The Culture Question
Over the past decade, I’ve watched institutions transform from ones where compliance was a burden to ones where compliance was a point of pride. The difference wasn’t new policies or better forms. The difference was culture.
Culture is how an institution behaves when no one is watching.
An institution with a strong compliance culture doesn’t follow rules because OCC requires it. It follows rules because the institution values doing things correctly, protecting people, and maintaining the integrity that makes the institution trustworthy.
Building that culture is possible. It requires deliberate leadership, clear communication, and consistent reinforcement. This guide is based on what successful institutions have done.
Why Culture Matters
The Limitations of Rules
Rules alone don’t create compliance:
- Rules tell people what to do
- Rules don’t explain why it matters
- Rules are easy to circumvent
- Rules can feel like external control
- Rules don’t survive when leadership isn’t watching
The result: Institutions with rules but weak culture have compliance problems.
The Power of Culture
Culture that values compliance creates:
- Voluntary adherence (not forced compliance)
- Problem-solving mindset (fixing issues before they become violations)
- Peer pressure for compliance (staff hold each other accountable)
- Institutional pride (staff take pride in doing things right)
- Self-improvement (institutions improve without external pressure)
The result: Institutions with strong compliance culture pass audits easily because compliance is built into who they are.
Level 1: Leadership Commitment
The Non-Negotiable Starting Point
Compliance culture begins with leadership making a genuine commitment. This isn’t about saying the right things. It’s about demonstrating through action that compliance matters.
Leadership demonstrates commitment by:
1. Allocating Resources
- Budget for compliance staff
- Budget for training
- Budget for systems and technology
- Budget for audit and assessment
- Leadership puts money where mouth is
2. Setting Clear Expectations
- Leadership articulates why compliance matters
- Leadership explains what compliance looks like
- Leadership identifies compliance as a core institutional value
- Leadership communicates through words and action
3. Modeling Compliance
- Leadership follows procedures like everyone else
- Leadership doesn’t circumvent systems
- Leadership respects compliance staff
- Leadership is transparent about decisions
- Leadership admits mistakes
4. Protecting Compliance Staff
- Compliance personnel report to leadership directly
- Compliance personnel have authority to enforce policies
- Compliance personnel are protected from retaliation
- Leadership backs compliance staff in disputes
- Compliance violations are taken seriously
The Leadership Conversation
Leadership needs to ask itself:
- Do we genuinely value compliance or just want to avoid consequences?
- Are we willing to invest real resources?
- Are we willing to change systems that aren’t working?
- Are we willing to address staff who resist compliance?
- Are we willing to be transparent about our compliance progress?
Honest answers to these questions determine whether culture change is possible.
Level 2: Clear Communication
The Message
The institution needs to communicate clearly:
Why compliance matters:
- It protects people in our care
- It protects staff by establishing clear procedures
- It protects the institution by avoiding violations
- It maintains the public trust
- It demonstrates that we take our mission seriously
What compliance looks like:
- Specific procedures everyone follows
- Documentation of decisions
- Transparency in our work
- Accountability when problems occur
- Continuous improvement
What the institution expects:
- All staff follow procedures consistently
- Staff speak up when they see problems
- Staff ask for help when procedures are unclear
- Staff participate in training
- Staff understand that compliance is everyone’s job
Communication Methods
Successful institutions communicate through:
- Regular all-staff meetings
- Written policies and procedures
- Email messages highlighting compliance topics
- Training sessions
- Recognition of compliance excellence
- Discussion of compliance challenges
Consistent Messaging
The message is consistent:
- Leadership says the same thing staff hear
- Compliance is treated as important in meetings and budgets
- Policies match the stated values
- Problems are addressed consistently
- Success is recognized publicly
Level 3: Clear Procedures
What Makes Procedures Effective
Procedures are only effective if they:
- Are Written - Vague procedures are useless
- Are Clear - Procedures don’t assume knowledge
- Are Accessible - Procedures are easy to find
- Make Sense - Procedures aren’t bureaucratic for no reason
- Have Authority - Procedures have explicit leadership backing
- Are Taught - Procedures are taught, not just posted
- Are Enforced - Non-compliance has consequences
Building Your Procedures
Start with your core functions:
- How do we process cases/manage detention?
- How do we handle complaints?
- How do we maintain records?
- How do we handle money?
- How do we discipline staff?
- How do we communicate with the public?
For each function:
- Document current practice
- Identify what could go wrong
- Design procedures to prevent problems
- Get staff input on feasibility
- Implement and train
- Monitor and adjust
Procedure Review
Procedures shouldn’t be static:
- Review at least annually
- Ask staff for feedback
- Look at what violations have occurred
- Update based on legal changes
- Update based on operational experience
Procedures that improve over time signal that the institution cares about getting them right.
Level 4: Training and Development
Initial Training
New staff need:
- Overview of institutional mission and values
- Training on core procedures
- Training on their specific job
- Training on compliance expectations
- Testing to verify understanding
- Documentation of completion
This investment prevents most problems. Staff who are trained well make fewer mistakes.
Ongoing Training
Successful institutions provide:
- Annual refresher training for all staff
- Training on new procedures
- Training on identified problems
- Training in response to violations
- Specialized training for supervisors
- Training for leadership
Training Quality
Good training:
- Is interactive, not just lecture
- Uses real examples from your institution
- Includes practice and feedback
- Tests understanding
- Is documented
- Is updated based on feedback
Training Culture
Institutions with strong compliance culture treat training as:
- An investment in staff
- A sign that management cares
- An opportunity to improve
- A professional development benefit
- Regular and expected
Level 5: Accountability Systems
Making Accountability Real
Accountability means:
- Non-compliance has consequences
- Consequences are applied consistently
- Consequences increase with severity
- Consequences apply to everyone equally
- Consequences are applied with fairness and due process
Consequence Structure
Consequences might include:
- Coaching: For first-time minor issues, explain expectation and help staff improve
- Written Warning: For repeated minor issues or first-time moderate issues
- Suspension: For serious violations
- Termination: For repeated serious violations or egregious violations
Key discipline: Consequences are applied consistently. If you enforce rules for some staff and not others, culture fails.
What Accountability Isn’t
Accountability isn’t:
- Punishment for mistakes
- Punishment for asking questions
- Punishment for reporting problems
- Punishment for being new or inexperienced
Culture note: Staff need to feel safe reporting problems and asking for help. Accountability for not reporting or not asking for help is different.
Level 6: Recognition and Reinforcement
Why Recognition Matters
Recognition signals what the institution values:
- When you recognize compliance excellence, you tell everyone that compliance matters
- When you recognize problem-solving, you encourage staff to identify issues
- When you recognize transparency, you encourage honesty
- When you recognize improvement, you encourage staff development
What to Recognize
Successful institutions recognize:
- Compliance achievements (zero violations in a department)
- Problem identification (“Thank you for identifying that problem before it became an issue”)
- Process improvements (“We changed the procedure based on staff feedback”)
- Training participation (“Thank you for attending extra training”)
- Integrity (“Thank you for doing the right thing even when it was hard”)
Recognition Methods
Recognition can be:
- Public acknowledgment in meetings
- Written recognition
- Compensation (bonuses, merit increases)
- Advancement opportunities
- Special assignments
- Leadership attention
Key principle: Recognition should be proportional to the achievement and consistent.
Level 7: Problem Identification and Correction
Creating a Reporting Culture
Institutions with strong compliance culture have staff who report problems because:
- They know problems will be taken seriously
- They know they won’t be retaliated against
- They know the institution will fix systemic problems
- They see examples of problems being addressed
- They understand that reporting protects everyone
Multiple Reporting Channels
Provide options for reporting:
- Direct report to supervisor
- Anonymous hotline
- Compliance officer
- Written submission
- Anonymous letter
- External reporting option
Different staff are comfortable with different methods. Provide options.
Investigating Reports
When problems are reported:
- Investigate promptly
- Investigate fairly
- Take all concerns seriously
- Document the investigation
- Report findings to relevant people
- Take corrective action
- Follow up to verify correction
Communicating Results
When problems are investigated:
- Tell the person who reported what will be done
- Tell relevant staff about corrections
- If systemic problems are identified, fix them institution-wide
- Recognize staff who identified problems
- Use the incident to improve systems
Level 8: Continuous Improvement
Learning from Experience
Institutions with strong compliance culture view violations as learning opportunities:
- When violations occur, ask why
- Fix the system, not just the person
- Train staff based on what violations reveal
- Update procedures based on what went wrong
- Communicate lessons learned
Data-Driven Improvement
Track:
- Violations by type
- Violations by department
- Violations by procedure
- Trends in violations
- Results of corrective action
Use this data to identify patterns and prioritize improvement efforts.
The Transformation Timeline
Building compliance culture takes time. Here’s a typical path:
Month 1-2: Foundation
- Leadership commits
- Compliance officer hired
- Core procedures identified
Month 3-6: Building
- Procedures written
- Training developed
- Initial training delivered
- Communication begins
Month 7-12: Reinforcement
- Ongoing training
- Accountability applied consistently
- Recognition programs
- Early successes celebrated
Year 2-3: Integration
- Compliance becomes normal
- Staff view compliance positively
- Violations decline
- Culture becomes self-reinforcing
- Institution becomes model
Measuring Progress
How do you know compliance culture is developing?
Early signs:
- Staff ask compliance questions
- Problems are reported before OCC finds them
- Training participation is high
- Staff understand why procedures matter
- Violations decline
Strong signs:
- Staff take pride in compliance
- Procedures are followed even when no one is watching
- New staff learn culture from experienced staff
- Institution improves procedures proactively
- OCC investigations are smooth
Mature culture:
- Staff go above and beyond requirements
- Institution is viewed as a leader in compliance
- Staff retention is high
- Institutional reputation is strong
- Oversight is minimal because compliance is assumed
Common Obstacles and Solutions
Obstacle 1: Resistance from Mid-Level Management
Some middle managers see compliance as micromanagement.
Solution:
- Help them understand compliance is operational efficiency
- Show them how clear procedures reduce their workload
- Involve them in procedure design
- Hold them accountable for compliance like everyone else
- Recognize them for compliance success
Obstacle 2: Staff Burnout from Change
Too much change too fast causes resistance.
Solution:
- Implement change thoughtfully
- Train thoroughly before requiring change
- Listen to staff feedback
- Don’t implement everything at once
- Support staff through transition
Obstacle 3: Resource Constraints
“We can’t afford to invest in compliance.”
Solution:
- Show that violations are more expensive than prevention
- Start with most critical procedures
- Build resources over time
- Seek external funding for training
- Prioritize ruthlessly
Obstacle 4: Leadership Turnover
New leaders may not prioritize compliance.
Solution:
- Embed compliance culture in systems, not just leaders
- Ensure compliance reporting structure survives leadership change
- Document and communicate the culture
- Make compliance a hiring criteria for leadership
The Invitation
Building compliance culture is hard work. It requires sustained leadership attention, resources, and follow-through.
But institutions that do it reap benefits:
- Fewer violations
- Smoother OCC investigations
- Higher staff satisfaction
- Better outcomes for people served
- Stronger institutional reputation
- Greater organizational resilience
If your institution is ready to move from “complying because we have to” to “complying because we believe in it,” the path is clear.
Leadership commits. Communication is clear. Procedures are rigorous. Training is excellent. Accountability is fair. Recognition is genuine. Improvement is continuous.
Culture follows.
Start today.