Categories
Blog

The Hardest Command: Ethical Transitions and “The Deadly Years” for Compliance Professionals

Suppose you have spent any time in leadership, especially in compliance or corporate governance. In that case, you know that one of the most gut-wrenching duties is addressing a colleague who can no longer fulfill their responsibilities. Loyalty, empathy, and organizational needs collide in these moments. Few pop culture stories tackle this theme with more clarity and drama than Star Trek: The Original Series episode “The Deadly Years.” Here, the Enterprise crew confronts rapid aging, physical decline, and, most significantly, the consequences when a leader cannot perform.

Today, we step onto the bridge and examine five ethical lessons for compliance professionals faced with these hard but necessary transitions. Each lesson is illustrated by a specific scene from “The Deadly Years.”

Lesson 1: Recognize the Signs—Objectivity Must Trump Sentiment

Illustrated By:  Early in the episode, the landing party is exposed to a form of radiation that accelerates aging. Captain Kirk, Spock, Scotty, and others quickly show signs of physical and cognitive decline. Kirk, in particular, becomes forgetful and indecisive, missing important details and even failing to recall security procedures.

Compliance Lessons: The first ethical responsibility is to recognize, without sentiment or denial, when a colleague can no longer perform. Whether due to age, health, burnout, or changing business demands, the signs must be identified early, not ignored out of deference to history or personal loyalty.

Implement regular, objective performance reviews and peer assessments. Train managers to look for early indicators of declining performance, especially in high-stress or high-responsibility roles, and provide pathways for safe, supportive reporting.

Lesson 2: Prioritize Mission and Stakeholders—Not Individual Status

Illustrated By:  As Kirk’s abilities deteriorate, the safety of the Enterprise is jeopardized. He hesitates during a Romulan encounter and issues conflicting orders, putting the crew at risk. Spock and Dr. McCoy discuss his decline, acknowledging their concern for their friend but focusing on the danger to the mission.

Compliance Lesson: An organization’s purpose, stakeholders, and people must come before individual egos or career legacies. Ethical leadership means putting the mission first, even when that requires difficult conversations or unpopular actions. This is especially critical in compliance, where risks can have enterprise-wide impacts.

Make mission-driven decision-making a core value in your compliance program. Regularly communicate that the integrity of the enterprise outweighs personal status. Ensure that all leaders, from the C-suite to middle management, understand that their primary obligation is to the organization and its stakeholders.

Lesson 3: Fair, Transparent Processes Protect All Involved

Illustrated By: When the decline in Kirk’s performance can no longer be denied, Spock and Dr. McCoy convene a competency hearing. The tribunal includes multiple voices and follows Starfleet protocol, providing Kirk with a chance to respond and present evidence on his behalf.

Compliance Lesson: No transition or removal, no matter how justified, should be handled arbitrarily or in secret. Transparent, fair, and standardized processes ensure that all parties are treated with dignity and the organization’s decisions are defensible. Above all is dignity. This approach also protects against accusations of favoritism, discrimination, or retaliation.

Document and publish clear protocols for performance-related transitions. Involve impartial parties in any review. Make sure employees understand their rights, the procedures, and the grounds on which decisions are made.

Lesson 4: Compassion Matters—Even When Delivering Hard News

Illustrated By: After the tribunal, Kirk is relieved of command. The process is formal, but the crew treats Kirk with respect and compassion, recognizing his service and the pain of the moment. No one revels in the transition or diminishes Kirk’s contributions.

Compliance Lesson: Delivering tough messages, especially about the need to move on, can be done with empathy and grace. Recognizing the individual’s service, offering support, and helping with a dignified transition isn’t just “nice”; rather, it should be seen as an ethically necessary. How you handle these moments sets the tone for your organization’s values and can even inspire long-term loyalty and goodwill.

Train managers and HR in compassionate communication. Offer support such as career counseling, retirement planning, or mental health resources to those transitioning. Celebrate achievements and acknowledge contributions, even as you move forward.

Lesson 5: The Right Transition Can Save the Mission

Illustrated By:  With Kirk relieved, Commodore Stocker takes command but quickly demonstrates a lack of field experience, putting the ship in further jeopardy. Meanwhile, Dr. McCoy and Spock race against time to find a cure for the aging disease. Once Kirk is restored to health, he returns to command, draws on his experience and instincts, and saves the Enterprise from destruction.

Compliance Lesson: Transitioning a colleague should never be punitive or personal; it’s about restoring the organization to its highest level of functioning. Sometimes, this means moving a leader aside temporarily until they can return or helping someone find a better fit for their abilities. The right person, in the proper role, at the right time, is critical for compliance and organizational health.

Build flexibility into your transition policies. Consider temporary reassignments, sabbaticals, or other options before a final separation. Always keep the focus on what’s best for the mission, the team, and the individual.

Final ComplianceLog Reflections

No compliance professional relishes the moment when a valued colleague must be asked to step aside. But “The Deadly Years” reminds us that the greatest danger lies not in transition, but in denial, sentimentality, or failure to act. As Kirk, Spock, and McCoy demonstrate, the hard path, handled with fairness, transparency, dignity, and compassion, is always the ethical path.

For compliance professionals, this means being vigilant for declining performance, putting mission first, insisting on fair and transparent processes, and consistently delivering hard news with empathy. It also means recognizing that transition is sometimes temporary and, with the proper support, colleagues can return, renewed and ready for new challenges.

As organizations face the “deadly years” of rapid change, new risks, and mounting expectations, may we all steer our ships with courage, wisdom, and integrity, ensuring that the right people are at the helm, for the good of all.

 Resources:

Excruciatingly Detailed Plot Summary by Eric W. Weisstein

MissionLogPodcast.com

Memory Alpha

Categories
Daily Compliance News

Daily Compliance News: June 10, 2026 the Integrity is Non-Negotiable Edition

 

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance brings to you compliance related stories to start your day. Sit back, enjoy a cup of morning coffee and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership or general interest for the compliance professional.

  • Hungary using AI to track down Orban corruption proceeds. (FT)
  • US expands list of sanctioned Chinese companies. (WSJ)
  • Italian Court takes over US builder in Italy. (Reuters)
  • Hong Kong head of ABC says integrity is non-negotiable. (SCMP)

To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out my latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on Amazon.com

Categories
AI Today in 5

AI Today in 5: June 10, 2026 the End of Legacy Compliance Edition

Welcome to AI Today in 5, the newest edition to the Compliance Podcast Network. Each day, I will bring to you 5 stories about AI stories to start your day. Sit back, enjoy a cup of morning coffee and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership or general interest about AI.

  1. AI and end of legacy compliance. (FinTechGlobal)
  2. The Great American AI Act. (ClearanceJobs)
  3. AI and cybersecurity risks in healthcare. (Forbes)
  4. Will AI make the banking experience better? (TheConversation)
  5. Will AI help women in financial services? (FinTechMagazine)

For more information on the use of AI in Compliance programs, my new book, Upping Your Game. You can purchase a copy of the book on Amazon.com. To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out my latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on Amazon.com

Categories
Blog

Why Compliance Gets Branded as the Problem

Every compliance professional has heard the accusation. Compliance is too slow. Compliance does not understand the business. Compliance always says no. Compliance is where deals go to die. That reputation is so common that it has a shorthand: Dr. No from the Land of No.”

Luis Velasquez’s article, Why Effective Leaders Get Branded as Problems, offers an important way for Chief Compliance Officers to think about this challenge. His central point is that when a leader creates friction, organizations often default to one explanation: the leader is the problem. Yet the article argues that friction usually comes from one of four sources: capability, perception, identity, or system. Because those sources can look similar on the surface, organizations often collapse them into a single behavioral judgment and make poor decisions as a result.

That insight maps directly onto compliance. When compliance creates friction, the organization may assume the compliance function is the problem. Sometimes that is true. Sometimes compliance really is slow, unclear, inconsistent, or disconnected from commercial reality. But often compliance is not the problem. It is exposing the problem. The CCO’s job is to know the difference.

The Evaluation Trap for Compliance

Velasquez calls this dynamic the “evaluation trap.” Organizations overfocus on visible behavior and underweight the context around that behavior. If there is friction, the easy assumption is that the individual leader is the problem. For compliance, the same trap appears when business leaders say some of the following: “Compliance is blocking the deal. Compliance is slowing us down. Compliance is too rigid. Compliance does not understand how we make money.”

Those statements may contain useful feedback, but they are not a diagnosis. They are conclusions. A good CCO should not reject them defensively, but neither should the CCO accept them at face value.The better question is: What is really causing the friction?

Is compliance creating unnecessary delay? Is the business bringing compliance in too late? Is the policy unclear? Is the company’s incentive structure encouraging people to push risk downstream? Is the compliance team applying yesterday’s reputation to today’s improved process? Or is the function’s greatest strength, independence being overused in a way that makes compliance appear detached from the business? The answer matters because each cause requires a different response.

Why “The Land of No” Is Dangerous

Being known as “The Land of No” is more than a branding problem. It is a control problem. When employees believe compliance exists only to stop things, they stop bringing compliance into decisions early. They delay disclosure. They frame facts selectively. They look for workarounds. They ask for forgiveness instead of guidance. The compliance function then receives issues late, with fewer options and higher stakes. That reinforces the perception that compliance is always saying no.

It becomes a vicious cycle. The business avoids compliance because it fears delay. Compliance receives incomplete or late information. Compliance responds with concern or rejection. The business concludes that compliance is a blocker. The next time, the business waits even longer to engage. That is how a compliance function loses influence while still technically having authority.

The Four Sources of Compliance Friction

Velasquez identifies four sources of leadership friction: a true skill deficit, historical reputation, overextension of identity, and the system as a blocker. Each has a direct compliance equivalent.

  1. A True Compliance Capability Deficit

Sometimes the criticism is fair. The compliance team may be too slow. It may issue dense legal guidance that no one can use. It may give inconsistent answers across regions. It may lack business knowledge. It may escalate too many routine issues. It may have no clear intake process, no service-level expectations, no decision trees, and no practical playbooks.

The remedy is operational discipline. Build intake channels. Publish response-time expectations. Create risk-tiered approval paths. Train compliance professionals in business acumen. Give the business practical guidance, not abstract warnings. Measure cycle time, quality of advice, repeat questions, escalation frequency, and stakeholder satisfaction. A compliance function that wants credibility must be professionally managed.

  1. Historical Reputation

Sometimes compliance is being judged by an old story. Velasquez describes “organizational drift,” where systems rely on outdated narratives rather than current evidence. Feedback may be based on historical reputation, not recent interaction. Labels harden even when behavior changes.

In that case, behavior change alone may not be enough. The CCO must manage perception as deliberately as performance. That means asking business leaders for specific, recent examples. It means distinguishing current pain from legacy frustration. It means documenting improvements and communicating them repeatedly. It means publicizing examples where compliance helped a team win business the right way, accelerate a transaction, resolve a third-party issue, or design a better control.

  1. Overextension of Compliance Identity

Compliance has core strengths: independence, skepticism, discipline, documentation, escalation, and control. Those strengths are essential. But Velasquez warns that a strength can become a habit, then an identity, and then a constraint. The problem is not always the absence of skill; sometimes it is the overuse of a strength in the wrong context. That is a powerful lesson for compliance.

A compliance function that is appropriately skeptical in a bribery investigation may be unnecessarily skeptical in a low-risk gift review. A team that properly demands documentation for a high-risk distributor may over-document a routine vendor. A CCO who must be firm with the board or regulators may unintentionally use the same posture in early-stage business counseling. The answer is not to weaken compliance. The answer is to expand its range.

Compliance should know when to be an investigator, when to be an adviser, when to be a control designer, when to be an educator, and when to be a decision escalator. Not every question requires the same tone, process, or level of scrutiny. A mature compliance function does not say yes to everything. It knows how to say: Yes, if. That is very different from simply saying no.

  1. The System as the Blocker

Velasquez calls the system-as-blocker issue the most misunderstood trap. What looks like a behavior problem may actually be caused by culture, structures, resources, incentives, or decision rights that make the desired behavior difficult. The article notes that organizations may say they want one thing while rewarding another. This is the most important lesson for the CCO.

Compliance often gets blamed for delay created elsewhere. Sales may bring a high-risk intermediary to compliance two days before a bid deadline. Procurement may onboard vendors before due diligence is complete. Finance may discover payment issues only after an invoice is pending. Legal may escalate a contract after commercial terms have already been promised. Senior leadership may say compliance matters, while compensation plans reward speed and revenue at any cost.

In reality, the system created the bottleneck. Compliance was simply the first function willing to name it. The CCO should identify these systemic blockers and bring them to management. If the business wants faster third-party approvals, it must engage compliance earlier. If the company wants fewer rejected transactions, it must define risk appetite before the deal is negotiated. If leadership wants speak-up culture, it must protect reporters and discipline retaliation. If the

Building a Compliance Function Known for Solutions

The goal is not to become the “Land of Yes.” That would be worse. A compliance function that says yes to everything is not a compliance function. It is a permission slip. The goal is to become the Land of Know: a place where the business gets clarity, options, risk intelligence, and practical pathways. That requires a different operating model.

  1. Compliance must engage early. The function should be embedded in strategy discussions, product design, market entry planning, third-party selection, M&A activity, data use, AI deployment, and incentive design. Late-stage compliance review is where trust goes to die.
  2. Compliance must define red lines and green lanes. Business teams should know which activities are prohibited, which require escalation, and which can move quickly through preapproved controls. Ambiguity produces both delay and resentment.
  3. Compliance must communicate in business language. “This violates Section X of Policy Y” may be accurate, but it is rarely sufficient. The better explanation is: “This creates an undisclosed conflict, weakens our audit trail, and could make the payment look improper. Here is how we can restructure it.”
  4. Compliance must offer alternatives. A “no” without a path forward should be reserved for true red-line issues. In most cases, compliance should identify a lower-risk route.
  5. Compliance must measure enablement. Do not only track training completions, hotline numbers, or policy attestations. Track advisory response time, time to third-party decision, percentage of matters resolved with conditions, number of early consultations, repeat issues by business unit, and examples where compliance helped preserve business value.

Sixth, compliance must own its mistakes. When compliance is slow, unclear, inconsistent, or overly rigid, the CCO should say so and fix it. Credibility increases when compliance holds itself to the same accountability it expects from the business.

The CCO’s Message to the Business

The CCO should be able to say: “We are not here to stop the business. We are here to help the business grow in a way that can withstand scrutiny. Sometimes that means yes. Sometimes that means yes with controls. Sometimes that means no. But every answer should be timely, clear, risk-based, and tied to the company’s values and obligations.”

That message must be backed by behavior. Business leaders will not judge compliance by slogans. They will judge it by how the function behaves when a deal is urgent, a market is risky, a senior executive is involved, or the answer is uncomfortable.

The lesson from Velasquez’s article is simple but profound. Before deciding that the leader is the problem, ask whether the diagnosis is wrong. For CCOs, the parallel lesson is equally important: before accepting that compliance is the problem, determine what the friction is really telling you.

A strong compliance function should never aspire to be popular at all costs. But it should aspire to be trusted. The way to avoid becoming “The Land of No” is not to say yes more often. It is to become clearer, earlier, more practical, more evidence-based, and more courageous about identifying whether the real issue sits in compliance, the business, or the system itself.

Categories
Blog

Dagger of the Mind: Ethics and Oversight at Tantalus V

Show Summary

Today, we journey to Tantalus V, home to a facility for the criminally insane, where a celebrated doctor, a controversial device, and a desperate escapee converge into a chilling tale of manipulation, unethical experimentation, and failed oversight. Dagger of the Mind is more than a story about a rogue psychiatrist. It serves as a cautionary tale for every compliance professional navigating the complexities of ethics, whistleblower protections, and corporate accountability.

We unpack six key lessons for today’s compliance landscape, using this Star Trek episode to explore the human rights implications of innovation, the importance of informed consent, and the non-negotiable need for robust oversight mechanisms.

Key Highlights and Compliance Case Illustrations

1. Whistleblower Protection—Listen When Someone Escapes the Box

Illustrated by: Simon van Gelder, smuggling himself aboard the Enterprise to escape the abuse at Tantalus V.

Van Gelder risks everything to report misconduct, yet he’s initially treated as a threat—not a truth-teller. His trauma and desperation illustrate what happens when whistleblowers are ignored or presumed unstable. Compliance officers must establish safe and credible pathways for internal reporting, and leaders must be trained to respond with empathy rather than disbelief.

2. Oversight and Accountability—Who Guards the Guardians?

Illustrated by: Dr. Tristan Adams using the neural neutralizer to control and silence dissent.

Adams is a textbook example of what happens when powerful individuals operate without meaningful oversight. His esteemed reputation masks his abuse of power. Every organization must implement regular audits, anonymous feedback loops, and third-party evaluations to ensure that even the “untouchables” remain accountable.

3. Human Rights and Ethical Treatment—Compliance Begins with Humanity

Illustrated by: The neural neutralizer erasing minds and reducing patients to emotional voids.

The weaponization of mental health treatment in this episode is a stark warning about the technology used without ethical restraint. Whether it’s surveillance, AI, or employee monitoring tools, companies must evaluate the human impact of every system. Dignity and consent are the foundation of all ethical compliance frameworks.

4. Informed Consent—Misuse of Technology Without Disclosure

Illustrated by: Kirk unknowingly subjected to memory manipulation through the neural neutralizer.

Kirk’s experience under the device demonstrates the risk of deploying tools without informed consent. In modern terms, this equates to unethical data collection, misleading contractual clauses, or hidden surveillance programs. Compliance programs must ensure transparency and fairness in every tech-enabled interaction.

5. Due Process and Fair Trials—Don’t Assume Guilt Without Review 

Illustrated by: Van Gelder’s deteriorated condition and absence of any formal grievance process.

Once van Gelder begins to unravel, no formal process is in place to evaluate his claims or provide medical advocacy. In today’s corporate environment, this underscores the importance of adhering to due process during internal investigations, including access to counsel, neutral adjudication, and accommodations for mental health when necessary.

6. Corporate Social Responsibility—Reputation is No Substitute for Integrity 

Illustrated by: Dr. Adams’ public image as a reformer, masking his private abuses.

Adams is held up as a pioneer, but beneath the surface lies a profound history of misconduct. This serves as a reminder that a shiny ESG report or CSR campaign cannot substitute for real operational integrity. Compliance officers must look beyond external branding and delve into actual practices and their impact.

Final ComplianceLog Reflections

Dagger of the Mind is not just a metaphor for the dangers of unethical control; it is a metaphor for the risks of unethical control. It is a manual for why compliance must protect the vulnerable, investigate the credible, and challenge authority when necessary. Dr. Adams built a system that silenced his critics. Compliance must create systems that amplify them.

Resources:

Excruciatingly Detailed Plot Summary by Eric W. Weisstein

MissionLogPodcast.com

Memory Alpha

Categories
Daily Compliance News

Daily Compliance News: June 9, 2026, The Big Bang Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • New charges against FirstEnergy execs. (Cleveland.com)
  • The court orders answers on why there are no tariff refunds. (NYT)
  • Hormuz Crisis and global compliance. (WSJ)
  • A Big Bang reversal of Brexit. (FT)

To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out Tom’s latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on Amazon.com.

Categories
Trekking Through Compliance

Trekking Through Compliance: Dagger of the Mind and Oversight

In this episode of Trekking Through Compliance, we consider the episode “Dagger of the Mind,” which aired on November 3, 1966, with a Star Date of 2715.1.

In this episode, we journey to Tantalus V, home to a facility for the criminally insane, where a celebrated doctor, a controversial device, and a desperate escapee converge into a chilling tale of manipulation, unethical experimentation, and failed oversight. Dagger of the Mind is more than a story about a rogue psychiatrist; it’s a cautionary tale for every compliance professional navigating the complexities of ethics, whistleblower protections, and corporate accountability. We unpack the key lessons for today’s compliance landscape, using this Star Trek episode to explore the human rights implications of innovation, the importance of informed consent, and the non-negotiable need for robust oversight mechanisms.

Story

The Enterprise makes a supply run to planet Tantalus V, a colony where the criminally insane are confined for treatment. The facility’s director is Dr. Tristan Adams, a psychiatrist famous for advocating more humane treatment of such patients. After the Enterprise delivers supplies and receives cargo from Tantalus, a man emerges from the container taken aboard and assaults a technician. Reaching the bridge, the intruder demands asylum, but Spock subdues him with a Vulcan nerve pinch. In Sickbay, the intruder identifies himself as Simon van Gelder, and a computer check reveals that he is not a patient but Dr. Adams’ assistant.

Gelder becomes increasingly frantic on the Enterprise van, warning that the landing party is in danger. Spock learns that the neural neutralizer can empty a mind of thoughts, leaving only an unbearable feeling of loneliness, and that Adams has been using it on inmates and staff to regain control of their minds.

Kirk tests the neutralizer on himself, with Noel as the control. Adams appears, overpowers Noel, seizes the controls, increases the neutralizer’s intensity, and convinces Kirk that he has been madly in love with Noel for years. Adams inadvertently reactivates the neural neutralizer, emptying his mind and killing him. On the Enterprise, Kirk is informed that van Gelder has destroyed the neural neutralizer. McCoy is surprised that loneliness could be lethal, but Kirk, after his experience, is not.

Key highlights:

1. Whistleblower Protection—Listen When Someone Escapes the Box

🖖Illustrated by: Simon van Gelder, smuggling himself aboard the Enterprise to escape the abuse at Tantalus V.

Van Gelder risks everything to report misconduct, yet he’s initially treated as a threat rather than a truth-teller. His trauma and desperation illustrate what happens when whistleblowers are ignored or presumed unstable. Compliance officers must establish safe and credible pathways for internal reporting, and leaders must be trained to respond with empathy rather than disbelief.

2. Oversight and Accountability—Who Guards the Guardians?

🖖Illustrated by: Dr. Tristan Adams using the neural neutralizer to control and silence dissent.

Adams is a textbook example of what happens when powerful individuals operate without meaningful oversight. His esteemed reputation masks his abuse of power. Every organization must implement regular audits, anonymous feedback loops, and third-party evaluations to ensure that even the “untouchables” remain accountable.

3. Human Rights and Ethical Treatment—Compliance Begins with Humanity

🖖Illustrated by: The neural neutralizer erasing minds and reducing patients to emotional voids.

The weaponization of mental health treatment in this episode is a stark warning about the technology used without ethical restraint. Whether it’s surveillance, AI, or employee monitoring tools, companies must evaluate the human impact of every system. Dignity and consent are the foundation of all ethical compliance frameworks.

4. Informed Consent—Misuse of Technology Without Disclosure

🖖Illustrated by: Kirk unknowingly subjected to memory manipulation through the neural neutralizer.

Kirk’s experience under the device demonstrates the risk of deploying tools without informed consent. In modern terms, this equates to unethical data collection, misleading contractual clauses, or hidden surveillance programs. Compliance programs must ensure transparency and fairness in every tech-enabled interaction.

5. Due Process and Fair Trials—Don’t Assume Guilt Without Review

🖖Illustrated by: Van Gelder’s deteriorated condition and absence of any formal grievance process.

Once van Gelder begins to unravel, no formal process is in place to evaluate his claims or provide medical advocacy. In today’s corporate environment, this underscores the importance of due process during internal investigations, including access to counsel, neutral adjudication, and mental health accommodations when necessary.

6. Corporate Social Responsibility—Reputation is No Substitute for Integrity

🖖Illustrated by: Dr. Adams’ public image as a reformer, masking his private abuses.

Adams is held up as a pioneer, but beneath the surface lies a profound history of misconduct. This serves as a reminder that a shiny ESG report or CSR campaign cannot substitute for real operational integrity. Compliance officers must look beyond external branding and delve into actual practices and their impact.

Final Starlog Reflections

Dagger of the Mind is not just a metaphor for the dangers of unethical control—it’s a manual for why compliance must protect the vulnerable, investigate the credible, and challenge authority when necessary. Dr. Adams built a system that silenced his critics. Compliance must create systems that amplify them.

Resources:

Excruciatingly Detailed Plot Summary by Eric W. Weisstein

MissionLogPodcast.com

Memory Alpha

Categories
AI Today in 5

AI Today in 5: June 9, 2026, The OpenAI Files to go Public Edition

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider five stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

Top AI stories include:

  1. AI-ready compliance for reg tech. (FinTechGlobal)
  2. AI agents under antitrust scrutiny. (NYT)
  3. Procurement and AI governance. (Observer.com)
  4. Is your bank ready for Agentic AI? (OpenTextBlog)
  5. Transparency is key for AI use in healthcare. (Ohio.Edu)

For more information on the use of AI in compliance programs, Tom Fox’s new book, Upping Your Game, is available. You can purchase a copy of the book on ⁠Amazon.com⁠.

To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out Tom’s latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on ⁠Amazon.com⁠.

Categories
Everything Compliance - Shout Outs and Rants

Everything Compliance: Shout Out & Rants – New Season, New Host and New Lineup

Welcome to a revamped Everything Compliance Shout Outs and Rants. We have a new host, Adam Turteltaub, and a new panelist, Rebecca Walker, who joins returning regulars Matt Kelly, Jonathan Armstrong, and Karen Moore for the next iteration of Everything Compliance Shout Outs and Rants.

  • Adam thanks Tom Fox, critiques his own timing, and notes Pope Leo XIV’s AI encyclical urging attention to human factors.
  • Rebecca praises Georgetown University’s Jesuit values—“men and women for others” and cura personalis—as a reminder that compliance is about values and culture, not just enforcement.
  • Matt echoes interest in the Pope’s encyclical, criticizes President Trump’s comments about the Pope, and cites Amazon’s warning against gaming internal AI leaderboards, arguing companies should prioritize productive outcomes over measuring AI usage.
  • Karen describes her gym’s behavior memo and criticizes the shift toward enforcing it on members.
  • Jonathan discusses the SNP embezzlement case involving Peter Murrell and related allegations around Nicola Sturgeon, highlighting compliance lessons: segregation of duties, conflicts of interest, whistleblowers, and culture.

Everything Compliance Shout-Outs and Rants is a production of the Compliance Podcast Network.

Categories
Innovation in Compliance

Innovation in Compliance: Rethinking SpeakUp: UX, Trust, and AI in Whistleblowing and Investigations with Tim Morss

Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode,  host Tom visits with Tim Morss, CEO at SpeakUp, about the evolution of speak-up systems from the employee perspective.

Morss describes his background in compliance technology and SpeakUp’s global footprint, emphasizing that employee expectations favor frictionless, mobile-first, intuitive reporting with transparency and feedback over 800-number hotlines and complex forms. He notes common program gaps: hard-to-find reporting channels, poor mobile experiences, overreliance on telephony (especially problematic for non-English speakers), insufficient guidance on what to report, and weak trust due to lack of follow-up and perceived inaction. They consider generational preferences, privacy-aware deployment, such as QR code placement, and AI use cases such as multilingual voice intake for illiterate supply-chain workers, while cautioning against unsafe AI practices and autonomous decision-making. Morss highlights investigative management as a major opportunity beyond basic case repositories and forecasts greater AI-driven integration with in-house systems amid geopolitical and regulatory divergence.

Key highlights:

  • Employee Expectations Shift
  • Common SpeakUp Mistakes
  • Trust and Anti-Retaliation
  • Gen Z Reporting Channels
  • AI Voice for Workers
  • One Practical CCO Tip

Resources:

Connect with Tim Morss on LinkedIn

SpeakUp

Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts

Categories
Blog

The False Alignment Trap in Compliance Transformation

A major compliance initiative rarely fails because the Chief Compliance Officer (CCO) did not work hard enough. It usually fails because the organization never reached a true agreement on what the initiative was supposed to accomplish.

That is the core lesson from The False Alignment Trap by Julia Dhar, Kristy R. Ellmer, and Philip Jameson. The authors argue that many change efforts fail because senior leaders believe they agree on the “why,” “what,” and “how” of change when, in fact, they do not. A stitched-together flower is an apt metaphor for corporate change: from a distance, the initiative may look whole; up close, it may be held together by fragile threads.

For the CCO instituting a major compliance initiative, this insight is critical. Whether the project is a global third-party risk overhaul, a new sanctions screening program, an AI governance framework, a speak-up culture campaign, or a full redesign of the compliance operating model, the CCO cannot settle for polite nods around the executive table. The CCO must secure true agreement.

The authors frame the three questions every change program must answer: why are we changing, what are we changing, and how will the change occur? It also makes an important distinction between “alignment” and “agreement.” Alignment may mean that executives are not actively blocking one another. An agreement means leaders have made a detailed and explicit compact that allows them to move together and hold one another accountable. That distinction should be posted on every CCO’s wall.

Why This Matters to Compliance

A major compliance initiative always changes more than the compliance department. It changes how a sales function approves intermediaries. It changes how procurement selects vendors. It changes how finance reviews payments. It changes how HR handles discipline and incentives. It changes how legal, internal audit, cybersecurity, operations, and the business share data. It may change who can approve a deal, how quickly a transaction can move, and what documentation must be in place before revenue is booked. That means compliance transformation is not simply a compliance project. It is an enterprise change project.

The Department of Justice’s 2024 Evaluation of Corporate Compliance Programs (ECCP) asks three fundamental questions: whether the program is well designed, whether it is applied earnestly and in good faith through adequate resources and empowerment, and whether it works in practice. DOJ also asks whether senior management has articulated standards clearly, disseminated them in unambiguous terms, and demonstrated adherence by example. Those expectations cannot be met if the C-suite is only “conceptually aligned” on compliance.

A CCO may believe the company has agreed to strengthen compliance. The CEO may believe the initiative is about satisfying the board. The CFO may believe it is about reducing investigation costs. The head of sales may believe it is about avoiding bad distributors but not slowing growth. The general counsel may believe it is about reducing enforcement exposure. Operations may believe it is another documentation exercise. HR may believe it is about training completion rates. Everyone says yes. Everyone means something different. That is the false alignment trap.

The First Lesson: Never Launch on Slogans Alone

Compliance leaders love phrases such as “culture of compliance,” “tone at the top,” “risk-based approach,” “speak-up culture,” and “doing business the right way.” These phrases are useful, but they are not implementation plans. The authors warn that executives often think they agree because their conversations are insufficiently specific. Leaders may agree on a broad goal, but disagree sharply on the levers, trade-offs, timeline, funding, and operational consequences.

For a CCO, this means “we need a stronger third-party program” is not enough. The leadership team must agree on what that means in practice. Does it mean fewer third parties? More due diligence? More audits? Centralized onboarding? Automated screening? New contractual rights? Mandatory business justification? Enhanced payment controls? A right to terminate non-responsive intermediaries? A slower sales cycle in high-risk markets? Until those questions are answered, the CCO does not have agreement. The CCO has a slogan.

The Second Lesson: Silence Is Not Commitment

One of the most dangerous moments in compliance transformation is the executive meeting where everyone nods. The authors describe the “false consensus effect,” where leaders overestimate the extent to which others share their beliefs. It also describes the tendency of executives to pretend to agree rather than surface disagreement. In one example, executives used vague phrases such as “I am aligned,” “partly aligned,” and “conceptually aligned,” even though real disagreement remained unresolved.

Compliance professionals see this all the time. A regional president says, “We fully support the new due diligence process.” What she may mean is, “We support it unless it slows down strategic distributors.” A sales leader says, “We support compliance training.” What he may mean is, “We support it as long as it does not take people out of the field during the quarter.” A procurement leader says, “We support vendor controls.” What he may mean is, “We support them for new vendors, but not for legacy vendors.”

The CCO’s job is to make those reservations visible before launch. That does not mean creating conflict for conflict’s sake. It means creating a process where disagreement becomes a source of better design.

The Third Lesson: Invite Dissent Early

The authors recommend provoking an early exchange. Leaders should write down what they agree with, what they disagree with, and what they are unsure about. The authors specifically note that written reactions can reduce groupthink. They also recommend asking questions that invite contrary views, such as “What could go wrong with this approach?”

This is directly applicable to compliance. Before launching a major compliance initiative, the CCO should ask each executive to answer, in writing:

What risk are we trying to reduce?

What business process will this initiative change?

What are you worried this initiative will disrupt?

What resources will your function need?

What decisions are you willing to give up or share?

What part of this proposal do you not support?

Where do you believe compliance is underestimating the operational impact?

These questions are uncomfortable. That is the point. A compliance initiative that cannot survive executive-level dissent in a planning meeting will not survive business-level resistance during implementation.

The Fourth Lesson: Deferred Agreement Becomes Compliance Debt

The authors warn against the idea that leaders can “sort out the details later.” That may work for small experiments, but the authors argue that it is dangerous for transformative organizational change because vague or contradictory premises create confusion, delay, and employee frustration. They describe deferred agreement as a debt that leaders expect to repay quickly but often never repay at all. For compliance, deferred agreement is especially costly.

When the CCO launches without a clear executive agreement, the business will find the gaps. If sales and compliance disagree on third-party approval standards, the business will escalate every hard case. If finance and compliance disagree on payment controls, exceptions will multiply. If HR and legal disagree on discipline standards, investigations will produce inconsistent outcomes. If IT and compliance disagree on data ownership, monitoring dashboards will never mature. The result is not simply inefficiency. It is a control failure.

A CCO should treat unresolved executive disagreement as a known risk. It should be tracked, assigned, escalated, and resolved before the initiative moves from design to deployment.

The Fifth Lesson: Watch for the Three Failure Modes

The authors identify three consequences of false alignment: paralysis, hyperactivity, and tunnel vision. These are also classic symptoms of a failing compliance initiative.

Paralysis occurs when teams are stuck between competing executive priorities. In compliance, this looks like endless working groups, repeated risk assessments, draft policies that never finalize, and technology projects that remain in “requirements gathering” for months.

Hyperactivity occurs when teams launch too many initiatives to please too many stakeholders. In compliance, this looks like a dozen training campaigns, multiple dashboards, overlapping third-party reviews, new certifications, new attestations, and new committees, but no meaningful risk reduction.

Tunnel vision occurs when teams make progress on the wrong thing. In compliance, this may mean achieving 100% training completion while employees still do not know how to raise concerns. It may mean onboarding vendors faster while missing beneficial ownership risk. It may mean closing investigations more quickly while weakening root cause analysis.

The CCO should use these three symptoms as early warning indicators. If the initiative is stuck, too busy, or moving in the wrong direction, the problem may not be execution. It may be false alignment at the top.

Lessons in Building True Agreement for a Compliance Initiative

The authors offer a five-step path to true agreement: set clear parameters, provoke an early exchange, have a substantive debate, reach a formal verdict, and send a unified message. That framework can be translated directly into a CCO playbook.

  1. Set clear parameters. The CCO should define the decision rights before the project begins. Who decides the risk appetite? Who approves the budget? Who owns business process changes? What decisions require CEO approval? What issues go to the board? What happens if a regional business leader disagrees?
  2. Provoke an early exchange. The CCO should require written input from the CEO, CFO, general counsel, CHRO, CIO, internal audit, procurement, and key business leaders. This is where hidden objections should surface.
  3. Have a quality debate. The CCO should hold one-on-one conversations with executives before the group decision meeting. The point is not to lobby for superficial support. The point is to understand red lines, trade-offs, and operational realities.
  4. Come to a formal verdict. The authors recommend asking for each individual’s agreement, documenting the decision, and creating a formal record of the agreed terms. For a compliance initiative, this should become a written executive charter. It should specify scope, budget, timeline, metrics, decision rights, business obligations, and escalation paths.
  5. Send a unified message. The authors warn against each executive’s team receiving its own version of events. Instead, the decision should be broadcast simultaneously in a single format to everyone who needs to know. For compliance, this is essential. Employees should hear one message: this is why we are changing; this is what will change; this is what will not change; this is who owns what; and this is how success will be measured.

The bottom line is clear. A major compliance initiative is not successful because the CCO announces it, the board approves it, or the executive team says it is “aligned.” It is successful when the company reaches true agreement on the risk, the change, the trade-offs, the ownership, and the evidence of effectiveness.

For the compliance professional, The False Alignment Trap provides a powerful reminder: do not launch a transformation on implied consent. Build the compact first. Then execute.