Companies can fail to assess risks properly. Employees can fail to assess the risks of their own individual actions.
Addressing risks is good for business. In addition to robust processes, a broad range of social and psychological approaches is required to reduce risks and improve regulatory compliance. Approaches that encourage good conduct include placing emphasis on the:
- Visibility and magnitude of the deterrent
- Likelihood of detection
- Clarity of an individual’s specific responsibilities as opposed to situations where there is unclear or defused accountability
- Nature of individual penalties rather than corporate sanctions
- Virtue of virtue and, removing the option to rationalise mis-conduct as being for the benefit of others
Ensuring what people see, hear and experience each day normalises good conduct and ensuring that incentives are aligned to encourage this further strengthens the compliance environment.