The Pull & Push of Compliance Policies & Training

“…companies used to bring in binders full of their policies….I really don’t care what the policy says….I’m more interested in how the policies actually operate.”

That’s a quote from Hui Chen from an interview with Bloomberg BNA. Hui Chen is the former compliance counsel for the U.S. Department of Justice (DOJ). She is also the author of the DOJ’s Evaluation of Corporate Compliance Programs published earlier this year. Considering people whose opinion can define compliance effectiveness, there are few more powerful than Chen’s.

In her quote, Chen is alluding to the importance of organizational culture and how policies operate as an important component of a more expansive ecosystem of compliance. This ecosystem approach ensures that individual segments of your compliance program do not operate in a vacuum, but are integrated into every other function of your ethics and compliance efforts. The result of this integration is a strong culture that is manifested throughout the entire organization.

Read More: Reflections on My Interview with Hui Chen on Compliance Program Effectiveness

So what operationalizes policies? The answer is twofold.

Operationalization Starts with a Framework

First, we do need a binder full of policies. At NAVEX Global we believe this “binder” needs to be an automated, centralized management solution full of updated policies. This creates the framework of your organization’s compliance program. This framework then needs to be full of policies and procedures that are both relevant and influential. They need to go beyond simply words on a page and instead properly package guidance in ways that effectively transfer concepts into the minds of readers. The best example of this is your code of conduct. Your code is your corporate constitution. It puts a stake in the ground saying this is who we are as an organization and what we strive for. Without proper relevance and clarity, the “who we are” becomes ambiguous to employees and, importantly, to prosecutors.

Once messaging is buttoned up, your policies must be able to be evoked easily and navigated intuitively by employees. Findability and search-ability are key to ensuring expectations and standards are not out of sight and out of mind.  Employees should engage with these documents like reference guides to be consulted when needed, rather than miscellaneous paperwork to be filed away.

This is the first step to operationalizing policies. The DOJ’s guidance clearly delineates that prosecutors ask organizations about the design, accessibility and operational integration.

So, if a “binder full of policies” was acceptable, this would check the box. However, it is not.



Chat with a solutions expert to learn how you can take your compliance program to the next level of maturity.

Green IT: What You Need to Know
The Existential Threat of Fraud

How to Weigh Costs & Benefits of Compliance

The compliance community is going to hear more discussion in coming months about the costs and benefits of compliance programs – for the companies themselves, investors, and the public at large.So we’re back to the perennial question: How do we articulate the ROI of compliance, and the ROI of an ethical culture generally? Let's discuss.
Previous/Next Article Chevron Icon of a previous/next arrow. Previous Post

Frontier Markets Require a Long-Term Investment in Compliance & Success

The rewards from investing in so-called “frontier markets” are enticing, but with reward comes risk, as frontier markets are often where lucrative business opportunities and corruption risk collide. Let's talk about the many variables that need to be considered to achieve long-term success in these markets.
Next Post Previous/Next Article Chevron Icon of a previous/next arrow.