Your Quick Guide To Managing Ethics & Compliance

Recipe for success


Consider this: have you ever found yourself in a situation where you had to choose from a multitude of recipes, all seemingly similar? How would you decide (assuming the reviews are comparable)? Now, imagine these recipes come with a price tag, each one significantly different from the other. Which one would you choose? Something affordable, mid-range, or high-end? Your budget might dictate your decision, but what if you have some discretionary spending?

This recipe problem is the experience of many people I work with.

Yesterday, for example, I spoke to a company seeking investment to expand and acquire projects in new markets. As a condition of the investment, they must enhance their risk management framework (environmental, social, integrity). My role (supporting investors and investees) is to assess risks, identify gaps in the existing framework, and develop a rightsized and realistic action plan.

On the call, we discussed a bunch of things, including:

👉 How to risk-rank third-parties (including major contractors).

👉 How to monitor fraud risk exposure.

👉 How to set up a low-cost whistleblower system.

👉 How to triage issues (sample image below).

👉 How (not) to investigate said issues.

The senior leaders – experienced and having previously worked internationally with reputable multinational renewable firms – knew what the end product should look like but not which recipe to choose. They could go to market and look for recipes (law firms, advisors, even freelancers). But how do they choose the recipe most likely to secure their desired outcome?


For those of you working in-house in risk-mature firms, can you help your key suppliers, partners, investees, etc.? How? By creating a toolkit with simple guides and resources on familiar topics (like those above). Sharing is caring.

If that’s not feasible (capacity, IP, or other concerns), guide them to the better recipes. You’ve probably made the dish many times if you’ve worked across several organisations. That insight is gold for people wanting to do the right thing but unsure how.

After every Ethics Insight project, I review the output and determine what could be anonymised, sanitised, and generally made more accessible. Over those five years, this led to a library of ~230 pieces of content, resources, policies, tracking tools, etc. So, when I’m asked those “how” questions, it’s easier to share a few examples (or customise them if the scope allows).

As a purchaser and seller of services, I now see both sides. It takes years to acquire knowledge and do things efficiently. That should command a premium. But indeed, there’s a middle way. Back to the recipe analogy:

Private chef work (in my world, onsite advisory, like investigative support) costs the most. Then, there’s a restaurant (a selection of options customised for the consumer). Next, we have cookery classes (guided implementation support with pre-defined ‘ingredients’). Finally, cookbooks, blogs, videos, etc., for mass-market consumption (that library of resources).

Where can you use the cookbook approach with the content you create, supporting key stakeholders accordingly? If we want to reduce supply-chain, third-party, or whatever-we-call-it risks, we need to change the existing models to help them quickly select recipes that satisfy their needs.

Need more?

Book a (free) strategy session, get new articles, and other content designed to be useful and fun.

Your Quick Guide To Managing Ethics & Compliance

Be the first to know

Subscribe to receive a weekly newsletter with trends, news, and hacks for all things risk. PLUS, behavioural science, investigations, human risk, and alternate perspectives.