leadership, transactional support, or a defensible compliance framework, we deliver counsel built around what the business actually needs. What sets us apart is real-world in-house experience. Our partners have served in senior legal roles within large and publicly traded companies, giving them a direct understanding of what business leaders and boards actually need from legal counsel.