Categories
AI Today in 5

AI Today in 5: February 5, 2026, The Google Goes for the Jugular Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. Google vows to outspend everyone. (BusinessInsider)
  2. AI communications governance criticality. (FinTechGlobal)
  3. Even with the Trump administration’s AI order, companies must remain vigilant. (CXDive)
  4. World’s first viral AI agent has arrived. (WSJ)
  5. China ramps up energy boom to fuel AI. (Bloomberg)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game. You can purchase a copy of the book on Amazon.com

Categories
Daily Compliance News

Daily Compliance News: February 5, 2026, This Job Sucks Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Nike was investigated for discrimination against whites. (NYT)
  • DOJ lawyer tells court the “system sucks” and her “job sucks”. (WSJ)
  • Two Chinese journalists were jailed for investigating corruption. (NYT)
  • Rio Tinto and Glencore merger in danger. (FT)
Categories
Blog

Roman Philosophers and the Foundations of a Modern Compliance Program: Part 4 – Marcus Aurelius and Ethical Leadership

I recently wrote a series on the direct link between ancient Greek Philosophers and modern corporate compliance programs and compliance professionals. It was so much fun and so well-received that I decided to follow up with a similar series on notable Roman Philosophers. This week, we will continue our exploration of the philosophical underpinnings of modern corporate compliance programs and compliance professionals by looking at five philosophers from Rome, both from the BCE and AD eras.

We have considered Cicero and the duties, law, and moral limits of business; Seneca on power, pressure, and ethical decision-making under stress; and Varro on corporate governance. Today, we consider Marcus Aurelius and ethical leadership and tone at the top. Tomorrow, we will conclude with Lucretius to explore rationality, fear, and risk perception. Today, we continue with Marcus Aurelius, Ethical Leadership, and Culture as a Compliance Control

I. Marcus Aurelius in Context: Power with Restraint

Imagine you are the single most powerful person on earth. Are you going to be an unrepentant narcissist in the manner of Donald Trump, who believes he should govern on his own twisted morality based simply on ‘gut instinct’? Or are you going to take a different approach, set out your reasoned approach to governing in a book, and then govern with the moral authority of thousands of years of philosophy?

Marcus Aurelius is often remembered as the philosopher-king, but that description understates the difficulty of his position. He ruled the Roman Empire during a period of war, plague, economic strain, and political instability. Unlike many philosophers, Marcus Aurelius did not write for an audience. His Meditations were private reflections, written to discipline his own thinking while exercising absolute power.

This matters for compliance professionals. Marcus Aurelius did not theorize about ethical leadership from a distance. He lived inside it. He understood that power magnifies temptation, insulates leaders from feedback, and creates opportunities for self-deception. His philosophy is therefore preoccupied with restraint, humility, consistency, and responsibility.

Marcus repeatedly reminded himself that leadership is not a privilege but a burden. Authority did not entitle him to indulgence; it imposed higher expectations. He believed that leaders set moral boundaries through conduct long before they issue instructions. In modern terms, Marcus Aurelius understood that culture flows downward from leadership behavior rather than upward from policy documents.

II. The Compliance Problem Marcus Aurelius Illuminates: Culture Eats Controls

One of the central lessons of modern compliance enforcement is that formal controls cannot compensate for poor culture. Organizations with detailed policies and sophisticated monitoring still fail when leadership behavior signals that results matter more than integrity. The DOJ Evaluation of Corporate Compliance Programs (ECCP) explicitly asks whether senior leaders demonstrate commitment to compliance through actions, not words. Regulators assess whether ethical behavior is encouraged, whether misconduct is addressed consistently, and whether leaders tolerate or reward problematic conduct.

Marcus Aurelius would recognize this dynamic immediately. He believed that people learn how to behave by observing those in power. When leaders act inconsistently with stated values, cynicism follows. When leaders rationalize misconduct, that rationalization spreads. Compliance programs often falter when leadership treats ethics as a communication exercise rather than a lived expectation. Codes of conduct and training sessions cannot overcome the daily signals sent by executive decisions, incentive structures, and responses to failure.

Marcus teaches that culture is not accidental. It is created continuously by leadership choices, especially under pressure.

III. Modern Corporate Application: Marcus Aurelius, DOJ Expectations, and Leadership Accountability

Applying Marcus Aurelius to modern compliance reveals several concrete expectations that closely align with DOJ guidance.

First, leadership behavior must be consistent. Marcus believed hypocrisy was corrosive to authority. The DOJ similarly evaluates whether leaders follow the same rules they impose on others. Exceptions for senior executives undermine program credibility and weaken deterrence.

Second, leadership must respond to misconduct with moral clarity. Marcus wrote that anger and denial cloud judgment. In compliance terms, this means addressing issues promptly, transparently, and proportionately. Delayed or defensive responses signal tolerance, even when discipline eventually occurs.

Third, middle management matters. Marcus understood that culture is transmitted through layers of authority. DOJ guidance emphasizes the role of middle managers as culture carriers. Compliance programs should equip managers with the tools and incentives to reinforce ethical behavior, not merely deliver targets.

Fourth, incentives must reflect values. Marcus warned against leaders who chase reputation or reward at the expense of principle. Modern compliance programs must ensure compensation structures do not reward outcomes achieved through questionable means. The DOJ has repeatedly cited incentive misalignment as a root cause of misconduct.

Finally, leadership must create psychological safety. Marcus believed leaders should listen more than they speak. In compliance terms, this translates into openness to bad news, encouragement of dissent, and protection for those who raise concerns. A culture that punishes truth-telling cannot sustain compliance.

IV. Key Takeaways for Compliance Professionals

1. The Blueprint. Compliance professionals should view Marcus Aurelius and his writings as the blueprint for culture-based compliance. You can draw a direct line from the Meditations to both your compliance program and the leadership skills a CCO needs. Compliance should evaluate leadership behavior as a primary control, not a soft factor. This means not only reviewing employees who are promoted to management, but also a deep dive into their backgrounds. Also, thorough due diligence for any senior management hires from outside your organization.

2. Higher Standards. Compliance should hold senior leaders to higher standards of consistency and accountability.

3. Institutional Justice. Compliance should focus on how leaders respond to misconduct, not just how they prevent it. This is the CCO’s charge, and it must include an institutional fairness component in your compliance program.

  1. Compliance should ensure incentives reinforce ethical behavior at every level. The DOJ has consistently discussed the role of incentives in any compliance program, as far back as the 1st edition of the FCPA Guidance in 2012.
  2. Compliance should treat culture as an operational risk area subject to oversight and testing. Culture should be assessed, monitored, and improved. Simply because it is seen as a ‘soft’ part of an organization does not mean it should be treated differently.

4. Walk the Walk. Finally, Marcus Aurelius reminds us that ethical leadership is not performative. It is visible, daily, and decisive. In organizations, culture follows leadership long before it follows policy.

V. Conclusion

Marcus Aurelius brings the compliance lifecycle to its cultural apex. He shows that leadership behavior is not merely influential but determinative, shaping whether ethical expectations are taken seriously or quietly dismissed. Yet even the strongest ethical culture is not self-sustaining. Leaders are human, memory fades, and good intentions erode without reinforcement. This is where culture must be supported by systems that observe, test, and correct.

Marcus Aurelius teaches us how leaders should behave; Lucretius challenges us to examine how organizations think. If Marcus focuses on moral example, Lucretius turns our attention to rational observation, warning against fear, superstition, and self-deception. The transition from Marcus Aurelius to Lucretius mirrors the shift from cultural leadership to continuous improvement, from ethical intent to empirical verification. In compliance terms, it is the move from assuming the program works to proving that it does, using data, monitoring, and clear-eyed analysis rather than hope or habit.

Join us tomorrow for our concluding article on Lucretius and Rationality in Monitoring and Continuous Improvement. We will consider where culture gives way to systems, data, and the discipline of seeing risk clearly rather than through fear or superstition.

Categories
AI Today in 5

AI Today in 5: February 4, 2026, The SaaSpocalypse Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. AI is helping in regulatory volatility. (WSJ)
  2. AI is reshaping AML in banking. (FinTechGlobal)
  3. Wall Street is dumping SW stock. (Yahoo!Finance)
  4. What is your enterprise AI strategy? (FinTechGlobal)
  5. AI security reaches a turning point. (FinTechGlobal)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game, is available. You can purchase a copy of the book on Amazon.com.

Categories
Daily Compliance News

Daily Compliance News: February 4, 2026, The Trump Shakesdown Japan Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • Inconsistent branding on Guardian Caps. (NYT)
  • X’s offices were raided in Paris. (WSJ)
  • Saudi Arabia makes corruption-related arrests. (TheNational)
  • The Trump shakedown of Japan to the tune of $550bn. (FT)
Categories
Compliance Into the Weeds

Compliance into the Weeds: The Reality of AI Adoption in Corporate Compliance

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore it more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly examine three recent surveys that examine the real-world impact of AI adoption in corporate environments.

Recording from Alexandria, Virginia, where Matt is attending a conference on ethical governance of AI, Matt and Tom discuss the differing perceptions of AI’s benefits between senior executives and other employees. They explore findings from PWC, Section, and Workday surveys, uncovering a significant gap in AI’s perceived value. The discussion highlights the challenges of integrating AI, the significant rework required by employees, and the struggle to build trust in AI tools. They also debate whether enterprise-scale AI deployment or incremental, point-specific adoption is the best path forward.

Key highlights:

  • Conference on Ethical AI Governance
  • Reality Checks on AI Adoption
  • AI Rework and Employee Training Concerns
  • Trust Issues with AI

Resources:

Matt in Radical Compliance

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, a Communicator Award, and a W3 Award, all for podcast excellence.

Categories
Great Women in Compliance

GWIC 300 – The GWICies

Today is a milestone.  It is episode 300, and marks 100 episodes since Hemma joined Lisa as a co-host and Ellen and Sarah made us what we call “Team GWIC.”  To recognize this, we go together to recognize some of the individuals and values that define our profession.

We highlight some of the amazing people who have supported us and the profession, including culture carriers, change agents, mentors, Great Gentlemen in Compliance, and collaborators and supporters.

We also wanted to recognize some true MVPs – those who have stood up at personal and professional risk to strengthen integrity, support whistleblowers, and push the profession forward. It also shines a light on the often-unspoken challenges of ethical decision-making and the consequences that may come from speaking out, including well-being and professional isolation.  Their work and stories reaffirm the reasons we do what we do and why we are committed to the mission.

We should have an award for the entire GWIC community for your support and for sticking with us.  We are excited for what comes next, including new branding, materials, and exciting content.

Categories
Blog

Roman Philosophers and the Foundations of a Modern Compliance Program: Part 3 Varro, System Design, and Making Compliance Governable

I recently wrote a series on the direct link between ancient Greek Philosophers and modern corporate compliance programs and compliance professionals. It was so much fun and so well-received that I decided to follow up with a similar series on notable Roman Philosophers. This week, we will continue our exploration of the philosophical underpinnings of modern corporate compliance programs and compliance professionals by looking at five philosophers from Rome, both from the Roman Republic and the Roman Empire.

We have considered Cicero and the duty, law, and the moral limits of business; and Seneca and power, pressure, and ethical decision-making under stress. Today, we consider Varro and corporate governance; upcoming blog posts include Marcus Aurelius and ethical leadership and tone at the top, and we will conclude with Lucretius to explore rationality, fear, and risk perception. Today, we continue our discussion of Varro and compliance governance structures.

I. Varro in Context: Order as Institutional Survival

Marcus Terentius Varro was not a moralist in the way Cicero was, nor a psychological observer like Seneca. He was Rome’s great systematizer. Varro cataloged language, religion, agriculture, history, and civic life with a single objective: to make complex institutions intelligible and durable. He believed that civilizations fail not first from immorality, but from disorder. Although very little of his writings survives, Plutarch described him as “Rome’s Third Great Light” behind Virgil and Cicero.

Varro lived through the collapse of the Roman Republic. He watched institutions grow so complex, fragmented, and inconsistent that they could no longer govern themselves. His response was not exhortation or outrage, but classification. By defining categories, standardizing language, and organizing knowledge, Varro sought to preserve Rome’s ability to function even as political pressures mounted.

For modern compliance professionals, Varro is essential precisely because he does not begin with ethics. He starts with structure. He understood that values cannot operate within incoherent systems. Before leadership can model ethics and before culture can reinforce integrity, the institution must be governable.

II. The Compliance Problem Varro Illuminates: Program Sprawl and Structural Entropy

Modern compliance programs rarely fail because they lack policies or commitment. They fail because they become structurally unmanageable.

Over time, compliance programs accumulate:

  • Policies written for different risks, jurisdictions, and moments in time
  • Risk assessments that do not align with controls
  • Training modules disconnected from decision-making
  • Escalation paths that vary by function or geography
  • Metrics that track activity but do not integrate

This is compliance sprawl. No one intentionally designs it. It emerges gradually as organizations respond to enforcement actions, audits, mergers, new regulations, and internal incidents. Eventually, the program exists everywhere and nowhere at once. Varro would recognize this immediately. He believed that when systems grow faster than understanding, governance becomes ceremonial. Rules exist, but they do not guide behavior. Oversight exists, but it cannot see clearly.

The DOJ Evaluation of Corporate Compliance Programs (ECCP) reflects Varro’s concern by asking whether a program is well-designed, consistently applied, and understood by employees. These are not ethical questions. They are structural ones.

III. Modern Corporate Application: Varro, DOJ Expectations, and Compliance Architecture

Applying Varro to modern compliance highlights the importance of architecture over accumulation.

First, compliance programs must classify risk consistently. Varro believed that naming and categorizing were a form of control. In compliance terms, this means standardized risk taxonomies, consistent issue classifications, and shared definitions across legal, compliance, audit, and HR. Without this, trend analysis and root cause assessment become unreliable.

Second, integration must replace layering. Varro linked systems rather than allowing them to multiply independently. Modern compliance programs should map risks to controls, controls to training, training to behavior, and behavior to metrics. The DOJ increasingly expects compliance to be embedded in business operations rather than treated as a parallel system.

Third, ownership must be explicit. Varro rejected ambiguity about responsibility. In compliance programs, unclear ownership of controls, investigations, and remediation creates delay and finger-pointing. A governable program clearly and visibly assigns responsibility.

Fourth, institutional memory must be preserved. Varro understood that institutions that forget repeat mistakes. Compliance programs must retain investigation outcomes, remediation decisions, and lessons learned to inform future risk assessments and controls. DOJ guidance increasingly focuses on learning and continuous improvement, which cannot occur without memory.

Finally, language discipline matters. Varro studied language because confused language produces confused action. In compliance, inconsistent terminology across policies, reports, and board materials undermines oversight. Precision is not pedantry. It is governance.

IV. Key Takeaways for Compliance Professionals

  1. Compliance Governance. Compliance professionals should view Varro as the architect of governable compliance. Varro teaches that ethics cannot function without a structure that allows oversight, consistency, and understanding. A compliance program that cannot be clearly explained cannot be effectively governed. Governable compliance is the prerequisite for ethical leadership, accountability, and continuous improvement.
  2. Well Designed. Compliance should prioritize coherence over accumulation. Adding more policies, controls, and tools does not strengthen a compliance program if they do not align with one another. Varro would warn that unchecked accumulation creates confusion rather than protection. Coherence ensures that each element of the program reinforces the others instead of competing for attention.
  3. Risk Measurement. Compliance should standardize risk classification and language across functions. Varro understood that shared language is essential for coordinated action. When legal, compliance, audit, and business teams describe the same risk differently, oversight becomes fragmented. Standardized terminology allows trends to be identified, lessons to be learned, and governance to function effectively.
  4. Written Program. Your compliance should integrate policies, controls, training, and metrics into a single operating model. Varro rejected isolated systems in favor of interconnected ones. A compliance program works only when policies inform controls, controls shape training, and training influences measurable behavior. Integration transforms compliance from a collection of activities into an operational system.
  5. Remember. Compliance should preserve institutional memory to prevent repeat failures. Varro believed institutions must remember their own history to avoid repeating mistakes. Compliance programs fail when lessons learned from investigations or audits are lost with personnel changes or reorganizations. Preserving institutional memory enables trend analysis, informed risk assessments, and durable remediation.
  6. Enabler. Compliance should treat structure as an ethical enabler, not a bureaucratic burden. Structure is often misunderstood as red tape rather than support. Varro shows that clear structure empowers ethical action by reducing ambiguity and inconsistency. Well-designed systems make it easier for individuals and leaders to do the right thing.
  7. Simplicity. Finally, Varro reminds us that ethical intent cannot survive inside incoherent systems. Compliance programs do not fail only because people act under pressure. They fail because the system itself becomes too complex to operate. Ethical breakdown is often preceded by structural breakdown. When compliance systems become fragmented, opaque, or unmanageable, even well-intentioned actors struggle to act responsibly. Varro’s lesson is that simplicity, clarity, and integration are not administrative preferences but governance necessities.

V. Conclusion

Varro’s enduring contribution to modern compliance is his insistence that ethics cannot function in systems that cannot be understood, managed, or governed. He reminds compliance professionals that before culture can shape behavior and before leadership can model integrity, the program itself must be coherent, integrated, and durable. In an era where compliance programs risk collapsing under their own complexity, Varro offers a sobering but practical lesson: clarity is not a luxury, simplicity is not weakness, and structure is not bureaucracy. They are the conditions that allow ethical intent to survive pressure, scale, and time.

Varro stabilizes the compliance program by making it governable. But structure alone does not produce integrity. A well-organized system can still fail if those who lead it do not model ethical restraint. This is where Varro yields to Marcus Aurelius. If Varro ensures that the compliance program holds together, Marcus Aurelius determines how it behaves. The transition from Varro to Marcus Aurelius mirrors the shift from system design to ethical leadership, from architecture to example. Compliance becomes durable only when principled leaders animate coherent systems.

Join us tomorrow in Part 4 for a look at Marcus Aurelius, stoicism, and leadership.

Categories
AI Today in 5

AI Today in 5: February 3, 2026, The AI Undergrad Degree Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. UW-Whitewater offers an undergraduate degree in AI. (Channel3000)
  2. The race to build an operating system for investment advisors. (InvestmentNews)
  3. Cramer says AI changing companies fortunes. (YahooFinanceSingapore)
  4. Is your business’s speed a risk? (FinTechGlobal)
  5. Where is AI taking us? 8 thinkers report. (NYT)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game, is available. You can purchase a copy of the book on Amazon.com.

Categories
Daily Compliance News

Daily Compliance News: February 3, 2026, The Pizza Hut and Compliance Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • NATO officials were arrested on corruption charges. (MILITARNYI)
  • How to bury a mandated whistleblower report. (WSJ)
  • A Pizza Hut resurgence and compliance. (Slate)
  • Former FBI compliance head slides over to EY. (GTSC)