For businesses today, the challenge is no longer simply to understand and comply with the law. They must also be able to identify risks early, adopt controls that work in practice and demonstrate, through verifiable evidence, that their decisions and actions form part of an effective compliance system.
With that purpose, C.R. & F. Rojas Abogados and theDUEco have entered into a strategic alliance to support companies, boards and investors in designing, implementing and strengthening their compliance, risk-management and corporate-governance systems.
The alliance combines ROJAS’s legal and regulatory experience with theDUEco’s technical and methodological capabilities in compliance, risk intelligence, management systems and control implementation. The result is an integrated proposition that can accompany each organisation from risk identification through to the execution and monitoring of concrete solutions tailored to its sector, structure, exposure and level of maturity.
The aim is not to produce more documents, but to build a system that can be understood, used, supervised and evidenced.
A practical response to increasingly complex risks
Organisations operate in an environment where compliance expectations arise from many sources: authorities, clients, corporate groups, financial institutions, investors, business partners and international supply chains. Policies and manuals are insufficient if they do not translate into clear responsibilities, workable processes, documented controls and an effective capacity to respond.
The new alliance is designed to close that gap between law and operations. ROJAS contributes legal analysis, knowledge of Bolivia’s regulatory environment and the multidisciplinary experience required to address the corporate, contractual, employment, tax, criminal, regulatory and reputational consequences that may arise from a compliance risk. theDUEco contributes specialised methodologies and tools to assess risk, design systems, implement controls, create traceability and support their ongoing operation.
Clients therefore receive a coordinated solution integrating law, business strategy and technical execution.
New capabilities for our clients
Through this alliance, we offer services including:
- legal, regulatory and integrity diagnostics;
- compliance risk assessments and maturity analyses;
- DUE Risk Scan™ and gap analyses against international standards;
- design and implementation of compliance programmes and management systems;
- preparation for ISO 37301, ISO 37001 and other applicable standards;
- drafting and review of codes of conduct, policies and procedures;
- risk, control, responsibility and evidence matrices;
- fraud, corruption and money-laundering prevention systems;
- third-party due diligence and management programmes;
- design, implementation and review of whistleblowing channels;
- protocols for conflicts of interest, investigations and incident response;
- training for boards, executives, compliance officers and teams;
- internal audits and effectiveness assessments;
- internal investigations, crisis management and remediation plans;
- periodic monitoring and ongoing compliance support; and
- documentary and operational preparation for certification processes.
Services may be engaged as a complete programme or in stages, according to each organisation’s priorities, resources and needs.
DUE Risk Scan™: an executive starting point
For companies that need to understand their exposure quickly and establish priorities, the alliance incorporates the DUE Risk Scan™, an executive assessment designed to identify and prioritise up to three critical risks for the organisation over an approximate four-week period.
The assessment helps focus resources on the highest-impact issues, establish a realistic improvement plan and determine whether the company requires targeted interventions or the progressive development of an integrated compliance system. Not every organisation needs to begin with a complete programme; in many cases, the right first step is to understand where its most material risks lie, which controls already exist and which gaps require immediate attention.
From formal compliance to effective risk management
Our approach starts from a simple premise: compliance should help a company make better decisions, protect its continuity and engage with greater confidence with authorities, clients, lenders, investors and business partners.
Each project may therefore be developed progressively: diagnosis → risk prioritisation → improvement plan → implementation → monitoring → preparation for certification.
This model avoids generic or disproportionate solutions. Measures are designed with the company’s activities, size, structure, markets, third-party relationships and regulatory exposure in mind. The aim is not to produce more documents, but to build a system that can be understood, used, supervised and evidenced.
Clearly defined responsibilities
The alliance maintains a clear allocation of professional responsibilities. C.R. & F. Rojas Abogados will lead the legal and regulatory component, including statutory interpretation, legal strategy and the treatment of implications arising from each risk or incident.
theDUEco will provide the methodologies, tools and technical capabilities required for the diagnosis, design, implementation, training and monitoring of compliance and risk-management systems.
Where an organisation elects to pursue certification, ROJAS and theDUEco may support its legal, documentary and operational preparation. The certification audit and final decision will in all cases remain with an independent certification body. This separation protects the objectivity of the process and avoids any confusion between preparation for certification and the granting of certification itself.
Two complementary capabilities
Founded in 1900, C.R. & F. Rojas Abogados is Bolivia’s longest-established law firm. Its practice spans the principal areas of law and combines local knowledge, experience in complex matters, international reach and direct partner involvement. This legal platform is complemented by theDUEco’s specialisation in governance, risk intelligence and compliance.
theDUEco is led by its founding partner, Luis María González, a compliance specialist and executive with more than twenty years of experience in business management, corporate integrity, fraud prevention, strategy and crisis management. The alliance brings together ROJAS’s legal and institutional depth with specialised technical execution, without altering the independence or professional responsibilities of either firm.
Particularly relevant for companies seeking to
- meet national or sector-specific regulatory requirements;
- respond to requirements from parent companies or corporate groups;
- address client and investor due-diligence processes;
- protect the organisation and its governing bodies against compliance risks;
- prevent fraud, corruption, conflicts of interest and misconduct;
- participate in tenders or international supply chains;
- access markets, financing or investment;
- strengthen corporate governance and internal controls;
- prepare for international certification;
- manage a report, investigation or crisis appropriately; and
- turn integrity into a competitive advantage.
Compliance that protects and builds trust
An effective compliance system should not be an isolated structure or a collection of documents. It should be embedded in the way an organisation decides, contracts, supervises, investigates and responds.
This alliance expands our ability to support clients throughout that journey, combining legal rigour, knowledge of the business environment, risk intelligence and technical execution. Our purpose is to help organisations transform compliance into an infrastructure of trust: a capability that protects the business, strengthens reputation, improves decision-making and demonstrates diligent conduct.
We welcome a conversation about your organisation’s compliance risks, challenges and opportunities.
