TRANSFORMING COMPLIANCE METRICS: TRANSITIONING FROM PROCESS ASSESSMENT TO PERFORMANCE AND DATA QUALITY ASSESSMENT
Abstract and keywords
Abstract:
As the financial sector transitions to the T+1 settlement standard by 2026 and regulators implement the concept of evidence-based oversight, traditional compliance control systems focused on formal process assessment are losing their effectiveness. The speed of transaction cycles necessitates a transformation of metrics toward productiveness and real-time monitoring. The aim of this article is to develop a conceptual model for the transformation of compliance metrics, ensuring the integration of assessment and data quality into a unified management framework. The research in this paper is based on a comprehensive interdisciplinary approach, combining general scientific methods of deduction, induction, and abstraction with the tools of functional modeling and management design. The applied nature of the work necessitated the use of a group of specialized methods structured by research stages, including content analysis of regulatory acts and a tabular systematization method. The empirical base utilized international standards (ISO 37301:2021), regulatory reports (Bank of Russia, SEC), and analytics from leading consulting groups. As a result, a hierarchical model was proposed, the key element of which is a matrix of the sensitivity of key performance indicators (KEIs) to data quality (DQ) parameters. Unlike existing approaches, the model formalizes the causal relationship between data integrity and the reliability of compliance results. For practical implementation, a practical implementation toolkit was proposed in the form of a "Roadmap," which includes a responsibility assignment algorithm (RACI) and methods for overcoming typical organizational barriers.The proposed toolkit provides a methodological foundation for the implementation of intelligent compliance control systems, which helps minimize regulatory risks and ensures a high degree of automation of procedures. This allows organizations to move from reactively recording violations to proactively designing the resilience of their compliance systems.

Keywords:
compliance metrics, model, sensitivity matrix, data quality, performance indicators, roadmap
Text
Text (RU) (PDF): Read Download
References

1. Norman, W. (2013). Business Ethics. The International Encyclopedia of Ethics / ed. H. LaFollette. Oxford: Wiley-Blackwell, 652–668.

2. Donaldson, T., Dunfee, T. W. (1994). Toward a unified conception of business ethics: Integrative social contracts theory. Academy of Management Review, Vol. 19, No. 2, 252–284. DOI:https://doi.org/10.5465/amr.1994.9410210749.

3. Malloy, M. P. (2011). Banking Law and Regulation. New York : Aspen Publishers.

4. PwC. Global Risk Survey 2023: Building trust in the face of disruption (2023). [Electronic source] URL: www.pwc.com (Date of access: 20.03.2026).

5. Golovin, S. V., Lutsenko, M. S., Shendrikova, O. O. (2021). Issues of organizing compliance control in the digital economy. Bulletin of VSU. Series: Economics and Management, 2, 15–26.

6. Alekseeva, D. G. (2022). Implementation of the know your customer information platform by banks. Property Relations in the Russian Federation, 12(255), 60–75.

7. Kokova, S. F., Dyshekova, A. A. (2022). Digital Transformation of Industries: Starting Conditions and Priorities. Journal of Applied Research, 6, 577–585.

8. Kakovkina, T. V. (2014). Risk-oriented approach in the practice of internal control and audit. All for the Accountant, 3, 36–40.

9. Miller, G. P. (2020). The Law of Governance, Risk Management, and Compliance. New York : Aspen Publishing.

10. ISO 37301:2021. Compliance management systems – Requirements with guidance for use. Geneva: ISO, 2021. [Electronic source] URL: https://www.iso.org/standard/75080.html (Date of access: 20.03.2026).

11. COSO. Enterprise Risk Management – Integrating with Strategy and Performance. New York : COSO, 2017. [Electronic source] URL: https://www.coso.org/enterprise-risk-management (Date of access: 20.03.2026).

12. GOST R ISO 37301–2021. Compliance Management Systems. Requirements and Application Guide. [Electronic source] URL: https://www.gostinfo.ru/catalog/Details/?id=6849783 (Date of access: 20.03.2026).

13. OECD. Recommendation of the Council on Artificial Intelligence / OECD/LEGAL/0449. [Electronic source] URL: https://legalinstruments.oecd.org (Date of access: 20.03.2026).

14. Popondopulo, V. F., Petrov, D. A. (2020). Compliance as a Legal Tool for Minimizing Risks and Preventing Offenses. Vestnik SPbGU. Series 14. Law, 1. 102–114.

15. Gartner Top 10 Strategic Technology Trends for 2025. [Electronic source] URL: https://www.gartner.com (Date of access: 20.03.2026).

16. Kasaeva, T. G. (2019). Antimonopoly compliance in Russia. Proceedings of the Saratov University. A new series. Series: Economics. Management. Right, Vol. 19, Is. 4, 436–441. DOI:https://doi.org/10.18500/1994-2540-2019-19-4-436-441.

17. Loshin, D. (2001). Enterprise Knowledge Management: The Data Quality Approach. Burlington: Morgan Kaufmann, 493 p.

18. Basel Committee on Banking Supervision. Principles for effective risk data aggregation and risk reporting (BCBS 239). [Electronic source] URL: https://en.wikipedia.org/wiki/BCBS_239#References. Date of access: 20.03.2026).

19. PwC. Global Economic Crime and Fraud Survey 2022: Protecting the perimeter. London : PwC, 2022. [Electronic source] URL: https://www.pwc.co.nz/insights-and-publications/2022-publications/pwc-global-economic-crime-and-fraud-survey-2022.html (Date of access: 20.03.2026).

20. Compliance Modernization: A Five-step Roadmap. The Wall Street Journal. [Electronic source] URL: https://deloitte.wsj.com/riskandcompliance/compliance-modernization-a-five-step-roadmap-1500264133 (Date of access: 20.03.2026).

21. Novikov, P. A. (2025). Modern Challenges in Ensuring the Protection of Employees Personal Data. Legal Research, 3, 28–44.

22. EDM Council. DCAM (Data Management Capability Assessment Model) v2.2. New York: EDM Council, 2020. [Electronic source] URL: https://edmcouncil.org/wp-content/uploads/2023/01/EDM-Council-2020-Global-Data-Management-Benchmark-Report-FINAL-v2.2.pdf (Date of access: 20.03.2026).

23. DAMA International. (2017). The DAMA Guide to the Data Management Body of Knowledge (DAMA-DMBOK2). Sedona : Technics Publications, 624.

24. Redman, T. S. (2001). Data Quality: A Practical Guide. Boston: Digital Press, 241.

25. Wang, R. Yu., Strong, D. M. (1996). Beyond Accuracy: What does data quality mean to data consumers? Journal of Management Information Systems, Vol. 12, No. 4, 5–33.

26. Savelyev, A. I. (2021). Scientific and Practical Article-by-Article Commentary on the Federal Law “On Personal Data”. Moscow: Statut, 468.

27. Manaenkov, D. I. (2024). Tax compliance, its effectiveness and role in tax control. Bulletin of Eurasian science, Vol. 16, No. s2. [Electronic source] URL: https://esj.today/PDF/26FAVN224.pdf (Date of access: 20.03.2026).

28. Fonotova, O. V., Indinok, P. D. (2021). Compliance in the Context of Private International Law: The Experience of Transnational Corporations. Legislation, 1, 71–80.

Login or Create
* Forgot password?