09.01.2015 Views

The LRN ethics and compliance risk management practices report

The LRN ethics and compliance risk management practices report

The LRN ethics and compliance risk management practices report

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>The</strong> <strong>LRN</strong> Ethics <strong>and</strong> Compliance Maturity Model<br />

<strong>The</strong> preceding discussion provided a high-level view on adopting best <strong>practices</strong> across the<br />

entire <strong>ethics</strong> <strong>and</strong> <strong>compliance</strong> <strong>risk</strong> <strong>management</strong> cycle, but more importantly, how to begin the<br />

transition to becoming a self-governing enterprise. <strong>LRN</strong> has developed a far more detailed<br />

roadmap that spells out a four-phase program to mature a company’s <strong>ethics</strong> <strong>and</strong> <strong>compliance</strong><br />

process, moving it step by step towards a values-based corporate culture.<br />

This model recognizes that companies pass through stages on the way to <strong>ethics</strong> <strong>and</strong><br />

<strong>compliance</strong> maturity. <strong>The</strong> model is thus based upon a progression from <strong>compliance</strong> to<br />

<strong>ethics</strong> divided into four segments or levels, each of which is characterized by numerous<br />

common <strong>practices</strong> <strong>and</strong> activities. While at the first two levels, companies focus on mastering<br />

<strong>compliance</strong>, as follows:<br />

• Little c companies – <strong>The</strong>se companies are just getting started on the journey; their focus<br />

is on implementing the basics of sound <strong>compliance</strong> program to ensure regulatory <strong>and</strong><br />

legal <strong>compliance</strong>.<br />

• Big C companies – <strong>The</strong>se companies have been able to implement full-fledged<br />

<strong>compliance</strong> programs <strong>and</strong> high visibility initiatives within the organization.<br />

Next, ethically-sensitive companies are those that are ready <strong>and</strong> willing to invest the energy<br />

<strong>and</strong> commitment to go beyond the <strong>compliance</strong> phase, implementing numerous steps that<br />

focus on embedding ethical values <strong>and</strong> principles into company policies <strong>and</strong> the workforce.<br />

• Little e companies – <strong>The</strong>se companies have highly evolved <strong>compliance</strong> capabilities that<br />

drive adherence to corporate policies <strong>and</strong> rules as a means towards managing <strong>risk</strong>.<br />

• Big E companies – <strong>The</strong>se companies have leadership that recognizes that rules can only<br />

do so much; they move toward fostering an ethical culture as the best prescription for<br />

enduring success. <strong>The</strong>y make the highest commitment to a “do it right” philosophy that<br />

bolsters a self-governing culture. <strong>The</strong>y view <strong>ethics</strong> <strong>and</strong> <strong>compliance</strong> as part of an overarching<br />

business strategy to drive company performance.<br />

<strong>The</strong> chart in Figure 1 offers a brief description of the four maturity phases <strong>and</strong> their<br />

distinguishing characteristics of the <strong>ethics</strong> <strong>and</strong> <strong>compliance</strong> program.<br />

<strong>LRN</strong> Market Maturity Model – A New Perspective<br />

Figure 1<br />

<strong>The</strong> transition from a little c to a Big E company requires many building blocks: executive<br />

sponsorship, oversight, education, <strong>and</strong> well established policies. <strong>The</strong> maturation of the<br />

<strong>ethics</strong> <strong>and</strong> <strong>compliance</strong> program is accompanied by increasing sophistication in its program<br />

activities. As the companies mature, they typically exp<strong>and</strong> their <strong>ethics</strong> <strong>and</strong> <strong>compliance</strong><br />

<strong>LRN</strong> | 2008 Ethics <strong>and</strong> Compliance Risk Management Practices Report | 42

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!