Journal of Operational Risk

Risk.net

The Compliance Index: a behavioral approach to compliance risk management in the (post-) Covid-19 era

Sebastian Rick and Ralf Jasny

  • Hybrid work has made traditional controls insufficient to demonstrate the effectiveness of compliance.
  • To address these changes brought up by Covid-19, measuring employee perceptions and conduct is key.
  • To this end, we present an empirically based, practically applicable behavior measurement system.
  • This measurement system expresses the effectiveness of compliance in a leading key indicator.

The Covid-19 pandemic, with its new hybrid work models, has meant that conventional control systems set up for controlling and monitoring the effectiveness of compliance programs quickly reached their natural limits. In particular, when employees work from home, formal controls (such as auditing and monitoring procedures) to mitigate compliance risk are difficult or impossible to implement for legal and technical reasons. Thus, a paradigm shift away from such controls to a behavioral approach is required. To address the changes in the workplace triggered by the Covid-19 pandemic, we present the Compliance Index, which places the legitimacy of compliance programs in organizations at the center of these considerations. The Compliance Index is an empirically based behavioral measurement system for controlling and monitoring the effectiveness of compliance programs to mitigate compliance risk. We discuss the nature and purpose of the Compliance Index and explain the theory underlying the model and the quantitative approach employed to estimate the model parameters. We find that ethical leadership and compliance programs that focus, for example, on detecting misconduct, pursuing complaints or penalizing rule violations have a positive effect on the legitimacy of compliance programs; the legitimacy of compliance programs has a positive effect on employees’ willingness to report violations; and the legitimacy of compliance programs has a negative effect on compliance risk. Finally, we discuss the impact of the Compliance Index on the work of practitioners and highlight approaches for further research.

Sorry, our subscription options are not loading right now

Please try again later. Get in touch with our customer services team if this issue persists.

New to Risk.net? View our subscription options

If you already have an account, please sign in here.

You need to sign in to use this feature. If you don’t have a Risk.net account, please register for a trial.

Sign in
You are currently on corporate access.

To use this feature you will need an individual account. If you have one already please sign in.

Sign in.

Alternatively you can request an individual account here: