Categories
Innovation in Compliance

Innovation in Compliance – The Strategic Evolution of Compliance: Insights from Angie McPhail

Innovation comes in many forms, and compliance professionals need not only to be ready for it but also to embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom Fox welcomes Angie McPhail to discuss the transformation of compliance from a regulatory function to a strategic business imperative.

Angie shares her professional background, having led the Integrity and Compliance group for the Americas at Juniper Networks before its acquisition by HPE. Key discussions include the evolving role of compliance as a strategic influencer within organizations, the intersection of ethics and integrity with ESG, and the importance of trust in building effective compliance programs. Angie emphasizes the need for compliance professionals to understand business strategy, leverage technology, and build trust to drive sustainable growth. The talk also covers the future outlook for compliance leaders and provides advice on preparing the next generation of compliance professionals.

Key highlights:

  • Compliance as a Strategic Business Function
  • Influence and Trust in Compliance
  • Compliance as a Driver of Business Success
  • Managing Reputational Risk
  • Future of Compliance Leadership

Resources:

Angie McPhail on LinkedIn

Innovation in Compliance was recently ranked 4th among Risk Management podcasts by 1,000,000 Podcasts.

Categories
31 Days to More Effective Compliance Programs

31 Days to a More Effective Compliance Program: Day 10 – Leadership’s Role in Shaping Corporate Culture and Compliance

Welcome to 31 Days to a More Effective Compliance Program. Over this 31-day series in January 2026, Tom Fox will post a key component of a best-practice compliance program each day. By the end of January, you will have enough information to create, design, or enhance a compliance program. Each podcast will be short, at 6-8 minutes, with three key takeaways that you can implement at little or no cost to help update your compliance program. I hope you will join each day in January for this exploration of best practices in compliance. In today’s episode, Day 10, we dive into the critical role of senior management in fostering a strong corporate culture of compliance.

Key highlights:

  • The Importance of Corporate Culture
  • DOJ’s Expectations for Senior Management
  • Five Factors for Effective Leadership

Resources:

Listeners to this podcast can receive a 20% discount on The Compliance Handbook, 6th edition, by clicking here.

Categories
Blog

Michigan Man, Part 4 – Lessons Learned: What This Crisis Teaches Compliance Professionals

Every major compliance failure eventually reaches the same destination: a moment when leadership says, “How did we not see this coming? ” The answer is almost always the same. The warning signs were visible. They were rationalized, minimized, or overridden in the name of performance, continuity, or institutional pride.

The Sherrone Moore crisis at the University of Michigan is not a college football anomaly. It is a case study in how compliance programs fail when they are structurally subordinated, culturally discounted, or selectively enforced. For compliance professionals, the value of this case lies not in outrage but in extraction: extracting lessons that can be operationalized before the next crisis unfolds.

Lesson 1: Compliance Authority Must Be Structural, Not Aspirational

Michigan’s experience demonstrates that access to leadership is meaningless without authority. The compliance function may have been consulted, investigations commissioned, and policies in place. None of that mattered when the athletic department retained de facto control over outcomes. For compliance professionals, the lesson is clear. Compliance must have defined escalation rights and veto authority over high-risk decisions, including promotions, discipline, and crisis response. If a business unit can override compliance based on performance or legacy, compliance is not independent. It is decorative.

The Department of Justice has repeatedly emphasized that effective compliance programs require empowered compliance functions. That empowerment must be written into governance documents, reinforced by boards, and tested in practice.

Lesson 2: Past Dishonesty Is a Permanent Risk Factor

One of the most glaring failures in this case was the organization’s willingness to treat Moore’s prior dishonesty during the sign-stealing investigation as a closed chapter. It was not. It was predictive. Compliance professionals must internalize a hard truth: once credibility is damaged, it does not reset. Individuals who have lied to investigators, deleted records, or misrepresented facts should never again be treated as presumptively reliable. Enhanced monitoring, corroboration, and scrutiny are not punitive. They are risk management.

Organizations that ignore this lesson inevitably relearn it at a higher cost.

Lesson 3: Promotions Are Compliance Decisions

The elevation of Moore to head coach was framed as a football decision. In reality, it was one of the most consequential compliance decisions the university made.

Any promotion into a role with significant authority, visibility, and discretion is a compliance event. Risk-based due diligence should include:

  • Review of prior investigations and disciplinary history
  • Assessment of truthfulness and cooperation during past inquiries
  • Evaluation of behavioral and reputational risk, not just technical violations

In corporate terms, Michigan promoted an executive with unresolved compliance issues and a clear lack of an ethical grounding into a CEO-equivalent role. That decision alone dramatically increased institutional risk. But the consequences will reverberate for a long time to come.

Lesson 4: Investigations Involving Power Imbalances Require Heightened Standards

The initial investigation into Moore’s relationship with a staffer failed predictably. When both parties denied the relationship and the evidence was limited, the inquiry stalled. That outcome reflects a misunderstanding of power dynamics. Compliance professionals know that power imbalance distorts disclosure. Subordinates may deny relationships out of fear, loyalty, or uncertainty. Senior leaders may deny wrongdoing out of self-preservation. Effective investigations account for this reality by expanding evidence collection, conducting pattern analysis, and implementing interim safeguards.

Neutrality is not passivity. When allegations involve senior leadership, the standard of diligence must rise, not fall.

Lesson 5: Star Performers Are the Highest-Risk Population

One of the most enduring myths in organizational life is that high performers deserve flexibility. In reality, they deserve even greater scrutiny. Star performers operate with autonomy, influence culture, and often shape informal norms. Moore’s trajectory illustrates how repeated exceptions create a sense of entitlement. Each time misconduct is reframed as survivable, the individual learns that boundaries are negotiable. Compliance professionals must relentlessly resist this dynamic.

Rules applied selectively are not rules. They are invitations.

Lesson 6: Pattern Risk Demands Pattern Response

Perhaps the most damning aspect of the Michigan case is that it unfolded amid repeated scandals within the athletic department. When misconduct clusters, the correct response is not incremental fixes. It is a structural intervention. Compliance professionals must recognize pattern risk early and escalate it aggressively. That escalation should include:

  • Enterprise-wide risk assessments
  • Cultural diagnostics
  • Leadership accountability reviews
  • Board-level engagement

Waiting for the next incident is not caution. It is abdication.

Lesson 7: Culture Is Set by What Leadership Tolerates

Michigan’s long-standing deference to athletic success and legacy culture created an environment where misconduct was rationalized rather than confronted. This is not unique to sports. It appears in sales-driven organizations, founder-led companies, and high-growth environments. Culture is not what leadership says. It is what leadership allows. From the Board of Regents to the UM President on down, compliance professionals must evaluate actions, not rhetoric, when assessing culture risk.

Lesson 8: Human Impact Is the Ultimate Compliance Metric

It is easy, especially for lawyers and compliance officers, to focus on policy breaches and enforcement exposure. The Moore crisis is a reminder that compliance failures produce human harm. Families are destabilized. Employees feel unsafe. Stakeholders lose trust. Effective compliance programs exist not only to prevent fines but also to prevent damage. When that purpose is forgotten, compliance becomes performative.

Final Thought: Compliance Is Tested at the Top

The Sherrone Moore crisis did not originate with a junior employee. It originated at the top of a powerful institution. That is where compliance programs are always tested. For compliance professionals, the final lesson is this: if your program cannot stop, slow, or surface misconduct by your most powerful leaders, it will eventually fail when it matters most.

The University of Michigan now faces years of rebuilding trust, governance, and credibility. Compliance professionals elsewhere should treat this case as a warning, not a curiosity. The cost of ignoring these lessons is never hypothetical. It is only deferred. This takeaway is stark but actionable. Compliance failures are rarely a surprise. They are choices made over time. The question for every compliance professional is whether those choices will be challenged early or explained later.

As always, prevention is less visible than a crisis. It is also far less costly.

Resources:

The Terrible Mess at Michigan Football, by Jason Gay, writing in the Wall Street Journal.

Ex-Michigan coach Sherrone Moore charged with home invasion, stalking, breaking—Austin Meek and Sam Jane writing in The Athletic.

Fire Everybody—Alex Kirshner, writing in Slate.

Source: Michigan begins a review of the athletic department, by Dan Wetzel and Pete Thamel, writing for ESPN.

Categories
FCPA Compliance Report

FCPA Compliance Report – Navigating Uncertainty: Leading with Courage and Clarity with Jim Massey

Welcome to the award-winning FCPA Compliance Report, the longest-running podcast in compliance. In this episode, Tom welcomes Jim Massey, who has recently released a new book, Risk in Action.

Jim Massey, an accomplished author and behaviorist practitioner, delves into the intricate dynamics of trust within leadership through his book “Risk in Action.” Drawing from his extensive experience in high-stakes boardrooms and executive sessions, Massey emphasizes the crucial role of trust as a foundation for effective action. He explores the interconnected nature of trust, risk, and fear, urging individuals to redefine risk as a prioritization tool that enables progress and bold decision-making. By addressing these themes, Massey aims to spark vital conversations and empower leaders to embrace uncertainty, ultimately encouraging them to take courageous actions that drive growth and innovation.

Key highlights:

  • Navigating Trust, Risk, and Fear in Leadership
  • Enhancing Business Outcomes through Proactive Risk Management
  • Cultivating Innovation Through Compliance Transformation
  • Embracing Fear for Innovative Growth
  • Dynamic Risk Assessment for Compliance Agility
  • Navigating Uncertainty: Leading with Courage and Clarity

Resources:

Risk in Action on Amazon

Jim Massey Website

Jim Massey on LinkedIn

Eastward.ai Website

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn

Categories
Blog

Risk in Action: What Jim Massey Teaches Us About Crossing the Gap

Corporate leaders love to talk about innovation, transformation, and building the future. Yet most organizations still get stuck in the same place: standing at the edge of a decision, staring into the unknown, and doing nothing. At that moment, the hesitation between where we are and where we need to go is the space Jim Massey calls the gap. And in Risk in Action, Massey makes a compelling argument that how leaders approach this gap will define not only their relevance but also their ability to lead in today’s fast-moving environment.

For the corporate compliance professional, this book is more than leadership philosophy. It is a practical guide for making disciplined, values-driven choices under uncertainty. It is also a call to rethink how our organizations confront risk, how we enable decision-making, and how we build systems that do more than slow the business down.

Risk as the Distance Between Now and Next

Early in the book, Massey reframes a concept that compliance professionals often treat as static. Risk, he argues, is not a heat map, a mitigation plan, or a quarterly review. Risk is the distance between where you are and where you want to be. Trust is the bridge. Fear is the fog that makes the crossing difficult (see Chapter 2). That deceptively simple framing is powerful. It exposes why so many organizations fall into oscillation: they mistake movement for progress. More meetings. More decks. More analysis. And yet nothing moves.

We tell ourselves we are being prudent, disciplined, or thorough when in reality we are waiting for fear to subside. Massey does not dismiss the importance of analysis. Instead, he asks leaders to confront their own reflexive relationship with risk. Whether the risk is regulatory, strategic, environmental, or reputational, the greater danger is not action; it is inaction. The world moves quickly. Competitors accelerate. Expectations shift. Standing still is its own risk, and often the most significant one.

Face, Frame, Forward: The Anatomy of Real Decision-Making

The central model in the book—Face, Frame, Forward—offers a decision-making cadence that leaders can apply daily. As Massey describes, the greatest failures he has seen in organizations did not come from a bad decision but from delaying a necessary one. His model helps break that paralysis.

Face

Facing risk begins with naming the truth in front of you. Not the sanitized version. The real version. What is the risk that keeps you up at night? What is the organizational behavior you keep tolerating? What is the emerging external pressure that is already reshaping your strategic environment? (see Chapter 4).  Massey’s point is blunt: You cannot frame a risk you refuse to see, and you cannot move forward from a place of ambiguity.

Frame

Framing is about meaning-making. Two companies can experience the same regulatory change, market disruption, or technology shift and respond in completely different ways. Why? Because they frame its significance differently (see Chapter 5). Framing is where compliance officers have enormous influence. We help leaders see regulatory shifts as more than check-the-box obligations. We help boards see cultural issues as more than HR noise. We help executives understand that ESG risks are strategic risks and that reputational risks are governance risks. Impact matters, yes. But meaning drives action.

Forward

Forward is where clarity becomes motion. Not recklessness. Not speed for speed’s sake. But disciplined, intentional, values-aligned action. Massey writes that the fog does not lift before we move. It lifts because we move (Chapter 6). That insight is especially relevant for compliance professionals. We often wait for the perfect policy, perfect data, or perfect operating plan. Yet most risks today evolve faster than our systems can process. The future belongs to organizations that move forward with clarity, not certainty.

Risk, Trust, and Fear: The Three-Dimensional Model of Leadership

What makes Risk in Action uniquely valuable for compliance professionals is Massey’s integration of risk, trust, and fear. These forces, he argues, are always active, competing, overlapping, and shaping our choices (see Chapter 7). Compliance professionals know this intuitively. A team hesitates to escalate a concern—not because they lack information, but because fear is louder than trust. A business unit drags its feet on a remediation plan—not because the fix is complicated, but because the risk feels abstract. A board over-rotates to control, not because of a regulatory requirement, but because fear has dominated the discussion.

Massey identifies three essential questions every leader must answer:

  1. Can we? (capability)
  2. Do we care? (intent and connection)
  3. Will we do it? (commitment)

These three elements—Can, Care, Do—form the building blocks of trust (see Chapter 8). And trust, in turn, is what enables movement across the risk gap.

FearFULL Leadership: Why Pretending to Be Fearless Does Not Work

One of the book’s most compelling contributions is Massey’s challenge to the myth of fearlessness. Leaders spend too much time trying to appear unshakable. In reality, fear shows up silently, through overcontrol, indecision, or relentless perfectionism. Massey argues for something more honest: becoming fearFULL, not devoid of fear, but full of awareness, reflection, and intention (see Chapter 9). FearFULL leaders admit the truth early. They ask the hard questions. They name the tension. And by doing so, they create a sense of psychological safety for others.

For compliance professionals, this matters enormously. Transparency, escalation, and ethical decision-making cannot coexist with unacknowledged fear. Leaders who cannot name their own fear cannot build environments where employees feel safe speaking up.

The Compliance Connection: Why This Book Matters for Our Profession

At its core, Risk in Action is about building systems and cultures where leaders face reality with honesty, interpret risks with clarity, and move with purpose. That is the very heart of compliance work. Massey critiques the old model of compliance as the organizational brake pedal. The modern compliance function must instead help the business navigate uncertainty, not out of fear, but with disciplined confidence (see Chapter 1).

Compliance does not eliminate risk. Compliance enables the organization to move forward intelligently. Risk in Action reinforces several truths compliance professionals have long understood:

  • Controls without comprehension fail.
  • Strategy without alignment stalls.
  • Culture without clarity decays.
  • And risk without action accumulates.

What Massey offers is a leadership model that makes movement possible again.

Five Key Takeaways for the Compliance Professional

  1. Risk is not a barrier. Risk is the path forward.
  2. Treating risk purely as something to avoid limits innovation and weakens relevance. Compliance must help leaders see risk as the space where opportunity lives.
  3. Face, Frame, Forward is a practical tool for enabling action.
  4. Name the risk clearly, interpret it through values and strategy, and move forward with intention. Avoid the organizational trap of oscillation.
  5. Trust is operational. Fear is real. And both shape risk decisions.
  6. Compliance programs must build systems that reinforce capability, connection, and commitment—because without trust, no risk model works.
  7. FearFULL leadership produces better compliance outcomes.
  8. Pretending to be fearless creates silence. Acknowledging fear creates honesty. Leaders who name fear make it safer for others to speak up early.
  9. Compliance must evolve from protectors to navigators.
  10. The speed of today’s risks demands a forward-looking, strategy-aligned compliance function. Your role is not to slow the business down; your role is to move it wisely.

Perhaps the most interesting overall concept posited by Massey is one I learned from John Lee Dumas from his interview in the award-winning podcast series, Looking Back on 9/11. On 9/11, Dumas was a college senior in ROTC, and that night, he knew he was going to war. As a 21-year-old Lieutenant, he led a 40-man tank crew in the invasion of Iraq. I asked him what he learned from his Army experience. He instantly responded, “Make a Decision.” He added that you never have perfect information, so you have to take what you have, synthesize it, and act on it. Massey makes clear that compliance leadership requires action.

Categories
Daily Compliance News

Daily Compliance News: November 11, 2025, The Veteran’s Day Edition

Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance brings to you compliance related stories to start your day. Sit back, enjoy a cup of morning coffee and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership or general interest for the compliance professional.

  • Investigation into corruption in the Ukrainian energy sector. (Reuters)
  • Ex-Glencore staff all pleaded not guilty. (Bloomberg)
  • Transforming conflict into growth. (Forbes)
  • Pitch rigging in baseball brings indictments. (ESPN)

The Daily Compliance News has been honored as the No. 2 in Best Regulatory Compliance Podcastscategory.

Categories
Blog

From Good to Great Governance: How Aspiring Directors Can Master the Art of Board Leadership

Exceptional boards do not happen by accident. They are the result of disciplined, emotionally intelligent, and strategically minded leadership —the kind that transforms oversight from a duty into an engine of organizational performance.

For anyone seeking a seat at the board table, the message from PwC in their Harvard Law School Forum on Corporate Governance article Effective Board Leadership: The Art of Doing It Well and the Risks of Getting It Wrong could not be clearer: you are not applying for a title;  instead, you are accepting a stewardship. Board leadership is about building trust, balancing competing priorities, and guiding organizations through uncertainty with integrity and foresight.

Today, I want to explore what aspiring board leaders can learn from PwC’s insights and how you can start cultivating the mindset and behaviors that distinguish a “good” director from a transformative one.

The Leadership Mindset: From Governance to Guidance

A company’s long-term health depends as much on its board as on its CEO. In a world of activist investors, digital disruption, and ESG scrutiny, the boardroom is no longer a ceremonial space. It’s where strategy, risk, and purpose intersect, and that intersection demands leaders who are curious, decisive, and adaptable. Board leaders, whether they are chairs, lead directors, or committee heads, do not lead by authority. They lead by influence. They unite peers, challenge management constructively, and maintain independence while working together with executives to deliver sustainable value.

For those preparing to join a board, it is important to understand early that governance is not about “watching management.” It’s about partnering with management to ensure that the organization not only complies but thrives. The most successful board leaders approach oversight like coaches, not referees, creating the conditions where CEOs and directors alike can perform at their best.

Emotional Intelligence Is a Strategic Advantage

PwC’s research emphasizes a trait too often overlooked in governance: emotional intelligence (EQ). Great board leaders cultivate psychological safety, encourage diverse viewpoints, and model humility. They admit when they do not know something. Aspiring directors should take note. Technical expertise, such as in finance, law, or operations, may get you into the boardroom. But EQ keeps you there. The best chairs and lead directors are skilled listeners who can defuse conflict, mediate divergent views, and maintain composure under pressure.

In practice, that means building trust one conversation at a time. It’s asking the right questions without posturing, pushing back without condescension, and fostering a tone of curiosity over certainty. When you can balance empathy with accountability, you create what PwC calls a “high-functioning relationship” between the board and CEO, one where issues are addressed early, tensions are managed constructively, and decisions are made with confidence.

Strategic Foresight: Thinking Beyond the Quarter

Boards exist to safeguard long-term value creation. Yet too many still fall into the trap of quarterly thinking, consumed by immediate performance metrics rather than strategic trajectory. Exceptional board leadership requires foresight: setting agendas that focus on the future, integrating strategy into CEO evaluation and succession planning, and regularly revisiting assumptions about risk and opportunity.

For future board members, this means you should always be thinking beyond compliance. During your candidacy, articulate how your experience contributes to forward-looking oversight. Can you connect market trends to strategic implications? Can you help a board think differently about innovation, sustainability, or geopolitical risk? Directors who elevate the conversation from “what happened” to “what’s next” are the ones who stand out and make a difference.

The Discipline of Continuous Improvement

The PwC framework underscores a powerful truth: even great boards can stagnate. Effective leadership is not static; it must evolve with the organization, industry, and stakeholder landscape. That’s why outstanding boards embrace structured self-assessment and external evaluation. They seek feedback not as a formality but as a growth mechanism. PwC’s data reveals that while 59% of directors believe their leadership manages board assessments well, only 34% think their leaders effectively address underperforming directors. That gap is where complacency grows.

For those aspiring to join boards, this insight is gold. It means that the best directors are learners, not lecturers. They reflect on their own blind spots, solicit feedback, and model a growth mindset. As a future board leader, consider developing a personal feedback practice now, whether through executive coaching, peer mentorship, or 360° reviews. Self-awareness today is preparation for stewardship tomorrow.

Balancing Oversight and Partnership

Every new director eventually faces a defining moment when the line between governance and management blurs. Do you step in or step back? The authors remind us that great board leadership maintains clarity of role. Directors exist to guide, not to manage. The best board chairs coordinate with the CEO regularly but avoid micromanaging execution. They set thoughtful agendas, focus discussions on outcomes, and intervene only when governance or ethics are at stake.

For those aiming for the boardroom, influence comes from credibility and restraint. You’ll need to learn when to question, when to support, and when to challenge, all while preserving trust. The art of board leadership lies in that balance; firm yet fair, supportive yet independent.

Building and Refreshing the Board Itself

A strong board is not just a collection of impressive resumes. It is a living organism that must evolve with the company’s mission. Outstanding board leaders take ownership of composition and succession. They identify skills gaps, coach underperformers, and bring in fresh perspectives to maintain energy and relevance. They also plan their own exits. PwC suggests that leadership roles should peak within five years and refresh within eight to ten years. This timeframe should allow enough time to build mastery without stagnating new ideas. Aspiring directors should see this as an invitation, not a warning. Governance needs renewal, and you may be the fresh perspective a board needs. Bring both humility and courage to that opportunity.

Navigating Stakeholders and Reputation Risk

Today’s directors must be diplomats as much as strategists. Shareholders, employees, regulators, activists, and the public all expect transparency and accountability. PwC highlights that effective board leaders help define who matters most, coordinate messaging with management, and ensure the board’s voice aligns with corporate purpose. They understand that trust is not a given but rather is earned through credibility, communication, and consistency. If you are pursuing a board role, develop your own credibility now. Contribute thoughtfully in your industry, write, speak, and mentor. Build a reputation for substance over self-promotion. Boards increasingly seek directors who can represent them confidently in complex stakeholder environments.

When Leadership Fails — And How to Fix It

Even the best boards occasionally lose their rhythm. Groupthink sets in. The CEO relationship frays. Performance lags. PwC’s guidance here is pragmatic: act early. Use governance processes such as evaluations, nominating committees, and role clarifications to diagnose and correct the course before a crisis strikes. For future board members, this means understanding that courage is part of the job. You must be willing to speak uncomfortable truths, advocate for leadership transitions, and uphold the board’s fiduciary duty even when it is personally difficult. As one seasoned chair told PwC researchers, “An ounce of prevention is worth a pound of cure.” Effective directors prevent dysfunction through vigilance, not intervention after the fact.

The Final Lesson: Leadership as Legacy

At its core, Effective Board Leadership offers a simple but profound insight: governance is leadership at its highest level. It is about service over status, stewardship over self-interest, and purpose over politics. For those aspiring to board roles, the path forward is clear. Cultivate emotional intelligence, strategic foresight, and moral courage. Learn to listen as well as lead. And above all, remember that the board’s greatest power lies not in authority but in example.

Because great governance, like great leadership, is never accidental. It’s intentional, exacting, and indispensable.

Categories
Blog

Courageous Leadership in an Era of Disruption: Compliance Lessons from Brené Brown

The New York Times (NYT) recently published an interview with Brené Brown, best known for her TEDx Talk on “The Power of Vulnerability.”  Her TEDx Talk focused on individuals. Brown is now using those concepts as a basis for work in the corporate world. Many of the concepts she discussed in this interview directly apply to a Chief Compliance Officer (CCO) and corporate compliance function. In this article, I will summarize the key themes of Brown’s discussion and draw out five critical lessons for compliance professionals navigating today’s turbulent environment.

The world of corporate compliance does not exist in a vacuum. Every day, compliance professionals work within organizations facing extraordinary pressures: disruptive technologies, geopolitical instability, shifting marketplaces, and evolving workforce expectations. Against this backdrop, Brené Brown, renowned researcher on shame, vulnerability, and courage, has turned her attention to leadership in corporate, nonprofit, and even military contexts. Her latest reflections provide timely insights not just for executives, but for compliance professionals tasked with guiding organizations through uncertainty.

Brown’s message is clear: in moments of disruption, the quality of leadership matters more than ever. She challenges us to think about courage, vulnerability, and clarity not as “soft skills,” but as the very foundation of sustainable organizational performance. For the compliance professional, her work resonates deeply. After all, compliance is fundamentally about behavior, how people act under pressure, how they respond to risk, and how organizations foster cultures of accountability and trust.

The Pace of Change and the Trap of Fear

Brown describes today’s business climate as a “supercycle” of unprecedented change. Artificial intelligence, geopolitical instability, and economic volatility create a sense of scarcity, a nagging feeling that organizations lack sufficient time, resources, or talent to keep up. For compliance leaders, this context should feel familiar. When regulations shift overnight or enforcement priorities change, fear and reactive decision-making often follow.

Brown cautions against “action over impact,” where leaders rush to act without pausing to assess whether their actions are aligned with strategy. For compliance, this is the difference between a carefully calibrated monitoring program and a scattershot set of controls that look good on paper but fail in practice. Strategic urgency, not blind urgency, must guide the compliance function.

Courage, Accountability, and Human Leadership

At the heart of Brown’s research is the idea that courage, not technical expertise alone, is the limiting factor in organizational performance. Across industries, she found leaders struggling to have hard conversations, to hold others accountable, and to resist blame and shame.

For compliance, this insight hits home. We have all seen organizations where misconduct festers because leaders fear confrontation, or where accountability is deflected onto “bad apples” instead of being addressed systemically. Brown reminds us that courage means leaning into discomfort, whether that’s delivering difficult feedback, shutting down toxic behavior, or confronting senior leaders when ethical lines are at risk of being crossed.

Communication as a Compliance Tool

Brown describes good communication as rooted in clarity, discipline, and accountability. It requires vulnerability, honesty, and a willingness to tolerate discomfort. In her words, “A brave life is basically 15 hard conversations a day.” Compliance professionals should take note. Too often, compliance messages are dulled by legal jargon or buried in training modules that merely check the box without creating a genuine understanding. Effective compliance communication is not about volume, but clarity — stating expectations plainly, reinforcing them consistently, and holding both leaders and employees accountable when those expectations are not met.

When compliance officers avoid difficult conversations, whether with business leaders, employees, or regulators, they fail in their role as stewards of integrity.

Generational Shifts and the “Why” Question

Another theme Brown highlights is the growing demand from younger generations to understand the “why” behind organizational decisions. Gen Z, in particular, tends to resist following orders blindly. They ask questions, challenge assumptions, and expect transparency.

For compliance, this is an opportunity, not a threat. When employees ask “why,” they create space for dialogue about risk, ethics, and accountability. If handled well, these conversations can strengthen the compliance culture. If dismissed or ignored, however, they can morph into conflict and disengagement. Compliance professionals must equip themselves and their organizations with the skills to turn task conflict into innovation, rather than emotional conflict that fractures teams.

The Decline of Fear-Based Leadership

Brown pushes back against the notion that fear-driven leadership, exemplified by mass layoffs or authoritarian management, produces sustainable performance. Fear may yield quick results, but its shelf life is short. To maintain fear as a motivator, leaders must repeatedly demonstrate cruelty, which corrodes trust and drives talent away.

Compliance programs grounded in fear face the same limitation. Employees may comply out of fear of punishment in the short term, but over time, they disengage, seek ways to evade controls, or leave the organization entirely. Sustainable compliance requires trust, fairness, and accountability, not periodic shows of cruelty.

Five Key Takeaways for the Compliance Professional

1. Strategic Urgency Over Panic

In times of disruption, resist “chicken with your head cut off” urgency. Compliance programs must prioritize thoughtful, strategic action over quick fixes that create the illusion of progress without real impact.

2. Courage as the Compliance Differentiator

Having hard conversations, holding people accountable, and confronting uncomfortable truths are the core of both leadership and compliance. Technical expertise matters, but courage drives results.

3. Communication Builds Trust

Effective compliance communication requires clarity, discipline, and accountability. Don’t hide behind jargon or check-the-box training. Say what needs to be said, even when it’s uncomfortable.

4. Harness the Power of ‘Why’

Younger employees demand transparency and reasoning. Use this as a lever to build stronger compliance cultures. Equip leaders to turn questions into opportunities for education, engagement, and innovation.

5. Reject Fear-Based Models

Fear is a short-term motivator with long-term costs. Compliance programs grounded in trust, fairness, and respect will outperform those that rely on punishment and intimidation.

Compliance Lessons in Courage

Brené Brown’s reflections on leadership are not abstract musings. They speak directly to the challenges compliance professionals face in guiding organizations through uncertainty, disruption, and cultural change. At its core, compliance is about shaping behavior and building cultures of integrity. That work requires courage, clarity, and compassion, which are precisely the traits Brown identifies as the hallmarks of effective leadership.

As we look ahead to the next wave of regulatory change, technological disruption, and workforce transformation, compliance officers must resist the temptation to react out of fear. Instead, we must embrace courageous leadership that aligns action with impact, values clarity over noise, and treats people with humanity even in moments of adversity.

Brown’s work reminds us that compliance is not just about preventing wrongdoing; it is also about promoting ethical behavior. It is about cultivating courage and clarity in organizations so that, when disruption hits, leaders and employees alike know how to “settle the ball,” take a breath, and make the right play.

Categories
Blog

Speed as a Compliance Decision: Lessons from Amazon’s Andy Jassy

When Andy Jassy succeeded Jeff Bezos as CEO of Amazon in 2021, many questioned whether the company could maintain its legendary momentum. Four years later, Jassy has not only sustained but also accelerated growth, adding more than $230 billion in revenue, expanding AI initiatives, and reinventing the management culture of one of the world’s most complex enterprises. That is why I was intrigued by an article in the Harvard Business Review (HBR) entitled, Speed Is a Leadership Decision,” where reporter Adi Ignatius interviewed Andy Jassy.

For compliance professionals, Jassy’s insights about speed, risk, culture, and innovation offer timely lessons. Too often, compliance leaders fall back on the excuse that “we’re too big, too regulated, too constrained to move quickly.” Jassy flips that script: speed, he insists, is a leadership decision. And the same is true for compliance.

Today, we look at five key lessons compliance professionals can draw from Jassy’s leadership playbook.

1. Speed Is a Leadership Decision

Jassy bluntly states that “speed disproportionately matters in every business at every time”. He challenges leaders to stop accepting bureaucracy and regulation as excuses. Instead, leaders must actively identify and remove barriers, empowering teams to act with urgency.

For compliance professionals, the lesson is clear: do not let the weight of regulations, policies, or oversight structures become a drag on effectiveness. Yes, compliance requires controls, documentation, and approvals, but speed is also important. Think of third-party due diligence reviews, hotline triage, or incident investigations. When compliance moves slowly, it signals indifference or ineffectiveness, and risks fester.

The decision to prioritize speed, backed by streamlined processes, real-time monitoring, and empowered teams, can transform compliance from a bureaucratic bottleneck into a proactive partner to the business.

2. Risk-Taking and Failure Are Essential to Innovation

Jassy observes that as companies grow, they tend to become risk-averse. Achievement-oriented professionals “play not to lose” rather than take chances. He emphasizes that the only way to build something truly unique is to take risks, make mistakes, and learn from them. Compliance teams face this challenge daily. The instinct is to avoid risk entirely, to say “no” rather than take a chance. But compliance innovation, whether adopting AI for monitoring, piloting new training formats, or embedding compliance into business processes, requires taking calculated risks. This means that risk management strategies must be implemented, monitored, and updated as necessary.

Failure in compliance is not about missing a regulatory requirement. It is about learning that a new process does not resonate with employees, or a monitoring tool generates too many false positives. Leaders should create safe zones for experimentation. If you never fail, you are not pushing hard enough. Compliance innovation must be iterative, and tolerance for small, recoverable failures is the price of true progress.

3. Flattening Bureaucracy Fuels Accountability

Jassy highlights Amazon’s initiative to flatten its organization and empower individual contributors. By increasing the ratio of builders to managers, reducing layers of decision-making, and encouraging employees to own “two-way-door decisions”. Those are choices that can easily be reversed. With this strategy, Amazon streamlined processes and accelerated innovation.

Compliance functions are often drowning in pre-meetings and approval chains. A compliance officer identifies a risk, drafts a recommendation, and waits while three levels of committees review it. Meanwhile, the risk festers. The compliance profession should adopt Jassy’s model: empower frontline employees to make two-way decisions in real-time. For example, a compliance manager in Brazil should have the authority to pause a suspicious vendor engagement without waiting for headquarters. Flattening decision-making structures creates accountability, agility, and credibility. Compliance must be a builder’s mindset: see the problem, fix the problem, move forward.

4. Culture Must Be Reinvented Continuously

“Culture is not our birthright,” Jassy warns. As companies scale, their culture stretches and must be deliberately reinforced. At Amazon, this means reasserting ownership, accountability, and a customer-centric approach, even as new layers of management emerge. For compliance professionals, this is a powerful reminder: culture is not static. A “speak-up” culture may flourish in year one and decay by year five if it isn’t nurtured. New geographies, acquisitions, and technologies stretch corporate culture in unpredictable ways.

The compliance function must continuously assess cultural health: are employees still raising concerns? Do managers still model ethical behavior? Are incentive structures still aligned with compliance values? A strong compliance culture requires constant reinvention: new training, new channels, new metrics; so that employees see it as living and evolving, not stale or perfunctory.

5. AI, Innovation, and Responsibility Must Go Hand in Hand

Jassy views AI as the biggest transformation since the internet, with the power to reinvent every customer experience. He emphasizes that progress is inevitable, so leaders must focus on using AI responsibly and productively.

Compliance professionals face the same dual imperative. On the one hand, AI tools, such as automated transaction monitoring, predictive analytics, and natural language chatbots, can make compliance faster, smarter, and more effective. On the other hand, AI introduces new risks, including bias, opacity, privacy breaches, and increased regulatory scrutiny.

The compliance leader’s role is not to resist AI but to guide its responsible adoption. Establish AI governance frameworks. Ensure transparency and explainability. Audit data inputs and outputs. Partner with business units to embed compliance guardrails into AI development. If compliance can keep pace with AI’s speed while safeguarding ethics, it will become indispensable to the business.

Compliance at the Speed of Leadership

Andy Jassy’s mantra, “speed is a leadership decision,” rings true far beyond Amazon. For compliance professionals, it reframes the mission. Compliance does not require slow responses, being bureaucratic, or being risk-averse. (Always remember, you do not have brakes on a car to drive slowly; instead, you have brakes on a car to drive fast.) Leaders can choose speed by empowering their teams, flattening the decision-making process, fostering a culture of ownership, tolerating smart failures, and embracing technology responsibly.

The stakes are high. Compliance must move at the same speed as the business, not the other way around. Regulators expect swift detection and remediation. Employees expect rapid answers to ethics and compliance questions. Boards expect real-time risk visibility. Compliance that lags will be seen as irrelevant or ineffective.

The lesson from Amazon’s Jassy is that compliance speed is not about cutting corners. It is about clarity of leadership, empowerment of people, and continuous cultural reinvention. In an era of accelerating technology and mounting risk, compliance professionals must embrace speed as a core leadership choice.

Categories
12 O’Clock High-a podcast on business leadership

12 O’Clock High: Navigating Life’s Challenges: A Journey from Military Service to Mental Health Advocacy with Nick Padlo

12 O’Clock High, an award-winning podcast on business leadership, brings together stories from history, the arts, sports, movies, research, and current events to consider leadership lessons. In this episode, Tom Fox speaks with Nick Padlo, a mental health advocate and Founder and CEO of Sophros Recovery, about his diverse professional journey.

Growing up in Jacksonville, Florida, Padlo attended West Point and served in the U.S. Army, during which he witnessed significant combat. Post-military, he attended business school at Stanford and founded a pet cremation business. He also shares his struggles with alcohol and substance abuse and his path to recovery, touching on the leadership lessons he learned from the military, the importance of asking for help, and how he integrates his experiences to aid others through ROS Recovery. The discussion includes building resilience, empathy, and trust within a team, family involvement in recovery, and advice for business leaders facing personal and professional challenges.

Key highlights:

  • Nick Padlo’s Military Background
  • Transition to Civilian Life and Business Ventures
  • Personal Struggles and Path to Recovery
  • Leadership Lessons from the Military
  • Hitting Rock Bottom and Seeking Help
  • Incorporating Experiences into ROS Recovery
  • Building Resilience, Trust, and Empathy
  • Family’s Role in Recovery
  • Advice for Business Leaders

Resources:

Follow Nick Padlo on LinkedIn

Check out Sophros Recovery Website

Visit and follow Sophros Recovery on:

Facebook

LinkedIn

Instagram 

Tom Fox

Instagram

Facebook

YouTube

Twitter

LinkedIn