Categories
Blog

Sherlock Holmes and Compliance: Investigative Insights from “The Valley of Fear”

Here’s a detailed, insightful article in the style of Tom Fox for a corporate compliance audience, highlighting investigative lessons from the Sherlock Holmes novel, “The Valley of Fear.”

For compliance professionals, investigations are the bedrock of effective compliance programs. Whether it’s tracking down evidence of bribery, uncovering fraud schemes, or rooting out systemic misconduct, the investigative methods you deploy can significantly impact your organization’s integrity, reputation, and bottom line.

“The Valley of Fear” offers a wealth of investigative wisdom. Its narrative of deception, undercover operations, secret societies, and surprising plot twists provides vivid lessons highly relevant to today’s corporate compliance landscape. Let’s unpack five key investigative lessons, each illustrated with memorable scenes from this timeless detective classic.

Lesson 1: Do Not Take Facts at Face Value

Illustrated By: Detailed Analysis of the Crime Scene. Upon arrival at Birlstone Manor, Holmes carefully examines the room where Douglas’s body was discovered, noting inconsistencies like the placement of furniture, window access, and unusual blood patterns.

The central narrative of “The Valley of Fear” revolves around the apparent murder of John Douglas at his Manor House in Birlstone. Initially, the crime scene appears straightforward: Douglas has seemingly been shot at close range, and the crime scene implicates an intruder. Yet Holmes immediately suspects deeper layers beneath the obvious evidence. His meticulous examination of the scene, blood patterns, room layout, and oddities like misplaced items reveals inconsistencies that others missed.

For compliance professionals, the lesson is clear: avoid jumping to conclusions based solely on initial evidence. It is tempting and human to embrace straightforward narratives quickly. But like Holmes, investigators must resist that impulse, digging deeper, questioning assumptions, and rigorously testing evidence for hidden contradictions or overlooked facts. By refusing to accept surface-level interpretations, compliance teams protect organizations from premature and potentially misguided conclusions.

Compliance Takeaway: Always scrutinize initial evidence meticulously and objectively. Never accept evidence without question or assume that initial appearances represent complete facts.

Lesson 2: Investigative Cooperation is Essential

Illustrated By: Collaboration between Holmes and MacDonald. Holmes and Inspector MacDonald openly discuss theories, evidence, and ideas, working cooperatively rather than competitively. Holmes shares insights freely, establishing mutual trust and respect that propel the investigation forward. 

Throughout the novel, Holmes collaborates closely with Scotland Yard’s Inspector MacDonald, who initially struggles to make sense of the complex scenario. Rather than competing, Holmes works cooperatively with MacDonald, openly sharing insights, theories, and information. Their mutual respect, dialogue, and professional cooperation ultimately contribute to solving the intricate puzzle.

Corporate compliance investigations similarly require effective internal and external cooperation. Compliance departments must partner seamlessly with Legal, HR, Audit, and IT functions, as well as outside counsel or forensic experts when necessary. Effective cooperation and collaboration across departments ensure thoroughness and objectivity, minimize blind spots, and enhance investigative outcomes. Holmes demonstrates that strong investigative results rely on teamwork rather than isolation or internal competition.

Compliance Takeaway: Foster collaborative relationships across organizational functions, aligning investigative efforts with Legal, HR, IT, and other stakeholders to produce effective outcomes.

Lesson 3: Patience and Persistence Yield Results

Illustrated By: Patient Uncovering of Douglas’s Background. Holmes painstakingly reconstructs Douglas’s past life in America, gradually identifying him as a Pinkerton detective who infiltrated the Scowrers. This meticulous work takes time, patience, and sustained investigative discipline.

Holmes painstakingly pieces together the clues surrounding John Douglas, ultimately revealing Douglas’s true identity as Birdy Edwards, a former Pinkerton detective who infiltrated a dangerous criminal organization, the Scowrers, in the United States. This revelation is not instantaneous; Holmes’ success comes from persistence, incremental discovery, and careful analysis of evidence collected over time.

In corporate compliance investigations, patience and persistence are equally critical. Compliance officers must frequently manage complex, multi-faceted investigations spanning weeks, months, or even years. Instant resolutions are rare; critical information often emerges slowly and incrementally. Holmes’s deliberate and patient approach to unraveling Douglas’s identity highlights the importance of tenacity, emphasizing that thoroughness and sustained attention invariably produce the clearest investigative outcomes.

Compliance Takeaway: Recognize and embrace that thorough investigative efforts are often incremental, requiring sustained attention and patience to understand complex compliance issues fully.

Lesson 4: Maintain a Big-Picture Perspective

Illustrated By: Contextual Awareness of Moriarty’s Influence. Holmes keeps Moriarty’s potential involvement clearly in mind throughout, maintaining awareness that individual incidents might connect to larger criminal patterns.

In the novel, Holmes repeatedly emphasizes that the apparent Birlstone murder is merely one small part of a larger, sinister picture orchestrated by the infamous Professor Moriarty. Though Moriarty never physically appears, his influence permeates the narrative, connecting seemingly unrelated events and adding deeper context to the investigation. Holmes maintains a sharp awareness of this broader context throughout, ensuring he does not lose sight of underlying motivations and interconnected plots.

This lesson resonates powerfully for compliance professionals. Frequently, investigations initially perceived as isolated incidents reveal systemic compliance or ethical weaknesses within an organization. Investigators must always remain cognizant of the broader organizational, cultural, or regulatory contexts influencing misconduct. By keeping this “big picture” perspective, compliance teams ensure investigations are holistic, not narrowly focused, enabling effective systemic remediation rather than piecemeal solutions.

Compliance Takeaway: Maintain holistic awareness in compliance investigations, ensuring isolated incidents are analyzed within broader organizational, regulatory, or ethical contexts to uncover deeper systemic issues.

Lesson 5: Effective Communication is Crucial 

Illustrated By: Contextual Awareness of Moriarty’s Influence. Holmes keeps Moriarty’s potential involvement clearly in mind throughout, maintaining awareness that individual incidents might connect to larger criminal patterns.

At key points throughout the novel, Holmes carefully explains his deductions, processes, and conclusions to Inspector MacDonald, Dr. Watson, and other key players. His ability to clearly articulate reasoning and insights, especially when conclusions appear counterintuitive or complex, is essential to maintaining credibility, building consensus, and driving effective outcomes.

Corporate compliance investigators must also master clear, effective communication. It’s insufficient merely to uncover misconduct; the true skill lies in effectively communicating findings to stakeholders, management, regulators, and even potentially implicated employees. Holmes shows us that investigative brilliance must be matched by communicative clarity. In corporate settings, investigative reports must clearly explain methodology, facts, assumptions, and conclusions, ensuring decisions based on investigations are informed, justified, and actionable.

Compliance Takeaway: Maintain holistic awareness in compliance investigations, ensuring isolated incidents are analyzed within broader organizational, regulatory, or ethical contexts to uncover deeper systemic issues.

Sherlock Holmes as Compliance Inspiration

Sherlock Holmes remains an enduring inspiration to corporate compliance professionals precisely because effective investigations are foundational to compliance success. Holmes’s methods, including detailed scrutiny of evidence, a collaborative approach, patient and persistent inquiry, a holistic perspective, and clear communication, are not merely fictional flourishes; they represent essential best practices.

“The Valley of Fear” offers compliance officers vivid, relatable insights, underscoring that successful investigations require disciplined methodology, sustained inquiry, careful analysis, cross-functional cooperation, and effective stakeholder communication. As Sherlock Holmes memorably states, “It is, of course, a trifle, but there is nothing so important as trifles.” For compliance professionals today, Holmes’s wisdom is more relevant than ever, reminding us that attention to detail, disciplined process, and communicative clarity are never trivial.

By embracing Holmes’s investigative rigor and lessons from this classic novel, compliance professionals equip themselves and their organizations to meet today’s complex challenges effectively. After all, just like Holmes himself, the compliance investigator’s role is fundamentally about uncovering truth; patiently, methodically, and tirelessly ensuring organizational integrity and ethical clarity amidst a complex corporate landscape.

Categories
Innovation in Compliance

Operationalizing Trust at Scale: A Conversation with Amanda Carty on Compliance and AI

Innovation comes in many areas, and compliance professionals must be ready for and embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. Today, we begin a 3-part podcast series sponsored by Diligent with Jessica Czeczuga, Amanda Carty, and Neta Meidav. In Part 2, Tom is joined by Amanda Carty, GM Compliance Solutions at Diligent.

Carty shares insights from her decade-long experience in the GRC field and offers detailed perspectives on how leaders can model ethical behavior within their organizations. The conversation dives into how Diligent helps companies assess and document leadership effectiveness and the role of AI in enhancing compliance initiatives. Carty emphasizes the necessity of leaders acting as ambassadors of culture and the impact of measurable outcomes in compliance programs. The episode also explores the integration of AI and chatbots to provide real-time compliance support to employees, ensuring efficiency and ease of access to crucial information.

Key highlights:

  • Importance of Tone at the Top
  • Leadership and Ethical Culture
  • AI in Compliance
  • Employee Engagement and Technology
  • Actionable Takeaways for Compliance Professionals 

Resources:

⁠Amanda Carty on LinkedIn

⁠⁠Diligent⁠

Tom Fox

⁠Instagram⁠

⁠Facebook⁠

⁠YouTube⁠

⁠Twitter⁠

⁠LinkedIn

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Why Engage in Pre-acquisition Due Diligence

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide you with bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we consider the multiple legal and business reasons to engage in pre-acquisition due diligence in M&A transactions.

For more on this topic, check out The Compliance Handbook, a Guide to Operationalizing Your Compliance Program, 6th edition, which LexisNexis recently released. It is available here.

Categories
AI Today in 5

AI Today in 5: August 6, 2025, The Rethinking Compliance Episode

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI.

  • AI for compliance and contract review. (Nucamp)
  • Will Big Tech comply with EU rules on AI? (RFI)
  • AI for workers’ comp compliance. (Press Release)
  • Redefining finance compliance with AI. (VettaFi)
  • Using AI to rethink compliance. (Ethisphere)

For more information on the use of AI in compliance programs, Tom Fox’s new book is Upping Your Game. You can purchase a copy of the book on Amazon.com

Categories
Compliance Into the Weeds

Compliance into the Weeds: A Deep Dive into Cadence Design Systems’ Export Control Violations

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into a compliance-related topic, literally going into the weeds to explore a subject more fully. Looking for some hard-hitting insights on compliance? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss the recent enforcement action against Cadence Design Systems for export control violations.

They explore the company’s illegal sales of sensitive technology to a Chinese university connected to the Chinese military, resulting in $140 million in penalties and a three-year probation. The conversation delves into topics like weak subsidiary governance, challenges in monitoring Chinese subsidiaries, and the complexities of conducting investigations in China. They also reflect on the broader implications for U.S. companies operating in China and the intractable risks involved.

Key highlights:

  • Cadence Design Systems Case Overview
  • Subsidiary Governance Issues
  • Details of the Misconduct
  • Resolution and Penalties
  • Challenges in Compliance and Monitoring
  • Complexities of Doing Business in China

Resources:

Matt Kelly in Radical Compliance

Tom

Instagram

Facebook

YouTube

Twitter

LinkedIn

A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has been conferred a Davey, Communicator, and W3 Awards for podcast excellence.

Categories
Compliance Tip of the Day

Compliance Tip of the Day – Key M&A Enforcement Actions

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide you with bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

M&A under the FCPA is well-settled. Today, we consider three seminal enforcement actions.

For more on this topic, check out The Compliance Handbook, a Guide to Operationalizing Your Compliance Program, 6th edition, which LexisNexis recently released. It is available here.

Categories
Great Women in Compliance

Great Women in Compliance – LATAM Compliance Update with Alejandra Montenegro Almonte

In this episode of Great Women in Compliance, Lisa speaks with Alejandra Montenegro Almonte, a member at Miller Chevalier. Alejandra is the Chair of their International Practice and Practice Co-Lead, Workplace Culture.

They discuss recent regulatory trends, workplace culture, and the evolving compliance landscape in Latin America and the United States, including the increased focus on Foreign Terrorist Organizations, False Claims Act enforcement, and the importance of addressing these changes and others proactively, including the DEI Executive Order requirements.

Alejandra also shares her insights about the shift towards addressing workplace culture and conduct issues proactively, and how this has evolved past looking just at litigation risk. She discusses employee engagement and the increasing use of ethical assessments.

Alejandra and Lisa reflect on the challenges of building authentic professional relationships in a predominantly remote work environment. They emphasize the need for intentionality, such as scheduling regular virtual coffees and employer-facilitated opportunities for connection, to foster networking and mentorship.

Alejandra and Lisa have known each other for a long time, and they discuss the value of the early career friendships that become a peer network. This is harder in a virtual age, and Alejandra shares some of her strategies to build networks.

Categories
AI Today in 5

AI Today in 5: August 5, 2025, The AI at the SEC Episode

Welcome to AI Today in 5, the newest addition to the Compliance Podcast Network. Each day, Tom Fox will bring you 5 stories about AI to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the AI Today In 5. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest about AI. 

 

For more information on the use of AI in Compliance programs, Tom Fox’s new book is Upping Your Game. You can purchase a copy of the book on ⁠Amazon.com.⁠

Categories
Compliance Tip of the Day

Compliance Tip of the Day – M&A – International Issues

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned compliance professional or just starting your journey, we aim to provide you with bite-sized, actionable tips to help you stay on top of your compliance game. Join us as we explore the latest industry trends, share best practices, and demystify complex compliance issues to keep your organization on the right side of the law. Tune in daily for your dose of compliance wisdom, and let’s make compliance a little less daunting, one tip at a time.

Today, we conclude a two-part exploration of issues in the realm of mergers and acquisitions. Yesterday, we looked at the domestic side of things, and today, we consider the international side.

For more on this topic, check out The Compliance Handbook, a Guide to Operationalizing Your Compliance Program, 6th edition, which LexisNexis recently released. It is available here.

Categories
Blog

10 Prompts for Compliance

A colleague recently asked me to provide them with some prompts they could use to start their journey using AgenticAI, machine learning, and natural language processing. They also wanted an explanation of why these prompts would be helpful. I thought about it and came up with a list of the Top 10 prompts compliance professionals frequently use or need to use, along with a detailed explanation of their critical importance. I have added an answer for each prompt. To obtain these prompts, I began with the following query to ChatGPT. ‘You are a compliance professional at a US corporation. Please list the top 10 prompts I can use to start my journey of using AI to improve a corporate compliance program.’

1. “Identify emerging compliance risks in our industry.”

Explanation:

This prompt is foundational for proactive compliance management. Compliance professionals must continuously scan the regulatory landscape, industry developments, technology advancements, and geopolitical shifts to detect emerging risks. Understanding new threats before they fully materialize allows compliance teams to take proactive steps, adapt policies, provide training, and mitigate potential issues before they result in violations or enforcement actions. Moreover, this prompt promotes a forward-looking compliance program, which aligns with regulatory expectations such as those outlined by the DOJ’s Evaluation of Corporate Compliance Programs (ECCP), making this a critical practice for effective compliance professionals.

2. “Summarize recent regulatory updates relevant to our business operations.”

Explanation:

Compliance landscapes are dynamic, with rules frequently evolving. This prompt ensures compliance professionals remain fully informed about current regulatory changes that directly impact their company’s operations. Effective compliance teams leverage these summaries to update policies, provide timely training, and communicate clearly to management and employees. Staying abreast of regulatory developments also positions compliance professionals to strategically advise senior leadership on business decisions, mitigate regulatory risk, and avoid costly penalties or enforcement actions resulting from non-compliance or outdated practices.

3. “Provide best practices for conducting a thorough compliance risk assessment.”

Explanation:

Risk assessment is the cornerstone of an effective compliance program, as emphasized by regulatory guidelines from bodies as diverse as the DOJ and COSO. This prompt enables compliance professionals to leverage proven methodologies, frameworks, and standards to identify, prioritize, and address key risk areas systematically. An effective compliance risk assessment not only satisfies regulatory expectations but also informs strategic allocation of compliance resources. Moreover, a robust risk assessment is foundational for proactive management, policy development, and training, enhancing an organization’s overall compliance posture and reducing potential liabilities.

4. “Generate scenario-based training examples on ethical dilemmas and compliance issues.”

Explanation:

Training remains a critical element in a strong compliance program. Scenario-based prompts help compliance professionals create realistic, relatable training modules that resonate with employees. Ethical dilemmas and practical compliance scenarios allow employees to practice decision-making, reflect upon corporate values, and internalize compliance expectations. Such scenario-based training significantly improves retention, awareness, and adherence to corporate standards. Additionally, regulators frequently examine training effectiveness during compliance reviews, and scenario-based training demonstrates a genuine commitment to fostering a culture of compliance.

5. “Draft a communication plan for implementing significant compliance program changes.”

Explanation:

Clear, structured communication is essential when changes occur in compliance programs, procedures, or policies. This prompt helps compliance professionals ensure they address critical points transparently and consistently to all stakeholders. A thoughtful communication plan ensures key messages are effectively conveyed, minimizes confusion, and reinforces the seriousness of compliance updates. Effective communication plans also document a defensible record of the company’s efforts to implement and socialize compliance changes, satisfying regulatory expectations for robust internal communication, transparency, and awareness across the organization.

6. “Suggest steps for performing effective third-party due diligence and monitoring.”

Explanation:

Third-party relationships pose significant compliance and reputational risks, especially concerning bribery, corruption, fraud, and sanctions violations. This prompt assists compliance professionals in defining robust due diligence and monitoring procedures aligned with international best practices and regulatory expectations such as those in the FCPA and the UK Bribery Act. Effective due diligence steps allow companies to proactively identify potential red flags, implement controls, and continuously monitor third-party activities. This approach helps mitigate liability from third-party misconduct and demonstrates regulatory rigor and commitment to compliance oversight.

7. “Explain key lessons learned from recent enforcement actions relevant to our sector.”

Explanation:

Learning from regulatory enforcement actions is pivotal in compliance. This prompt ensures compliance professionals leverage real-world cases to strengthen their compliance programs. By analyzing enforcement trends and critical lessons, compliance officers identify and rectify gaps before they lead to serious issues. Regulators often expect companies to adjust their compliance efforts based on industry-specific enforcement activity, and proactively analyzing recent cases underscores an organization’s commitment to continuous improvement and diligent compliance management. This practice helps mitigate risk, avoid similar pitfalls, and demonstrate compliance program effectiveness.

8. “Guide developing or updating a whistleblower policy and protection procedures.”

Explanation:

Whistleblower protection is not just regulatory guidance; it’s often legally required. This prompt helps compliance professionals craft robust whistleblower policies to encourage employees to report misconduct safely without fear of retaliation. An effective whistleblower program builds trust, integrity, and accountability within an organization. Regulatory bodies, such as the SEC and DOJ, evaluate whistleblower programs as indicators of a mature compliance culture. Hence, this prompt helps compliance teams align policy with best practices and legal mandates, protecting both whistleblowers and the company from serious compliance violations and reputational harm.

9. “Outline a structured root cause analysis process for compliance failures.”

Explanation:

Conducting a root cause analysis (RCA) is essential for compliance professionals to identify underlying factors contributing to compliance failures. This prompt provides compliance officers with a structured methodology to systematically evaluate incidents, prevent recurrence, and make informed decisions on corrective measures. Regulators, including the DOJ, increasingly require companies to demonstrate a systematic RCA process following a compliance breach. Utilizing RCA strengthens an organization’s ability to enhance controls, improve policies, refine training, and demonstrate commitment to compliance effectiveness, thus enhancing credibility with regulators.

10. “Draft a checklist for auditing and monitoring compliance program effectiveness.”

Explanation:

Auditing and monitoring are fundamental elements of a strong compliance program. This prompt helps compliance professionals systematically evaluate their programs’ design, implementation, and ongoing performance. Detailed checklists facilitate consistent reviews, identify vulnerabilities, track remediation progress, and ensure continuous improvement. Regulators regularly review auditing and monitoring processes as evidence of a compliance program’s maturity. Thus, having articulated auditing checklists underscores a proactive approach to maintaining compliance program effectiveness and regulatory readiness and ensures swift corrective actions whenever issues arise.

Conclusion:

These top 10 prompts embody essential practices in modern compliance management. Leveraging these prompts enables compliance professionals to proactively manage risk, remain informed, educate effectively, communicate clearly, and demonstrate regulatory rigor. They ensure that organizations maintain robust compliance programs that protect the business and sustain an ethical, accountable, and risk-aware culture.