The crisis now unfolding at Volkswagen over its emissions cheating underscores yet again that "compliance" means a lot more than just making sure some underling fills out the right paperwork.
The risks of inadequate safeguards can be huge. A single episode can lead to a chain reaction of liability.
The global financial services firm JPMorgan Chase & Co. has racked up tens of billions of dollars in settlements and other costs since 2008, much of it to close the books on deals made during and after the financial crisis. Outside of the finance industry, in the past decade costly scandals have touched such elite global companies as Wal-Mart Stores and Siemens.
These companies have compliance officers. They have codified rules about how to treat everybody from employees to vendors. Volkswagen has these things, too. The code of conduct guide I found online from Volkswagen is a slick, 24-page publication with a cover that simply said "Rules. Know. Follow."
"This was Volkswagen," said Paul Vaaler, a professor at the University of Minnesota, in both the law school and business school. "I'm sure the paperwork [on emissions] was all in order. It was just wrong."
What's happened at VW, of course, wasn't a simple case of some incorrect forms or a sales manager failing to keep some salespeople in line.
The German-based auto giant has admitted to writing software to detect when a diesel-powered car is undergoing testing for emissions controls, in a pretty straightforward effort to game the system. The software is installed on roughly 11 million vehicles worldwide.
That doesn't sound like a run-of-the-mill failure of compliance, and of course the scope of the problem means it isn't. But this is a compliance case executives ought to study closely, for compliance means having a management organization effective enough to keep bad behavior from happening.