How do you build a culture of compliance that doesn't feel like policing?
Participer à la discussionAucune garantie sur le contenu du forum. Les informations, opinions et discussions partagées sur ce forum sont fournies par les membres de la communauté et l'équipe LexFlag et ne constituent pas des conseils professionnels. LexFlag n'approuve, ne vérifie ni ne garantit l'exactitude, l'exhaustivité ou la fiabilité du contenu publié.
Identité des utilisateurs et contenu généré par l'IA. Rien ne garantit que les utilisateurs utilisent leur vrai nom, représentent une organisation ou expriment leurs propres opinions. Les réponses et contributions peuvent être partiellement ou entièrement générées par l'intelligence artificielle.
Vérification indépendante requise. Vous devez vérifier de manière indépendante toute information obtenue sur ce forum avant de prendre toute décision. LexFlag, ses affiliés et les contributeurs déclinent toute responsabilité pour toute perte ou tout dommage résultant de la confiance accordée au contenu du forum.
I keep reading about the importance of compliance culture and building a "culture of compliance" but most of the advice boils down to "tone at the top" and "training." Those are fine but they don't change behavior in my experience.
At our organization, the business units see compliance as a bottleneck. They do the minimum required and dodge us when they can. It's not malicious — they're just focused on revenue targets and compliance feels like friction.
Has anyone actually succeeded in building a genuine compliance culture where people proactively think about compliance? What specifically did you do differently?
This is one of the most common challenges in compliance and there's no silver bullet, but here's what we've seen work:
Make compliance visible in incentives. If compliance culture isn't reflected in how people are evaluated and paid, it will always be secondary. Add compliance metrics to performance reviews for business managers — not just "did you complete training" but "did you escalate issues appropriately, did you cooperate with audits, how many policy exceptions did your team have."
Embed, don't enforce. The best compliance cultures happen when compliance staff are embedded in business teams rather than sitting in a separate department sending emails. When a compliance person attends product planning meetings, they catch issues early and the business sees them as a partner rather than a referee.
Celebrate good catches, not just punish failures. Most organizations only talk about compliance when something goes wrong. Flip that — publicly recognize teams that identified and escalated issues. It signals that speaking up is valued.
Simplify the rules. If your policies are 200 pages long and written in legal-ese, nobody will read them. A strong culture of compliance requires rules that people can actually understand and remember. Short, clear, practical.
FinCEN has explicitly stated that a culture of compliance is an expectation for regulated institutions. It's not just nice-to-have — examiners evaluate it.
2 réponses
One thing that shifted our compliance culture dramatically: we started doing compliance culture surveys — anonymous, short, asking questions like "do you feel comfortable raising compliance concerns?" and "do you understand how compliance applies to your role?"
The first survey results were brutal but incredibly useful. Turns out 60% of our staff felt compliance training was irrelevant to their actual work. We used that data to completely overhaul our training approach — made it role-specific instead of one-size-fits-all. Engagement went up, and more importantly, the number of voluntary compliance escalations doubled within a year.
The survey itself also sent a message: we care about your experience with compliance enough to ask.
Connectez-vous pour répondre
Plus de discussions dans Discussion générale
How to Handle PEP and Adverse Media Screening When Data is Limited
SOX compliance database changes — what level of documentation is expected?
SOX compliance requirements for IT — where do you even start?
Parcourir les autres catégories
Besoin d'aide ?
Notre équipe de soutien est là pour répondre à vos questions
Messagerie intégrée
Les utilisateurs inscrits peuvent contacter le soutien directement via la messagerie.
Se connecter S'inscrire