Category: Risk & Compliance

The chief of staff’s responsibilities for risk and compliance differ significantly between Sweden, Germany and France. In Sweden, the model is decentralized and based on sectoral regulatory authorities, flat hierarchies and consensus. The CoS often has a broad, coordinating responsibility and must involve trade union partners and work transparently. In Germany, compliance is more formalized, with requirements for dedicated compliance officers, centralized oversight (BSI for NIS2) and extensive documentation under the HGB and GmbHG. German companies often have formal compliance management systems and reporting directly to the board. In France, the Sapin II law requires companies to have anti-corruption programs, risk mapping and dedicated compliance officers at board level. French companies also have strong requirements for whistleblower protection and risk management. Overall, this means that in Sweden CoS must be more relationship- and process-oriented, while in Germany and France the role is more formally regulated and hierarchically controlled, with greater focus on documentation and centralized control.