Compliance

Compliance Policy

Sterling is a well run business with a strong culture of compliance and a mature approach to GRC led from the top down. Sterling is governed by a board of directors, including two Non-Executive Directors, with deep experience of governance and risk best practice. Sterling has an established risk register to form the basis of the risk assessment process.

Leadership-endorsed risk management fosters a responsible corporate culture to GRC Risk assessment forms the basis for effective internal controls and compliance program. Our approach involves:

• Documented policies, guidelines and procedures ensure protocols are followed and enforced
• Structured dissemination of laws, regulations, corporate policies and prohibited conduct
• Well-defined monitoring, auditing and reporting with commitment to remediation
• All identified risks are graded based on risk type, impact and likelihood of occurrence
• Changes to policies and internal controls are actioned via the risk register
• Risk register is reviewed during monthly board and management meetings
• Full range of policies to ensure internal staff aware of requirements
• Policies and procedures are reviewed annually and updated based on regulatory and market changes
• All new staff inducted and trained on key policies
• Existing staff retrained as policies change / at regular intervals
• Sterling Partners managed through on-going Accreditation process
• Internal and external training to ensure policies are understood and followed
• Use both face-to-face and e-learning training as appropriate
• Training officer responsible for roll out and tracking of results
• Recently rolled out Cyber Security and Data Protection training to ensure market best practice
• Risk register and compliance is reviewed and updated during monthly board and management meetings
• Regular audits are conducted on partners as part of Partner Accreditation to ensure partner compliance
• Compliance officer leads regular and random internal audits
• CEO takes responsibility for addressing identified issues with Board oversight.