--- title: "Compliance should not be the last visa: expert explains why control must be embedded in every stage of a deal" description: "Corporate governance expert Elena Nusinova, in a column for RBC-Ukraine, explains why compliance must be embedded in every stage of the business process rather than working as a final check before signing a contract. A formal approach leads to a loss of resources and reputational risks." date: 2026-09-22T06:32:00.000Z lang: en url: https://xab.info/en/posts/compliance-cross-cutting-integration-into-business-processes tags: [compliance, corporate-governance, risk-management, business-processes, screening, automation] publisher: "XAB.info" --- # Compliance should not be the last visa: expert explains why control must be embedded in every stage of a deal ![Compliance expert explains why control must be embedded in every stage of a deal](https://xab.info/media/2026/09/22/komplaens-skvoznaya-integratsiya-v-biznes-protsessy/komplaens-skvoznaya-integratsiya-v-biznes-protsessy-1.webp) ## 🎯 Key Points - Compliance should not be a final check before signing a contract but must be embedded in every stage of the business process - A formal approach, where compliance is brought in at the last stage, leads to a loss of the company's time, money, and reputational resources - Basic screening can be automated, but analyzing the ownership structure and actual control requires the professional judgment of specialists - Compliance must be present at all key stages: hiring, supplier selection, opening accounts, payments, and attracting investors Compliance is still often perceived as a separate department that gets involved in the process only when the contract has already been prepared, the counterparty has been found, all terms have been agreed upon, the team has spent time, and the business is ready to make a payment. In the view of corporate governance expert Elena Nusinova, this is one of the main mistakes made by companies that formally build a control system but do not get real protection from it. In a column for RBC-Ukraine, the specialist explains why compliance must be integrated into the process from the first step to the completion of the deal, what risks arise from a formal approach, and how to combine control, decision speed, automation, and personal accountability. ### Compliance as a final barrier: where the systemic error lies The typical scheme in most companies looks like this: counterparties are found, contracts are concluded, lawyers prepare documents, finance specialists model payments, and operational units plan the cooperation. Dozens of people are involved in this process, and weeks of negotiations and preparation are spent. And only at the final stage does compliance enter the game: it is this department that is handed the contract, the process, and the payment for approval. At this moment, the check reveals a risk that requires the cooperation to be stopped. Formally, compliance has performed its function correctly. But from the perspective of the business process, the company has already incurred substantial costs: employee time, legal support, negotiations, operation preparation, and sometimes reputational commitments to the other party. Nusinova emphasizes: if a company truly wants to manage risks rather than create the appearance of control, compliance must work not as a final barrier but as a cross-cutting element of the business process. ### Cross-cutting control: from basic screening to in-depth verification According to the expert, if a standard basic screening is carried out at the start, then at subsequent stages an in-depth check must be provided where it is truly necessary. Repeated control at intermediate stages allows the company to understand much earlier whether it should even proceed with cooperation with a particular partner. Nusinova notes that such a strategy does not complicate the business but, on the contrary, saves resources: the company does not invest months in a project that at the final stage turns out to be impassable due to compliance requirements. At all key stages β€” from hiring an employee for a critical or managerial position to choosing a supplier, working with a contractor, opening accounts, making payments, and attracting investors β€” compliance must be present as an embedded element, not as an external overseer. ### Automation and the limits of machine analysis Basic screening today can be largely automated. When a process roadmap is built and cross-cutting compliance is embedded into it, this function begins to deliver real efficiency. Standard checks β€” for example, whether a counterparty is Russian in a given case β€” have long been built into operational products and automated systems. However, as Nusinova emphasizes, a program cannot analyze beyond the basic level. If the ultimate beneficial owner turns out to be a citizen of China or Greece, the algorithm stops. Further, compliance specialists must step in, who examine the company from different angles: who actually controls the structure, what links stand between the operating company and the ultimate owner, whether there are related parties, sanctions or reputational risks, and whether the business structure corresponds to the declared economic activity. The stronger control systems become, the more complex the schemes that try to circumvent them. Automation is necessary, but it is not yet able to fully replace professional judgment. ### Three blocks without which the system is incomplete Nusinova highlights three blocks without which a compliance system cannot practically be considered complete. The first of them is counterparties: it is important not to limit oneself to a formal name check in a database but to build a multi-level analysis of the ownership structure and actual control. The expert points out that it is at this stage that depth is most often lost: the company sees a 'clean' name in the registry but does not understand who stands behind it and what risks the structure as a whole carries. The other two blocks, which the expert identifies in her methodology, complement control over internal processes and accountability for decisions made, forming a closed loop of risk management from entering a deal to closing it. The key takeaway of the column is that compliance stops being a burden for the business at the moment it stops being the final instance. A control process embedded in every stage does not slow down decisions β€” it makes them more accurate and protects the company from losses that far exceed the cost of a preventive check. For a market where sanctions, reputational, and operational risks continue to grow, the transition from formal compliance to cross-cutting risk management stops being an option and becomes a condition for sustainable operation. ## πŸ” Fact-Check Verification - [Compliance in the overall chain of a company's business processes: how to combine control and speed](https://www.rbc.ua/ukr/news/komplaens-zagalnomu-lantsyugu-biznes-protsesiv-1789985562.html) - Колонка экспСрта Π•Π»Π΅Π½Ρ‹ Нусиновой, опубликованная Π² Π Π‘Πš-Π£ΠΊΡ€Π°ΠΈΠ½Π°. ВСкст являСтся экспСртным ΠΌΠ½Π΅Π½ΠΈΠ΅ΠΌ ΠΏΠΎ вопросам ΠΊΠΎΡ€ΠΏΠΎΡ€Π°Ρ‚ΠΈΠ²Π½ΠΎΠ³ΠΎ управлСния ΠΈ комплаСнса. Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ ΠΏΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π°Π΅Ρ‚ Ρ„Π°ΠΊΡ‚ ΠΏΡƒΠ±Π»ΠΈΠΊΠ°Ρ†ΠΈΠΈ ΠΈ содСрТаниС Π°Ρ€Π³ΡƒΠΌΠ΅Π½Ρ‚Π°Ρ†ΠΈΠΈ. ВСкст Π² прСдоставлСнной вСрсии обрываСтся Π½Π° пСрСчислСнии Ρ‚Ρ€Ρ‘Ρ… Π±Π»ΠΎΠΊΠΎΠ² комплаСнса. ## ❓ FAQ ### Q: Why should compliance not be a final check before signing a contract? **A:** In Elena Nusinova's view, when compliance is brought in at the last stage, the company has already incurred costs for employee time, legal support, negotiations, and operation preparation. If the check reveals a risk, all these resources are lost. Cross-cutting control at every stage allows the problem to be identified earlier and resources to be saved. ### Q: What can and cannot be automated in compliance? **A:** Basic screening β€” for example, checking a counterparty against sanctions lists β€” can and should be automated. However, analyzing the ownership structure, identifying the actual controlling person, detecting related parties, and assessing reputational risks are not yet something a program can fully perform. Compliance specialists are needed for this. ### Q: At which stages of the business process is compliance required? **A:** The expert points out that compliance must be present at all key stages: when hiring an employee for a critical or managerial position, when choosing a supplier, working with a contractor, opening accounts, making payments, and attracting investors. ### Q: Does cross-cutting compliance complicate the business's work? **A:** No, Nusinova asserts. On the contrary, such a strategy saves resources: the company does not invest time and money in a project that at the final stage turns out to be impassable due to compliance requirements. Early control allows for faster, well-founded decisions.