Tone at the Top.
The top of the organization must actively encourage a compliant culture through out the organization. Managers and employees at all levels must be aware of the executive expectation to discourage pure profit over compliance with laws and regulations. Within a business organization, compliance begins with the board of directors and senior executives setting the proper tone for the rest of the company. Managers and employees take their cues from their leaders. Thus, DOJ and SEC consider the commitment of the leaders to a “culture of compliance” and look to see if there is a commitment at the highest levels. The commitment to compliance must also be reinforced and implemented by middle managers and employees at all levels of a business.
Explicit and Implicit.
A well-designed compliance program that is not enforced in good faith, such as when corporate management explicitly or implicitly encourages employees to engage in misconduct to achieve business objectives, will be ineffective. DOJ and SEC have often encountered companies with compliance programs that are strong on paper but nevertheless have significant FCPA violations because management has failed to effectively implement the program even in the face of obvious signs of corruption. This may be the result of aggressive sales staff preventing compliance personnel from doing their jobs effectively and of senior management, more concerned with securing a valuable business opportunity than enforcing a culture of compliance, siding with the sales team. The higher the financial stakes of the transaction, the greater the temptation for management to choose profit over compliance.
Trickle Down Integrity.
A strong ethical culture directly supports a strong compliance program. By adhering to ethical standards, senior managers will inspire middle managers to reinforce those standards. Compliant middle managers, in turn, will encourage employees to strive to attain those standards throughout the organizational structure.
Lead by Example.
In short, compliance with the FCPA and ethical rules must start at the top. DOJ and SEC thus evaluate whether senior management has clearly articulated company standards, communicated them in unambiguous terms, adhered to them scrupulously, and disseminated them throughout the organization.