A Balanced Scorecard for Compliance -Requirements of a Comprehensive Compliance-Reporting

摘要

Companies increasingly focus on compliance and progressively establish various compliance measures. Despite these efforts, in general no comprehensive overview of all compliance data exists. An enterprise must however communicate its compliance to multiple internal and external stakeholders. A central compliance reporting - ideally using an already existing reporting concept - is to be developed. The balanced scorecard concept is already widely accepted and used for reporting purposes in theory and practice. This paper details the research objective, design and conduction of an empirical exploration investigating the development of a compliance scorecard. Using the grounded theory method, core categories are derived which provide insight into the appropriateness of a balanced scorecard for compliance reporting as well as into required components of such a tool. Three of the core categories confirm findings of prior literature. They prove the rising importance of compliance, the availability of scorecards as well as the tool's appropriateness for a compliance reporting. The fourth core category however provides insight into the implications of a compliance scorecard and its most important components thus going beyond existing results. It clearly outlines that a comprehensive compliance scorecard should comprise an elaborate workflow to ensure immediate remediation activities. The remediation status then is again subject to the reporting. In addition possibilities for risk classification are required. Finally the set up of the compliance scorecard as a modular template allows for its transferability to various industries and enables a compliance benchmarking between different companies.