Tag: Leadership

Categories
Blog

Odyssey Week: Leadership – Athena in the Boardroom: Independent Oversight and Counsel

Ed. Note: I was finally able to see the movie The Odyssey. To say it blew me away was an understatement. Even though it didn’t follow Homer’s work precisely or use ancient Greek, I still thought it was great cinema. Anytime you get people talking about the Greek classics, that is a win in my book. So check out the movie and enjoy it. Zendaya was great as Athena.

Athena does not row the ship. She does not lash herself to the mast, fight the Cyclops, navigate Scylla and Charybdis, or drag Odysseus’s crew away from every bad decision they seem determined to make. She is not in the trenches every day. She does not submit expense reports, approve vendors, review discount requests, or sit through the quarterly business review where someone explains why this deal is “strategic.” But Athena changes the journey.

She sees what Odysseus cannot see. She warns. She guides. She challenges. She protects. She appears at decisive moments when courage alone is not enough, and cleverness is about to become self-harm with better branding. That is why Athena belongs in the boardroom.

For corporate compliance, Athena represents independent oversight and wise counsel: the person, function, or governance body able to say, “That may win the deal, but it may also wreck the kingdom.” A compliance function that cannot challenge leadership is not Athena. Rather, it is simply decoration to meet a legal, statutory, or contractual requirement.

The Corporate Translation

Every company says it values compliance independence. The question is what that means when the business wants something. It is easy to celebrate compliance when compliance supports the decision already made. It is easy to invite the Chief Compliance Officer (CCO) to the meeting after the deal is signed, the press release is drafted, and the train has left the station with several questionable third parties in the dining car. That is not independence. That is archaeology.

Independent oversight means compliance has the authority, access, and resources to influence decisions before risk is accepted. It means the board hears directly from compliance. It means escalation does not depend on whether a business leader feels emotionally prepared for bad news. It means compliance can challenge high performers, powerful executives, and sacred business strategies without being treated as disloyal.

Athena does not exist to admire Odysseus. She exists to help him survive himself.

Access Is Not the Same as Influence

Many compliance officers technically have access to leadership. They attend meetings. They submit reports. They provide updates. They own several slides in the board deck, usually after cybersecurity and before “other business.” But access is not the same as influence.

Real access means compliance can raise concerns in a setting where they matter. It means there are private sessions with the board or audit committee. It means compliance can speak without management filtering, softening, or translating the message into something more comfortable. It means the board asks questions that go beyond “Any major issues?” which is the governance equivalent of asking a teenager whether school was fine.

The DOJ’s 2024 Evaluation of Corporate Compliance Programs (ECCP) focuses directly on whether compliance and control functions have autonomy and resources, including sufficient stature, sufficient staffing and resources, and autonomy from management, such as direct access to the board or audit committee. That is not a technical footnote. It is a central governance point. If the compliance function only reaches the board through management, the board may be hearing the music after someone else has adjusted the volume.

Authority Must Be Real

A compliance function without authority is like Athena without wisdom: impressive in name only. Authority means compliance can stop, modify, or escalate a transaction. It means policies are not optional when revenue is large enough. It means compliance concerns are documented, tracked, and resolved. It means the business must explain why it wants to proceed despite risk, not merely pressure compliance to “be practical.”

Practical compliance is not weak compliance. Practical compliance helps the business find a lawful and ethical path forward. But there is a difference between being practical and being domesticated. A good compliance function does not say no for sport. It says no when the facts, risks, and values of the company require it. It says, “not that way.” It says, “not with that intermediary.” It says, “not without diligence.” It says, “not until we understand the data, the customer, the payment, the conflict, or the control failure.”

The ECCP specifically asks how a company has responded when compliance raised concerns and whether transactions or deals have been stopped, modified, or further scrutinized because of compliance concerns. That is the right question. The ECCP states at one point, “Have they persisted in that commitment in the face of competing interests or business objectives?” Not whether compliance attended the meeting. Whether compliance changed the outcome. The ECCP further asked, “What role has compliance played in the company’s strategic and operational decisions? How has the company responded to specific instances where compliance raised concerns? Have some transactions or deals been stopped, modified, or further scrutinized as a result of compliance concerns?”

Resources Are a Statement of Values

Companies reveal what they value through budget. A board can praise compliance all day long. Still, if the function lacks staffing, technology, data access, training budget, investigative resources, and experienced personnel, the message is clear: “We support compliance, but preferably at a discount.”

No one would ask sales to grow revenue without systems, people, and market data. No one would ask finance to close the books with three spreadsheets, two interns, and a heroic attitude. Yet compliance teams are often expected to monitor global risk with underpowered tools and just enough headcount to keep the training completion dashboard from turning red.

That is not empowerment. That is wishful thinking. The ECCP asks whether compliance personnel have sufficient staffing to audit, document, analyze, and act on compliance efforts, whether resources are comparable to other parts of the company, and whether compliance has access to relevant data for timely monitoring and testing. Regarding funding and resources, the ECCP asks, “Has there been sufficient staffing for compliance personnel to effectively audit, document, analyze, and act on the results of the compliance efforts? Has the company allocated sufficient funds for the same? Have there been times when requests for resources by compliance and control functions have been denied, and if so, on what grounds? Does the company have a mechanism to measure the commercial value of investments in compliance and risk management?”

Those questions should make boards uncomfortable in a productive way. If the business has world-class tools to capture opportunity but outdated tools to detect risk, that imbalance is itself a governance decision.

Escalation: The Road from Concern to Action

Athena’s guidance matters because it reaches Odysseus when action is still possible. That is also the purpose of escalation. A well-designed escalation process moves concerns to the right people at the right time with enough information to make a decision. A weak escalation process traps concerns in email chains, local management reviews, or “let’s monitor this” limbo until the problem becomes a reportable event, a whistleblower complaint, or a headline.

Escalation should not depend on personality. It should not depend on whether the compliance officer is unusually persistent, politically skilled, or willing to become unpopular before breakfast. It should be built into governance.

What must be escalated? To whom? Within what timeframe? With what documentation? What happens when business and compliance disagree? Who decides? How are unresolved concerns reported to senior leadership or the board? These are not theoretical questions. They are the mechanics of wise counsel. Because without escalation, Athena is whispering in a locked room.

The Board’s Role: Ask Better Questions

Boards do not need to manage the compliance program day to day. That is not their role. But boards do need to oversee whether the program is real. That means asking better questions. The board should also pay attention to the moments when compliance loses. If compliance raised concerns and the business proceeded anyway, what happened? Was the decision documented? Were compensating controls added? Was the board informed? Did the risk later materialize? You learn a great deal about culture by examining what happens when wise counsel is inconvenient.

The Compliance Takeaway

Athena does not represent bureaucracy. She represents judgment. That distinction matters. Compliance officers are sometimes caricatured as the people who slow things down, complicate decisions, or drain the romance out of heroic commercial ambition. But the best compliance functions do something far more important: they help the organization see clearly before it acts.

They bring risk into the room. They challenge assumptions. They protect the company from cleverness without discipline. They help leaders understand that winning the deal, entering the market, launching the product, or pleasing the customer is not success if the path taken damages the company’s integrity.

Independent oversight is not ceremonial access. It is authority, resources, escalation, data, board engagement, and the organizational courage to let compliance challenge power. Odysseus needed Athena because brilliance has blind spots. So does every company.

The question is whether your Athena is truly in the boardroom or merely listed on the org chart.

Join us Tomorrow

Athena teaches that independent oversight is not ceremonial access but real authority, resources, escalation, data, board engagement, and the courage to let compliance challenge power. But that lesson only matters if the organization is willing to apply it to its most celebrated leaders, not merely its easiest targets. That brings us to Odysseus: the brilliant, strategic, results-driven leader every board wants and the very leader who can become the company’s most dangerous compliance risk when success becomes a shield. If Athena is the voice saying, “That may win the deal, but it may also wreck the kingdom,” Odysseus is the leader who wins the deal and forces the organization to ask whether anyone had the authority, courage, and independence to challenge how he did it. I hope you will join us tomorrow.

Categories
Daily Compliance News

Daily Compliance News: August 25, 2026, The All Leadership Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.

Top stories include:

  • The leadership skill that matters most in the age of AI. (Bloomberg)
  • CEO with ‘no close friends.’ (FT)
  • Keeping top talent in the age of AI. (FT)
  • Becoming a Principled Driven Leader. (WSJ)

To learn about the intersection of Sherlock Holmes and the modern compliance professional, check out Tom’s latest book, The Game is Afoot-What Sherlock Holmes Teaches About Risk, Ethics and Investigations on Amazon.com.

Categories
FCPA Compliance Report

FCPA Compliance Report: Charisma Doesn’t Scale, Controls Do: Compliance Lessons from Ted Lasso

In this episode, I take things in a very different direction. Last week I did a 5-part blog post series on leadership lessons from the hit TV show Ted Lasso. I took those 5 blog posts and fed them into Notebook LM. What came out, in the AI voices of Timothy and Fiona, is what I posted for this podcast.

Timothy and Fiona use Ted Lasso characters as operational profiles to show why empathetic leadership and “good vibes” are insufficient under compliance frameworks like the DOJ ECCP, COSO, and the Caremark Doctrine. Some of the analysis includes:

  • Ted Lasso creates psychological safety but introduces key-person risk by relying on an open-door culture without institutional “listen-up” systems, case logging, escalation, and anti-retaliation protections; his immediate forgiveness of Rebecca’s sabotage illustrates why mercy cannot replace investigation, evidence preservation, root-cause analysis, and remediation.
  • Rebecca Welton exemplifies corrupted tone at the top and conflicts of interest, including her relationship with Sam, before shifting toward accountable governance by rejecting unethical commercial moves and selling 49% to fans.
  • Keeley Jones highlights governance debt from rapid scaling, affinity hiring, and investor conflicts, leading to incident-response and third-party concentration failures.
  • Roy Kent demonstrates “tone in the middle,” accountability, and root-cause diagnosis, but also risks of unchecked informal authority.
  • Nate Shelley shows the danger of promoting technical skill without evaluating leadership ethics, enabling “relocating harm,” data silos, and a major confidentiality leak—reinforcing that auditable controls, oversight, and monitoring must outlast charisma.

I would really like to hear your thoughts on this podcast and the approach I have taken. I would greatly appreciate it if you left a comment or emailed me your reaction to both my use of Notebook LM for this analysis and the AI-generated voices for Timothy and Fiona.

 

Blog Posts on the following Ted Lasso characters:

Ted Lasso

Rebecca Welton

Nate Shelley

Roy Kent

Keeley Jones

Other Takes on Ted Lasso

Tom and Matt Kelly on Ted Lasso in Compliance into the Weeds

Matt Kelly in Radical Compliance

Categories
Blog

Ted Lasso Week: Part 5 – Keeley Jones: Independence, Ethical Growth, and Governance Under Pressure

Season 4 of Ted Lasso is out. Matt Kelly reposted a blog he wrote during the original run of the series, and he and I did a deeper dive into the show and its popularity for compliance professionals in an episode of Compliance into the Weeds. I decided to take a deep dive into five characters from the show and use them to explore compliance topics. Over five blog posts, I have considered Manager Ted Lasso, Assistant Manager Nate Shelley, player and later coach Roy Kent, and social media influencer Keeley Jones. Today we conclude with Part 5, where we look at Keeley Jones, who starts as a social media influencer for AFC Richmond but goes on to found her own business. We explore what happens when a talented professional becomes a founder and must build the organization around her.

Keeley has judgment, courage, creativity, and empathy. She can read a room and recognize misconduct before people with greater status are willing to name it. Yet this only reveals that ethical instinct is not the same as governance. As her authority grows, decisions involving friends, investors, employees, personal relationships, privacy, and funding require processes that do not depend solely on the founder making the right call. For compliance professionals, Keeley’s story is about governance keeping pace with growth.

Ethical Leadership Begins Before the Title

Keeley earns influence before she has formal authority. In “The Diamond Dogs” (Season 1, Episode 8), she discovers that Rebecca arranged the paparazzi scheme involving Keeley and Ted. She confronts Rebecca and insists that she tell Ted the truth. The friendship does not excuse the misconduct, and Rebecca’s ownership of Richmond does not silence Keeley.

Keeley acts as Richmond’s missing speak-up system. Her intervention leads to Rebecca’s confession in “All Apologies” (Season 1, Episode 9). The lesson is not that every employee should conduct an investigation alone. It is that organizations need people who will raise difficult issues and systems that protect them when they do. A best-practice compliance program must have reporting and guidance mechanisms employees can use without fear of retaliation. Keeley dares to speak. A mature organization should not make courage the control.

Entrepreneurship Creates Governance Debt

Keeley’s public-relations work for Richmond turns into an opportunity to build her own firm. In “Inverting the Pyramid of Success” (Season 2, Episode 12), investors offer to fund Keeley’s venture, KJPR. Rebecca encourages her to take the opportunity. The funding provides staff, offices, and credibility. It also creates governance debt. Keeley now answers to a board she did not build and depends on a capital provider she does not control. The founder’s personal brand becomes part of the firm’s risk profile.

KJPR should know who approves hiring, client commitments, spending, external statements, workplace relationships, access to sensitive information, and crisis decisions. Growth does not eliminate the need for speed. It prevents speed from becoming uncontrolled discretion.

Hiring a Friend Tests Founder Judgment

In “(I Don’t Want to Go to) Chelsea” (Season 3, Episode 2), Keeley hires her friend Shandy after seeing her demonstrate creative ability during a commercial shoot. Keeley recognizes overlooked talent because she was once overlooked herself. That instinct is admirable. The process is weak. The decision appears to lack a defined role, structured assessment, reference checks, clear reporting line, or behavioral expectations. Shandy later makes unauthorized decisions and publishes an offensive campaign that damages a client relationship. In “Signs” (Season 3, Episode 5), Keeley fires her.

Keeley ultimately protects the firm. She also learns that loyalty cannot substitute for selection controls. A founder who hires a friend should disclose the relationship, use an independent reviewer, document qualifications, define authority, and establish measurable performance expectations. The safeguards protect the company, the team, and the friendship.

DOJ’s Evaluation of Corporate Compliance Programs (ECCP) asks whether organizations use risk-based processes: “Does the company deploy its compliance resources in a risk-based manner, with greater scrutiny applied to greater areas of risk?”; train people for their responsibilities, “targeted training sessions to enable employees to timely identify and raise issues to appropriate compliance, internal audit, or other risk management functions”; and finally apply discipline consistently, “Does the compliance function monitor its investigations and resulting discipline to ensure consistency?” Those questions matter at twenty employees as well as twenty thousand. Informality can be proportionate. It cannot be indistinguishable from favoritism.

Investor Influence Becomes a Conflict

KJPR’s most significant governance failure arises when Keeley begins a romantic relationship with Jack Danvers, the venture capitalist whose firm funds KJPR. Their relationship begins in “Signs” and becomes public inside the office in “The Strings That Bind Us” (Season 3, Episode 7). The central issue is not the relationship itself. It is the power structure around it. Jack influences the capital supporting KJPR and has access to its leadership and board. Keeley’s personal relationship is therefore inseparable from financing, employment stability, reputation, and strategic control.

A functioning conflicts process would require disclosure to disinterested board members, recusal from relevant funding and compensation decisions, independent review, anti-retaliation protections, and a plan for managing the relationship’s end. The organization would also need to consider whether gifts and public displays create obligations or perceptions of influence. KJPR appears to have no independent mechanism for doing any of this. The conflict remains personal until its consequences become corporate.

A Privacy Crisis Reveals Whose Reputation Matters

In “We’ll Never Have Paris” (Season 3, Episode 8), an intimate video Keeley previously sent to Jamie is leaked online. Jack’s lawyers prepare a public statement in which Keeley would apologize for making the video. Keeley refuses. Her refusal is an ethical decision. The statement would shift responsibility from the people who stole and distributed private material to the person whose privacy was violated. It would protect investor reputation by requiring the victim to accept blame.

An effective incident response would center Keeley’s safety and agency while preserving evidence, identifying the source and scope of the breach, assessing legal duties, seeking removal of the material, coordinating communications, and reviewing data security practices. It would also determine what the company knows, who decides, and when the board receives information.

Capital Concentration Threatens Independence

The conflict reaches its predictable conclusion in “International Break” (Season 3, Episode 10). Jack’s board withdraws KJPR’s funding, the office is dismantled, and Keeley learns that the firm will close within two days. She is the founder, but she is the last person meaningfully informed. This is third-party and concentration risk. KJPR depends on one financial sponsor whose governance rights, exit powers, and personal connections could end the business. DOJ’s ECCP asks whether companies understand the business rationale and risks of third-party relationships, use appropriate contractual controls, and monitor those relationships over time.

For a founder, due diligence must run both ways. Before accepting capital, leaders should understand board control, reserved powers, termination rights, communication duties, reputation expectations, data ownership, dispute mechanisms, and contingency funding. A capitalization table is also a control map. Rebecca ultimately offers financing, and Barbara leaves Jack’s organization to rebuild alongside Keeley. The outcome is hopeful, but the governance lesson remains. Replacement capital should not recreate the same dependency under a more trusted name. Friendship does not eliminate conflicts. It makes clear documentation more important.

Independence Does Not Mean Isolation

By “So Long, Farewell” (Season 3, Episode 12), Keeley has rebuilt the firm with Barbara and presents Rebecca with a proposal for an AFC Richmond women’s team. Her final act is not a return to the security of working for someone else. It is the launch of a new strategic opportunity grounded in purpose, partnership, and a broader vision for Richmond. Keeley also refuses to let Roy and Jamie reduce her future to a choice between them. She defines her professional and personal direction herself.

The strongest version of independence is not freedom from investors, colleagues, boards, or controls. It is the ability to make principled decisions within governance that protects the organization from dependency, favoritism, coercion, and the founder’s own blind spots.

Questions for CCOs

Keeley’s journey should prompt five questions:

  1. Are governance, compliance, and control responsibilities growing as quickly as the business?
  2. Do hiring and promotion processes manage friendship, affinity, and founder bias?
  3. Can a genuinely independent decision-maker review conflicts involving investors, directors, or founders?
  4. Does the incident-response plan protect affected people while addressing legal, technical, and reputational risk?
  5. Could the loss of one investor, client, platform, or vendor threaten the organization’s survival?

The Richmond Way

Across five character studies, AFC Richmond gives compliance professionals a complete operating model. Ted shows that culture begins with trust and psychological safety. Rebecca shows that power requires independent oversight. Nate shows that promotion can create culture risk. Roy shows that middle managers make standards real. Keeley shows that growth must be matched by governance.

The connecting principle is effectiveness. DOJ, COSO, Caremark, and the Sentencing Guidelines all point to organizations beyond statements of intent. Leaders must design systems, empower people, monitor behavior, respond to warning signs, remediate failures, and test whether improvements work.

Belief can start a culture. Accountability sustains it.

Categories
Blog

Ted Lasso Week: Part 2 – Rebecca Welton: Misuse of Authority, Conflicts of Interest, and the Path to Accountability

Season 4 of Ted Lasso is out. Matt Kelly reposted a blog he wrote during the original run of the series, and he and I did a deeper dive into the show and its popularity for compliance professionals in an episode of Compliance into the Weeds. I decided to take a deep dive into five characters from the show and use them to explore compliance topics. Over five blog posts, I will consider Manager Ted Lasso, Assistant Manager Nate Shelley, player and later coach Roy Kent, and social media influencer Keeley Jones. Today in Part 2, we consider compliance lessons through the character of team owner Rebecca Welton.

In Part 1, we considered how Ted Lasso built psychological safety and an ethical culture while sometimes allowing empathy to outrun accountability. Rebecca Welton presents the problem from the other side of the executive table. She begins as the source of AFC Richmond’s misconduct, then becomes the leader best positioned to acknowledge it.

Rebecca’s story is not simply a redemption arc. It is a governance case study about what happens when personal objectives capture corporate authority. It also shows why confession, forgiveness, and improved behavior are necessary but insufficient elements of an effective remediation program. The compliance lesson is direct: power creates risk when no independent mechanism can question the person exercising it.

When the Owner Becomes the Risk

In “Pilot” (Season 1, Episode 1), Rebecca hires Ted, an American football coach with no soccer experience, to manage a Premier League club. Her stated rationale is irrelevant because her actual purpose is to destroy the institution Rupert Mannion loves. She uses Richmond’s people, reputation, competitive position, and financial value to pursue a private grievance.

That is a classic conflict between personal interest and organizational duty. Rebecca is not accepting an envelope of cash or steering a contract to a relative. Her conflict is more fundamental: she has converted corporate decision-making into an instrument of revenge. The COSO Internal Control Framework begins with the control environment, including integrity, ethical values, oversight, authority, and accountability. At Richmond, the control environment fails at the top. The owner sets an improper objective, possesses the authority to execute it, and faces no visible independent challenge.

Compliance officers should take note. Conflicts of interest do not end with disclosure forms. They arise whenever personal relationships, status, resentment, financial incentives, or outside interests can distort business judgment. The greater the executive’s authority, the stronger the required safeguards.

Concentrated Authority Silences Challenge

Rebecca’s plan requires assistance. Higgins facilitates her agenda even though he recognizes the harm. In “Make Rebecca Great Again” (Season 1, Episode 7), Rebecca arranges for a photographer to capture Ted and Keeley in a compromising image. The objective is not legitimate media strategy. It is manufactured reputational damage intended to destabilize Ted and the club.

Higgins is not merely an unfortunate bystander. He is a senior employee who allows access, information, and organizational machinery to serve the owner’s improper purpose. His eventual resignation is a delayed act of conscience, but the episode demonstrates how authority can corrupt the escalation process. Employees may know that conduct is wrong and still conclude that challenging the owner is futile or career-ending.

The DOJ Evaluation of Corporate Compliance Programs asks whether “compliance personnel (1) sufficient qualifications, seniority, and stature (both actual and perceived) within the organization; (2) sufficient resources, namely, staff to undertake the requisite auditing, documentation, and analysis effectively; and (3) sufficient autonomy from management, such as direct access to the board of directors or the board’s audit committee.” It also asks whether managers encourage or discourage compliance through their conduct. Richmond has no credible independent function capable of reviewing Rebecca’s decisions, investigating her conduct, or escalating around her.

Accountability Begins With Truth

Keeley becomes the effective speak-up channel Richmond lacks. Once she discovers Rebecca’s scheme, she does not accept friendship, hierarchy, or reputational risk as reasons to stay silent. She insists that Rebecca tell Ted the truth. Rebecca finally does so in “All Apologies” (Season 1, Episode 9). She admits that she hired Ted to fail, orchestrated the paparazzi scheme, and engineered Jamie Tartt’s return to Manchester City to weaken Richmond. Most importantly, she does not minimize her purpose. She explains that she wanted to hurt Rupert and used Ted and the club to do it.

This is an effective apology because it identifies conduct, intent, and harm. It also accepts the possibility of consequences. Yet it is not a remediation. Nevertheless, Ted forgives her immediately, but an actual organization could not stop there. The U.S. Sentencing Guidelines require an organization to respond appropriately after misconduct and take reasonable steps to prevent similar conduct. DOJ asks whether the company performed a root-cause analysis, disciplined responsible individuals, repaired controls, and tested whether remediation works.

Richmond would need an independent review of affected personnel decisions, financial consequences, sponsor and stakeholder impacts, the use of confidential information, and Higgins’s role. It would also need governance changes that prevent one executive from repeating the conduct. An apology can reopen trust. Only remediation can reduce recurrence risk.

The Conflict Problem Returns With Sam

Rebecca’s growth does not eliminate conflicts. In “The Signal” and “Headspace” (Season 2, Episodes 6 and 7), Rebecca discovers that her anonymous Bantr match is Sam Obisanya, a Richmond player. Their relationship develops in “Man City” (Season 2, Episode 8) and continues secretly into “No Weddings and a Funeral” (Season 2, Episode 10).

The relationship is portrayed with warmth and mutual affection. That does not resolve the organizational issue. Rebecca owns the club that controls Sam’s employment environment. Her decisions can affect contracts, playing resources, sponsorships, reputation, and career opportunities. Even if she never exercises that power improperly, the imbalance creates an appearance of favoritism and raises questions about consent, retaliation, confidentiality, and recusal.

The compliance response is not moral judgment. It is a process. A conflict policy must apply to owners and senior executives, not only employees. Disclosure should go to an independent board member or committee. The organization should document safeguards, remove the conflicted leader from relevant decisions, protect the less powerful party, and monitor for retaliation or preferential treatment. Rebecca eventually pauses the relationship, but Richmond never appears to activate a formal conflict-management process. Personal restraint is not a control.

From Personal Ownership to Stewardship

Rebecca’s leadership changes when she stops treating Richmond as property and begins treating it as an institution held in trust for others. In “Do the Right-est Thing” (Season 2, Episode 3), Sam protests sponsor Dubai Air because of its connection to environmental damage in Nigeria. Rebecca backs the players despite the commercial risk. She recognizes that sponsorship revenue does not outrank organizational values.

Her transformation is clearest in “International Break” (Season 3, Episode 10). Edwin Akufo invites elite club owners to join an exclusive league built around scarcity, control, and profit. Rebecca rejects the proposal by reminding the room that football belongs to the people whose lives and communities give it meaning. She chooses stakeholder legitimacy over a lucrative insiders’ arrangement.

In “So Long, Farewell” (Season 3, Episode 12), she completes that shift by selling 49 percent of Richmond to its supporters. The woman who once used the club as a weapon ultimately distributes part of its ownership to the community.

This is what ethical remediation should seek: not a return to the status quo, but a more accountable operating model.

Questions for CCOs

Rebecca’s journey should prompt five questions:

  1. Can an allegation against the CEO, founder, controlling shareholder, or board chair bypass that person and reach an independent decision-maker?
  2. Do conflict rules cover personal relationships, vendettas, reputational motives, and executive discretion, or only financial interests?
  3. When senior misconduct occurs, who controls the investigation, discipline, disclosure, and remediation plan?
  4. Does the board receive reliable information about culture and mission-critical risks without management filtering?
  5. Are remediation measures tested, documented, and sustained after the responsible leader apologizes?
  6. Rebecca Welton shows that leaders can change. Compliance must make that change governable. Trust is rebuilt when truth is followed by independent review, proportional accountability, control improvements, and evidence that the organization learned.

Next Up: Nate Shelley and Culture Risk

Rebecca’s failure begins with power concentrated at the top. Nate Shelley’s failure develops lower in the organization, where insecurity, humiliation, status, and unaddressed resentment turn a once-overlooked employee into a destructive manager and trusted insider. In Part 3, we will examine the warning signs Richmond missed, the consequences of promoting technical talent without preparing them to lead, and why a speak-up culture must detect harm committed by newly empowered employees as readily as misconduct committed by executives.

Categories
Blog

Ted Lasso Week: Part 1 – Ted Lasso: Ethical Leadership, Psychological Safety, and the Limits of Good Intentions

Season 4 of Ted Lasso has begun dropping (a new episode releases each Wednesday). Matt Kelly reposted a blog he wrote during the original run of the series, and he and I did a deeper dive into the show and its popularity for compliance professionals in an episode of Compliance into the Weeds. I decided to take a deep dive into five characters from the show and use them to explore compliance topics. Over the next 5 blog posts, I will consider team owner Rebecca Welton, Assistant Manager Nate Shelley, player and later coach Roy Kent, and social media influencer Keeley Jones. Today in Part 1, we begin with compliance lessons through the character of Ted Lasso.

Ted Lasso arrives at AFC Richmond with no meaningful knowledge of English football, a skeptical locker room, a hostile press, and an owner who secretly hired him to fail. On paper, he is an obvious control failure. In practice, he becomes the architect of Richmond’s cultural transformation.

For compliance professionals, that transformation is the point. Ted demonstrates how a leader can create trust, encourage candor, and turn values into daily behavior. He also demonstrates the limits of values-led leadership. Good intentions do not investigate misconduct. Empathy does not test a control. Forgiveness does not remediate a root cause.

The compliance lesson from Ted is not simply to “believe.” It is to build a culture in which accountability, information, controls, and oversight support belief.

Culture Is What the Leader Does

Ted’s first contribution is not tactical. It is behavioral. He learns names, asks questions, listens to people with little formal authority, and treats the kit man, Nate Shelley, as a colleague whose observations matter. In “Trent Crimm: The Independent” (Season 1, Episode 3), Ted recognizes that Jamie Tartt and other players are humiliating Nate. Rather than deliver a speech about respect and move on, Ted engages Roy Kent, the informal leader whose intervention can change locker-room conduct.

That is tone at the top connected to conduct in the middle. The DOJ Evaluation of Corporate Compliance Programs (ECCP) asks how senior leaders and managers have encouraged compliance through their words and actions. It states in part, “Beyond compliance structures, policies, and procedures, it is important for a company to create and foster a culture of ethics and compliance with the law at all levels of the company. The effectiveness of a compliance program requires a high-level commitment by company leadership to implement a culture of compliance from the middle and the top.”

The Principles of Federal Prosecution of Business Organizations (Justice Manual) likewise directs prosecutors to examine culture at all levels, including discipline, treatment of complaints, and incentives. 9.28.300 states in part that prosecutors shall consider “the pervasiveness of wrongdoing within the corporation, including the complicity in, or the condoning of, the wrongdoing by individuals in corporate management”. In Section 9-28.800, it directs the DOJ to review a “company’s culture of compliance”.

Ted understands instinctively that culture does not travel through posters. It travels through managers, peer leaders, everyday decisions, and the behavior an organization tolerates. A chief compliance officer can publish a code. Only operational leaders can make that code real during the meeting, on the sales call, and inside the locker room.

Psychological Safety Requires a Response System

Ted creates space for people to speak before they have status. He accepts tactical input from Nate, invites dissent from Coach Beard, and builds the Diamond Dogs as an informal forum for candid discussion. By “La Locker Room Aux Folles” (Season 3, Episode 9), Richmond can confront Colin Hughes’s sexuality and Isaac McAdoo’s reaction with empathy. Ted initially hears the team’s claim that Colin’s identity makes no difference, then corrects the underlying message: the team should care because Colin’s experience matters.

This is psychological safety in practice. Employees must be able to raise a concern, disclose vulnerability, or challenge a decision without humiliation or retaliation. Yet a compliance program needs more than an approachable leader. Equally importantly, a culture of Speak Up must be paired with a culture of Listen Up.

Richmond relies heavily on Ted’s availability and temperament. That is a strength while Ted is present and a key-person risk when he is absent. A mature speak-up program requires intake standards, anti-retaliation controls, escalation criteria, case tracking, trend analysis, and board reporting. An open door is valuable. It is not an operating system.

Accountability Must Apply to Stars and Friends

Ted’s strongest accountability moment comes in “Tan Lines” (Season 1, Episode 5), when he benches Jamie after the star player refuses to follow the team’s approach. Ted chooses collective standards over short-term performance. That is exactly the decision many organizations avoid when the employee at issue is a top salesperson, rainmaker, founder, or executive.

He is less decisive when loyalty clouds his judgment. In “All Apologies” (Season 1, Episode 9), Beard and Nate press Ted to confront Roy’s declining performance. Ted initially resists, even though the competitive risk is visible. He eventually has the necessary conversation and gives Roy a dignified path to support the team from the bench.

The contrast matters. DOJ asks whether discipline is applied consistently and whether the company tolerates misconduct by high performers. Compliance credibility collapses when consequences depend on revenue, rank, or personal affection. Ethical leadership is not the absence of hard decisions. It is the willingness to make them fair and explain the standard.

Forgiveness Is Not Remediation

Rebecca’s confession in “All Apologies” presents Ted’s greatest strength and clearest compliance blind spot. She admits that she hired him to fail, manipulated club decisions, and used people as instruments in her campaign against Rupert. Ted forgives her immediately.

At a human level, the scene is powerful. At an organizational level, forgiveness cannot close the matter. Richmond would still need to establish what happened, preserve evidence, identify affected decisions, assess financial and stakeholder harm, determine whether others participated, evaluate disclosure obligations, and strengthen governance.

The US Sentencing Guidelines require organizations to respond appropriately after misconduct and take steps to prevent recurrence. DOJ similarly focuses on root-cause analysis, remediation, and whether control improvements are tested. Ted offers grace, which can support rehabilitation. He does not create a record showing that the organization learned from the failure.

This distinction should matter to every CCO: mercy concerns the person; remediation concerns the institution. A company may do both. It cannot substitute one for the other.

Vulnerability Can Strengthen the Control Environment

Ted’s panic attacks show the cost of a culture in which even a supportive leader believes he must appear invulnerable. His attack during karaoke in “Make Rebecca Great Again” (Season 1, Episode 7) remains largely private. In “Headspace” and “Man City” (Season 2, Episodes 7 and 8), he finally engages with Dr. Sharon Fieldstone and begins addressing the trauma connected to his father’s suicide. After Nate leaks his panic attack to the press, Ted speaks honestly to the team and the public in “Inverting the Pyramid of Success” (Season 2, Episode 12).

Leaders retain legitimate medical privacy. The compliance point is not compelled disclosure. Organizations need trusted support channels, succession and contingency plans, and an environment where asking for help is not treated as weakness. Ted’s eventual candor reduces stigma. His earlier concealment creates an information vacuum that Nate weaponizes.

Within the COSO Internal Control Framework, Ted materially improves the control environment and information and communication. Richmond’s weakness is monitoring. Warning signs involving Nate, including humiliation of subordinates, resentment, and escalating hostility, do not reach a reliable response process before he leaks Ted’s health information and leaves for West Ham.

The Final Test Is Whether Culture Outlasts the Leader

By Season 3, Ted increasingly shifts from hero to system builder. “Sunflowers” and “The Strings That Bind Us” (Season 3, Episodes 6 and 7) show Richmond developing Total Football through shared learning, role flexibility, and trust. In “So Long, Farewell” (Season 3, Episode 12), Ted leaves, but Roy, Beard, Rebecca, Higgins, and the players can carry the culture forward.

That is the institutional test. A compliance program that depends on one charismatic executive is not sustainable. Caremark oversight principles require boards to make a good-faith effort to establish and monitor information and reporting systems, particularly around mission-critical risks, as the Delaware Supreme Court emphasized in Marchand v. Barnhill (the Bluebell Ice Cream case). Ted changes Richmond’s values. Governance must ensure that those values become repeatable processes, reliable information, and accountable decisions.

Practical Takeaways for CCOs 

Ted Lasso offers five questions for a CCO and compliance team:

  1. Do employees trust leaders, and can the organization demonstrate that concerns receive a consistent response?
  2. Are high performers held to the same behavioral standards as everyone else?
  3. When misconduct occurs, does forgiveness follow investigation and remediation rather than replace them?
  4. Are managers trained and monitored as culture carriers, especially after promotion?
  5. Would the speak-up culture and compliance program remain effective if a trusted leader departed tomorrow?

Ted’s enduring lesson is that ethical culture begins with human connection. Effective compliance begins there as well, but it cannot end there. Richmond becomes stronger when curiosity replaces judgment, candor replaces silence, and team standards replace individual entitlement. The next step for any real organization is to convert those behaviors into controls that can be tested, monitored, reported, and sustained.

Join us tomorrow in Part 2, as we turn to Rebecca Welton, whose decision to use AFC Richmond as an instrument of personal revenge reveals the risks created when concentrated authority operates without independent challenge. We will examine executive conflicts, institutional remediation, and Rebecca’s transformation from conflicted owner to accountable steward by requiring governance that can hold power to account.

Categories
Sunday Book Review

Sunday Book Review: August 16, 2026, The New Books On Leadership Edition

In the Sunday Book Review, Tom Fox considers books that would interest compliance professionals, business executives, or anyone curious about the subject. It could be books about business, compliance, history, leadership, current events, or any other topic that might interest Tom. In this episode, we look at 4 new leadership books.

  1. Leadership Intelligence by Caroline Webb
  2. Humble Power by Ethan Willis
  3. Work Life Remix by Ronnie Dickerson Stewart
  4. Deluge Before Dawn by Tom Fox
Categories
Trekking Through Compliance

Trekking Through Compliance: Episode 75 – Keeping the Crew Safe: Leadership Lessons from “The Way to Eden”

Few Star Trek episodes illustrate the complexity of leadership in the face of ideological fervor as vividly as “The Way to Eden.” In this story, the Enterprise encounters a group of spacefaring counterculture idealists led by Dr. Sevrin, a brilliant but unstable scientist. The trouble? Sevrin is a carrier of a deadly bacterium, and his quest puts both his followers and the Enterprise crew at risk. Captain Kirk, Spock, and McCoy must navigate a delicate balance, respecting personal freedoms while ensuring the safety of all. From this episode, compliance leaders can draw five practical lessons.

Lesson 1: Understand the Motivations Behind Risky Behavior

Illustrated by: Sevrin’s followers are not acting out of malice; a utopian vision of freedom from the constraints of modern society drives them.

Compliance Lesson. Employees and business units may engage in risky practices not because they want to harm the company, but because they believe their approach is better, faster, or more in line with their values.

Lesson 2: Clear Boundaries Protect Everyone

Illustrated by: Kirk’s role as captain means protecting the entire crew, not just indulging a vocal subgroup.

Compliance Lesson. Leaders must sometimes be the ones to say “no,” even in the face of enthusiasm or pressure from influential stakeholders. Boundaries, whether in anti-bribery rules, safety procedures, or cybersecurity protocols, exist to protect the organization as a whole.

Lesson 3: Engagement Is More Effective Than Suppression

Illustrated by: Spock earns the respect of Sevrin’s group by listening without judgment and showing genuine curiosity about their beliefs.

Compliance Lesson. By engaging respectfully, leaders can open channels for dialogue, uncover hidden risks, and sometimes win buy-in for compliance initiatives.

Lesson 4: The Allure of Shortcuts Can Blind People to Risks

Illustrated by: When Sevrin’s followers find the planet, they quickly discover that the vegetation is saturated with toxins, and stepping barefoot on the grass leads to deadly consequences.

Compliance Lesson. In business, “Eden” often takes the form of shortcuts, overseas markets with lax regulations, unvetted third parties who promise quick results, or aggressive accounting practices.

Lesson 5: Leadership Means Balancing Compassion with Accountability

Illustrated by: Accountability comes not from punishment, but from ensuring that survivors face the consequences of their decisions and understand the lessons learned.

Compliance Leadership Parallel: Leaders must respond to compliance breaches with a balance of firmness and empathy. Compliance leadership means leaving people’s dignity intact while making it clear that rules matter.

Final Thoughts

The Way to Eden is often remembered as a quirky Star Trek episode, with its counterculture overtones and space-hippie soundtrack. But beneath the surface, it’s a leadership case study: how to guide a diverse, passionate, and sometimes rebellious set of stakeholders toward a safe and sustainable outcome.

Compliance leaders face their own “Sevrins” and “Edens” every day, compelling visions that, if left unchecked, can lead to disaster. The key is to listen, understand, set boundaries, and lead with both compassion and resolve. In the end, leadership in compliance is not about keeping people from chasing their Eden; rather, it is about making sure they survive the journey.

Resources:

⁠⁠Excruciatingly Detailed Plot Summary by Eric W. Weisstein⁠⁠

⁠⁠MissionLogPodcast.com⁠⁠

⁠⁠Memory Alpha

Categories
Blog

Compliance Leadership Lessons from Star Trek’s The Way to Eden

In compliance, leadership is not just about setting the tone at the top. It is about guiding an organization through competing values, disruptive influences, and well-intentioned but potentially dangerous shortcuts.

Few Star Trek episodes illustrate the complexity of leadership in the face of ideological fervor as vividly as “The Way to Eden.” In this story, the Enterprise encounters a group of spacefaring counterculture idealists led by Dr. Sevrin, a brilliant but unstable scientist. Sevrin and his followers reject modern technology and societal norms, seeking a mythical, untouched planet called “Eden” where they can live in what they believe will be pure harmony.

The trouble? Sevrin is a carrier of a deadly bacterium, and his quest puts both his followers and the Enterprise crew at risk. Captain Kirk, Spock, and McCoy must navigate a delicate balance, respecting personal freedoms while ensuring the safety of all. From this episode, compliance leaders can draw five practical lessons.

Lesson 1: Understand the Motivations Behind Risky Behavior

Illustrated by: Sevrin’s followers are not acting out of malice; a utopian vision of freedom from the constraints of modern society drives them. However, their rejection of medical science and safety protocols blinds them to the dangers they bring aboard the Enterprise.

Compliance Lesson. Employees and business units may engage in risky practices not because they want to harm the company, but because they believe their approach is better, faster, or more in line with their values. Leaders who dismiss these motivations outright risk alienating people whose energy could be channeled constructively. By understanding the drivers of noncompliance, leaders can redirect passion into safe, compliant channels.

What should you do?

  • Take time to understand why individuals resist compliance requirements.
  • Acknowledge the values behind dissent, even when you cannot endorse the methods.
  • Look for ways to align personal motivations with organizational ethics and risk frameworks.

Lesson 2: Clear Boundaries Protect Everyone

Illustrated by: Despite Sevrin’s charisma, Kirk sets firm boundaries: the Enterprise cannot simply abandon its mission to pursue Eden, and Sevrin’s health status requires quarantine protocols. Kirk’s role as captain means protecting the entire crew, not just indulging a vocal subgroup.

Compliance Lesson. Leaders must sometimes be the ones to say “no,” even in the face of enthusiasm or pressure from influential stakeholders. Boundaries, whether in anti-bribery rules, safety procedures, or cybersecurity protocols, exist to protect the organization as a whole. Ethical leadership means knowing when flexibility is possible and when it would endanger the mission.

What should you do?

  • Communicate non-negotiable compliance requirements clearly and early.
  • Ensure all employees understand the rationale behind safety and regulatory protocols.
  • Stand firm when those boundaries are tested, even by high performers or senior leaders.

Lesson 3: Engagement Is More Effective Than Suppression

Illustrated by: Spock earns the respect of Sevrin’s group by listening without judgment and showing genuine curiosity about their beliefs. This rapport allows him to act as a bridge between the group and the Enterprise command staff, even though he ultimately disagrees with their methods.

Compliance Lesson. Dismissing dissenters as “problem employees” without engagement can deepen resistance. By engaging respectfully, leaders can open channels for dialogue, uncover hidden risks, and sometimes win buy-in for compliance initiatives. Effective compliance leadership values dialogue as a tool for both education and intelligence gathering.

What should you do?

  • Listen actively to dissenting voices.
  • Avoid treating all opposition as insubordination. Sometimes it is a signal of deeper organizational issues.
  • Use engagement to build trust, even when consensus is not possible.

Lesson 4: The Allure of Shortcuts Can Blind People to Risks

Illustrated by: When Sevrin’s followers find the planet, which they believe to be Eden, it initially appears beautiful and untouched. However, they quickly discover that the vegetation is saturated with toxins, and stepping barefoot on the grass leads to deadly consequences.

Compliance Lesson. In business, “Eden” often takes the form of shortcuts, overseas markets with lax regulations, unvetted third parties who promise quick results, or aggressive accounting practices. These may look enticing at first, but the hidden risks can be fatal to the organization. Part of a compliance leader’s role is to demystify shortcuts and reveal the full risk landscape.

What should you do?

  • Teach employees to perform due diligence before pursuing new opportunities.
  • Make risk assessments an integral part of strategic decision-making.
  • Share examples of past corporate failures caused by seemingly “perfect” opportunities.

Lesson 5: Leadership Means Balancing Compassion with Accountability

Illustrated by: After the Eden disaster, Sevrin dies, but his followers are spared. Kirk and Spock treat the survivors with compassion, offering them care and safe passage, even though their actions had endangered the crew. Accountability comes not from punishment but from ensuring that survivors face the consequences of their decisions and understand the lessons learned.

Compliance Leadership Parallel: Leaders must respond to compliance breaches with a balance of firmness and empathy. Punishment without compassion can breed resentment; compassion without accountability can encourage repeat behavior. Compliance leadership means leaving people’s dignity intact while making it clear that rules matter.

What should you do?

  • Address violations swiftly and fairly.
  • Provide education and corrective measures alongside disciplinary actions.
  • Use breaches as teaching moments for the broader organization.

Why “The Way to Eden” Matters for Compliance Leaders

The episode is a study in balancing values: freedom and safety, individuality and collective responsibility, and compassion and firmness. Kirk, Spock, and McCoy each play a part: Kirk as the boundary-setter, Spock as the bridge-builder, and McCoy as the voice of science and evidence.

In a corporate setting, compliance leaders often find themselves in all three roles at once. They must:

  • Understand and respect differing viewpoints (Spock).
  • Set and enforce boundaries that protect the organization (Kirk).
  • Ground decisions in objective facts and regulations (McCoy).

When done well, this approach strengthens the organization’s ethical culture and reduces the likelihood of costly risk events.

Final Thought

The Way to Eden is often remembered as a quirky Star Trek episode, with its counterculture overtones and space-hippie soundtrack. But beneath the surface, it’s a leadership case study: how to guide a diverse, passionate, and sometimes rebellious set of stakeholders toward a safe and sustainable outcome.

Compliance leaders face their own “Sevrins” and “Edens” every day, compelling visions that, if left unchecked, can lead to disaster. The key is to listen, understand, set boundaries, and lead with both compassion and resolve. In the end, leadership in compliance is not about keeping people from chasing their Eden; rather, it is about making sure they survive the journey.

Resources:

⁠⁠Excruciatingly Detailed Plot Summary by Eric W. Weisstein⁠⁠

⁠⁠MissionLogPodcast.com⁠⁠

⁠⁠Memory Alpha

Categories
Trekking Through Compliance

Trekking Through Compliance: Episode 74 – Power, Secrecy, and Responsibility: Ethical Lessons from Requiem for Methuselah

In corporate life, ethical decision-making is not only a question of right and wrong. It is also a test of leadership, trust, and long-term vision. Ethical missteps erode corporate culture, destroy reputations, and invite regulatory and shareholder scrutiny.

Few Star Trek episodes present an ethical crucible as layered as Requiem for Methuselah. The story unfolds into a complex web of secrecy, autonomy, manipulation, and unintended consequences, a rich territory for ethical reflection. From this episode, we can draw five business ethics lessons directly applicable to today’s corporate compliance environment.

Lesson 1: Transparency Is Essential to Trust

Illustrated by: Flint initially hides critical facts from Kirk, Spock, and McCoy about his true identity. His secrecy stems from a desire to control the situation, but it breeds mistrust and escalating tension.

Ethics Lesson. Stakeholders, whether employees, customers, or regulators, expect honesty. Concealing facts creates suspicion, damages credibility, and can lead to decisions made on false assumptions.

Lesson 2: Autonomy Must Be Respected, Even with Good Intentions

Illustrated by Flint, Rayna was designed to be his companion, controlling her environment and limiting her exposure to the outside world.

Ethics Lesson. Corporations sometimes restrict employee autonomy under the guise of protection, micromanaging, withholding career opportunities, or blocking external engagement. Ethical leadership means equipping people to act responsibly, not controlling every move they make.

Lesson 3: Ends Do Not Justify the Means

Illustrated by: To achieve his goal, Flint manipulates the Enterprise crew, withholds the cure they need until his conditions are met, and engineers circumstances to force emotional outcomes for Rayna.

Ethics Lesson. Compromising ethics for results can cause long-term damage far outweighing the immediate gain.

Lesson 4: Emotional Intelligence Is Critical in Ethical Decision-Making

Illustrated by: Kirk fails to foresee that forcing Rayna to choose between him and Kirk will overwhelm her, leading to her breakdown.

Ethics Lesson. Leaders may overlook red flags, delay action, or make decisions based on personal feelings rather than principles. Ethical clarity often requires stepping back and separating personal attachment from professional responsibility.

Lesson 5: Ethical Leadership Includes Considering Long-Term Impact

Illustrated by: Flint’s immortality has given him a unique long view of history, but in this episode, he fails to account for the long-term consequences of his actions toward Rayna and the Enterprise crew.

Ethics Lesson. Businesses that focus solely on short-term gains, without assessing long-term impacts, risk harming their reputation, eroding stakeholder trust, and creating systemic problems. Ethical leaders anticipate not just the next quarter, but the next decade.

Final ComplianceLog Reflections

Requiem for Methuselah is ultimately a cautionary tale about the cost of ethical missteps, even for someone with the wisdom of centuries. Flint’s intellect and resources could not compensate for a failure to act with transparency, respect, and foresight.

For today’s corporate leaders, the lesson is simple: ethical decision-making is not a luxury—it is the foundation of sustainable success. The compliance function’s role is to embed these values so deeply into the corporate DNA that they guide every choice, from the boardroom to the front line.

Resources:

⁠⁠Excruciatingly Detailed Plot Summary by Eric W. Weisstein⁠⁠

⁠⁠MissionLogPodcast.com⁠⁠

⁠⁠Memory Alpha