Compliance Manager role in modern organizations-Empower decision makers

  • by gcarroll@fasttrackaust.com (Greg Carroll)
  • 07 Sept, 2015
The Compliance Manager’s role in the modern organization is to enable/empower decision makers to take action and leave the building defensive walls to the Risk Manager with his heat maps. So how can compliance managers start realising their value adding role?

The Basics

Let’s look at the basic tenets for good decision making from Harvard Business Review article The Effective Decision by Peter F. Drucker:

  1. Classifying the problem. Is it generic? Is it exceptional and unique? Or is it the first manifestation of a new genus for which a rule has yet to be developed?
  2. Defining the problem. What are we dealing with?
  3. Specifying the answer to the problem. What are the “boundary conditions”?
  4. Deciding what is “right,” rather than what is acceptable, in order to meet the boundary conditions. What will fully satisfy the specifications before attention is given to the compromises, adaptations, and concessions needed to make the decision acceptable?
  5. Building into the decision the action to carry it out. What does the action commitment have to be? Who has to know about it?
  6. Testing the validity and effectiveness of the decision against the actual course of events. How is the decision being carried out? Are the assumptions on which it is based appropriate or obsolete?

To anyone familiar with ISO 9001:2015 this would strike a chord.  Context, Identify, Analyse, Evaluate, Treat, Review.  But it doesn’t matter how good your solution is, if you don’t get No. 1 right!

Thinking Fast and Slow

In Danial Kahneman’s “Thinking Fast and Slow”, he categorizes decision making into “Fast thinking”, jumping to conclusions, and “Slow”, analytical reasoning.  Both are correct in their applicable circumstances.  Fast thinking, or jumping to conclusions, is acceptable if the conclusion is likely to be correct and the cost of the occasional mistake affordable. It’s a risky approach when the situation is unfamiliar, the stakes high, and there isn’t time to collect more information. Fast thinking uses the situational context as the framework for identifying the problem then jumps to known solutions to find the closest fit.  In management speak, we use Fast Thinking for tactical decision making and Slow Thinking for Strategic decision making. 

Although both types of thinking are valid, in business life tactical decision making is far more prevalent and a greater influence on organisational performance.   I will cover tactical and strategic decision making individually in the follow-up articles but here I will start with understanding decision making and the critical first step of framing context.

The majority of writings on decision making concentrate on awareness of bias, validation of sources, and seeking opposing evidence (see COSO “Enhancing Board Oversight by Avoiding and Challenging Traps and Biases”).  Unfortunately, most of these are rejected by operational management as self-evident and impractical in real world i.e. add no value.  The old adage of “When you're up to your ass in alligators, it's hard to think about draining the swamp" comes to mind.

Identifying Context

The secret to successful decision making is identifying the correct context. Senior management’s propensity for “fast thinking” becomes a legitimate tactical practice if operating within the correct context. Danial Kahneman’s highlight the importance of understanding context with the example of the statement “Ann approached the bank”. It conjures up responses to a financial establishment if taken in one context but a totally different scenario if we know she had previously been floating down a river.  The key is to enable decision makers with the ability to quickly visualise context of a situation in relation to its surrounding influences, drivers and the real objective.

Napoleon, arguably one of the greatest strategists (Strategic Thinking) of all time, was also a firm believer that “A battle plan is excellent until the first shot is fired”. He would meticulously research, analyse and prepare scenarios for possible outcomes of a battle, then drill those scenarios into his Marshals to give them the autonomy to act independently (Tactical Thinking) once fighting started.

What Napoleon was doing was instilling a set of “contexts” into his generals to facilitate future good tactical fast thinking when needed. To quote him again: “In war there is but one favorable moment; the great art is to seize it!” Isn’t this the basis of success in today’s disruptive and complex business environment? Identifying an opportunity and seizing the moment – carpe diem!

Step number 1

The simplest and most rewarding step you can take is to give operational management a tool to quickly visualise the relationship between all inputs, outputs, and objectives in a situation. This is the domain of today's Compliance Manager. There are a swath of technologies available to provide this level of management insight, far better than that those ubiquitous dashboards that tell us about the past but not much about where to go.

Secondly, if opportunities were simple, they would have already been exploited. The future is complex, with a high level of uncertainty. This is the world in which we live and it needs decision making tools that can handle real world complexity and uncertainty. Structural/causal modelling is aimed at understanding complex systems and therefore a perfect place to start the move from the current practice of choosing a strategy and “going-for-it” with a hope and prayer, to a deliberate plan avoiding obstacles and choosing the fastest and most efficient path to market or success.

Compliance Managers’ role in the modern organization is to enable/empower decision makers to take action and leave the building defensive walls to the Risk Manager with his heat maps. Establishing an informed and supportive decision environment with appropriate tools will enable operational management to understand the possible options, outcomes and how to monitor their execution to ensure positive outcomes.

 

by gcarroll@fasttrackaust.com (Greg Carroll) 05 Apr, 2017
The benefits of SharePoint as a content management system and information portal tool are indisputable.  With great search functionality and user definable portal pages SharePoint is now the leading Content Management solution chosen by most IT departments. But what if your business demands strict document controls protocols, not just because it’s good practice but life depends on it?  Unfortunately there is generally a poor appreciation by IT departments of the importance of document control in mission critical business. 
by gcarroll@fasttrackaust.com (Greg Carroll) 11 Oct, 2016
It is not uncommon for laboratories to be saddled with maintaining both ISO 17025 and ISO 9001 certification. Although it is simpler to create and implement two QMS – and to "merge" those activities which can be merged – this approach is arduous, inefficient, and prone to mistakes.
by gcarroll@fasttrackaust.com (Greg Carroll) 15 Sept, 2016
Senior management have to come to grips with the fact that Digital Transformation is not an Event but rather the operating environment of 21st century business. 
by gcarroll@fasttrackaust.com (Greg Carroll) 22 Aug, 2016
Last week saw the latest in misguided innovation talkfests, the AFR Innovation Summit #Innovation16.  For several days academics, public servants, journalists, and corporate employees put forward their insights into how Australia can develop an Innovation culture. 
by gcarroll@fasttrackaust.com (Greg Carroll) 25 Jul, 2016
Effectiveness is the holy grail of Compliance Management.  Whether regulatory or ERM, ensuring business is conducted as intended is the base requirement to optimising your organization’s performance.
by gcarroll@fasttrackaust.com (Greg Carroll) 17 Jun, 2016
2016 has seen a virtual tsunami of compliance failures involving some of our largest companies. From Mitsubishi to VW, from ANZ to Target, almost weekly there have been media reports about some company employees having run amok – unbeknownst to their executives and boards. People are asking: “What happened to the compliance management systems that are supposed to monitor and prevent such abuses?” Executives and boards are naturally starting to question the entire compliance management function. 
by gcarroll@fasttrackaust.com (Greg Carroll) 18 Jul, 2015
With the release of the Final Draft of ISO9001:2015 this week and its focus on risk-based Compliance Management, I thought I would share our approach to Risk-Based Auditing from our experience with the likes of Defence Aviation and the Australian Quarantine Inspection Service, both leaders in the field.
by gcarroll@fasttrackaust.com (Greg Carroll) 03 Jul, 2015
Mere compliance with a Framework is an insufficient audit approach; it is critical to assess whether it is current, timely, communicated broadly, and meets the needs of the business. The 4 biggest mistakes are:       Not being Outcome focused      Not using Risk base targeting      Not Value Adding      Not being timely
by gcarroll@fasttrackaust.com (Greg Carroll) 28 May, 2015
Why, with the number of fertile minds that exist in our field, is it still a case of an irresistible force meeting an immovable object.  The paradox I believe, like our would-be entrepreneurs, is one of approach.
by gcarroll@fasttrackaust.com (Greg Carroll) 22 Apr, 2015
Return of Investment (ROI) does not come for automating a process but from using it to add value.  Value adding comes from targeting time and resources, risk based thinking, and Business Intelligence where they can deliver the greatest benefit to achieving the organisation’s strategic goals. 
Show More
Share by: