Please ensure Javascript is enabled for purposes of website accessibility
Home / default / The SEC Wants Your Company To Be 'Cultured' – Creating an Effective Compliance Program

The SEC Wants Your Company To Be 'Cultured' – Creating an Effective Compliance Program

For many corporate counsel, “culture” and “compliance” seem to be mutually exclusive concepts.

Culture is squishy and conceptual. Compliance is definitive and measurable. Follow the seven steps in the Federal Sentencing Guidelines, and, voila, you have a compliance program. Why would corporate counsel even have to bother with the whole idea of managing their company’s culture? That’s an HR issue.

But the world of compliance has changed, and chief legal officers are actively learning how to manage this new reality.

Compliance programs have proliferated since the enactment of the Federal Sentencing Guidelines and the landmark 1996 Delaware Chancery Court decision In re Caremark. But the promulgation of compliance programs hasn’t led to less compliance violations and ethics scandals.

As noted by corporate governance expert professor Charles Elson: “Under Caremark, boards were required to ensure that appropriate legal compliance mechanisms were established by the corporation. The result was a rush to create vast compliance programs that may have acted to limit a director’s (and a corporation’s under the Guidelines) potential liability, but did little to create a climate within the organization that ensured responsible and ethical behavior.”

We can’t forget that Enron had a code of ethics. And it wasn’t as if WorldCom didn’t have extensive internal controls. But both had cultures where engaging in unethical conduct was tacitly condoned, if not encouraged.

The focus has shifted clearly towards looking at what is going on inside organizations that is either keeping people from doing the right thing, or, as importantly, keeping people from doing something about observed misconduct. The data confirms this trend and the regulators and prosecutors are responding.

The Ethics Resource Center recently released the 2005 National Business Ethics Survey (NBES), which clearly confirms the trend towards recognition of the role of corporate culture. If an organization wants to reduce the risk of unethical conduct, it must focus more effort on building the culture than on building a compliance infrastructure.

Based on interviews with over 3,000 employees and managers nationwide, the survey disclosed that – despite the increased implementation of ethics and compliance program elements – desired outcomes, such as reduced levels of observed misconduct, have not changed since 1994.

Even more striking is the revelation that while formal ethics and compliance programs have some impact, it is the organizational culture that has greater influence in determining program outcomes.

The SEC and the Department of Justice have been watching these trends as well. Stephen Cutler, the recently retired SEC Director of the Division of Enforcement, was matter of fact about the importance of looking at culture when it came to decisions of whether to bring an action:

“We’re trying to induce companies to address matters of tone and culture. What we’re asking of that CEO, CFO or General Counsel goes beyond what a perp walk or an enforcement action against another company executive might impel her to do. We’re hoping that if she sees that a failure of corporate culture can result in a fine that significantly exceeds the proverbial ‘cost of doing business,’ and reflects a failure on her watch – and a failure on terms that everyone can understand, the company’s bottom line – she may have a little more incentive to pay attention to the environment in which her company’s employees do their jobs.”

Making it Happen

How do you it? Where’s the best place for a corporate counsel to start in assessing the impact of the company’s culture on the ability of their company to stay out of trouble?

Only lagging companies still measure the success of their ethics and compliance programs only by tallying the percentage of employees that have certified reading the Code and attended ethics and compliance training.

The true indicator of success is whether the company has make significant progress in achieving key program outcomes. The National Business Ethics Survey listed four key outcomes that can be used to determine the success of a program:

  • Reduced misconduct observed by employees;
  • Reduced pressure to engage in unethical conduct;
  • Increased willingness of employees to report misconduct;
  • Greater satisfaction with organizational response to reports of misconduct.

    The mere presence of codes of conduct, reporting systems, and compliance training is not enough to move these outcomes in the right direction. What the NBES uncovered is that only by influencing key elements of the culture will the organization see positive movement in program outcomes.

    What are these key elements? The NBES calls them “Ethics-Related Actions” and they relate to key behaviors demonstrated by top management, middle management, supervisors and co-workers.

    These “ERAs” look to whether managers and employees:

  • Make ethics as a priority;
  • Set a good example of ethical conduct;
  • Keep commitments;
  • Provide information about culture and compliance;
  • Consider ethics in decision-making; and
  • Talk about ethics in the workplace.

    What’s the significance of culture? According to the NBES, “where top management displays certain ethics-related actions, employees are 50 percentage points less likely to observe misconduct.” There is no other factor in any ethics survey that can demonstrate such a drastic influence.

    Moving in the Right Direction

    How do compliance leaders move their organizations to these new directions?

    1. The criteria for success of your ethics program must be outcomes-based. Merely checking off program elements, even from the seven steps of the Federal Sentencing Guidelines, is not enough to change behavior.

    2. Each organization must identify its own key indicators of its culture. Only by assessing its own ethical culture can a company know what behaviors are the most influential in effecting change.

    3. The organization must gauge how all levels of employees perceive adherence to values by others within the company. One of the surprising findings of the NBES was that man agers, especially senior managers, were out of touch with how non-management employees perceived their adherence to ethical behaviors. Non-managers are 27 percentage points less likely than senior managers to indicate that executives engage in all of the ethics-related actions outlined in the survey.

    4. Formal programs are guides to shape the culture, and not vice-versa. People who are inclined to follow the rules appreciate the rules as a guide to behavior. Formal program elements need to reflect the culture in which they are deployed if they are going to be most effective in driving the company to the desired outcomes.

    Culture may be new on the radar screen, but it’s not outside the scope or skills of forward-thinking corporate counsel. Culture can be measured and corporate counsel can play a leadership role in developing systematic approaches to move companies in the right direction.

    And the SEC and your local U.S. Attorney will be so happy with how “cultured” you’ve become.

    David Gebler is president of Working Values, Ltd., a business ethics training and consulting firm specializing in developing behavior-based change to support compliance objectives. David earned his J.D. from the University of California Davis School of Law.